Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer
File: 23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer (raw, json)
Hash identifier: oTl0EswNdNVNntDTi0KGkeP1mPVpEHWKd1LJ/xGazVA=
Subject key identifier: 23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 645FFCDDA8EA7F2454AA0097812C7B70D5093A9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.mft
caRepository: rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 06 Nov 2024 17:56:59 +0000
Certificate not after: Wed 05 Nov 2025 18:01:59 +0000
Subordinate resources: AS: 265055
IP: 170.231.120.0/22
IP: 2804:3218::/32
Validation: Failed, certificate revoked on Wed 06 Nov 2024 19:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:5f:fc:dd:a8:ea:7f:24:54:aa:00:97:81:2c:7b:70:d5:09:3a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 6 17:56:59 2024 GMT
Not After : Nov 5 18:01:59 2025 GMT
Subject: CN=23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:27:f3:1b:9c:6f:fc:86:65:05:1b:50:29:
e0:73:bd:7e:82:06:f4:eb:81:15:b5:ac:5f:c1:4b:
4f:54:d2:ba:cd:1c:5b:7d:36:4a:bf:73:dd:cc:bd:
59:2f:a7:33:2e:48:89:99:80:a1:72:ac:89:90:7e:
45:6d:73:07:e1:44:cd:6a:36:07:d1:ec:63:1f:54:
fd:fb:57:b7:70:8e:7e:81:8b:67:01:0b:75:95:ed:
89:89:b8:9b:2e:06:4f:ce:2e:c4:26:6b:d2:be:6b:
5d:b4:b2:40:b9:ef:2a:11:c8:e0:b7:89:35:ec:b6:
f9:57:30:72:ac:2d:a0:37:9f:2d:5b:4e:f9:38:6e:
c8:df:82:d3:d7:b5:7a:24:fe:fd:8a:f1:68:70:28:
b8:60:88:fe:0c:3d:3f:2a:c5:28:73:fa:52:9d:7a:
e6:ca:08:28:47:28:5f:cc:4e:ec:b7:57:7b:2b:2a:
7f:cb:2e:f1:68:82:0c:5e:49:76:61:db:ae:93:5f:
d9:db:c4:36:72:9c:80:b1:7d:80:d9:f8:70:57:20:
27:36:20:81:5e:9d:7e:b4:9c:55:08:18:89:ed:61:
82:8b:8e:1f:68:29:08:69:da:0f:28:39:15:f4:3f:
03:6f:97:42:62:45:16:c8:ba:03:4c:53:bd:4b:b3:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.120.0/22
IPv6:
2804:3218::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265055
Signature Algorithm: sha256WithRSAEncryption
32:3c:4d:0f:fc:aa:9e:e7:84:e2:2c:1e:7f:46:51:42:fa:56:
61:36:5b:89:8f:98:8f:f3:62:c6:f3:03:a1:c8:32:76:5d:e2:
01:ac:09:76:ea:cf:f2:8b:ca:4a:d4:8d:1e:83:c0:04:25:72:
33:46:1b:17:8f:26:f7:80:31:bd:56:4e:76:61:5a:59:02:78:
93:2f:88:13:73:7b:de:08:4a:9e:e0:2e:d6:e3:e4:aa:05:eb:
48:97:7f:c8:a7:5b:9d:34:52:74:1f:10:88:ab:d6:a7:20:0b:
77:bd:66:da:dc:15:dc:5a:16:6a:47:a9:a1:8f:c7:62:44:da:
f4:e8:36:1a:a4:a6:b5:93:31:12:40:38:78:32:9b:6b:24:c6:
86:25:32:76:09:b6:d7:61:6c:31:f9:f0:2d:12:a6:8d:10:94:
07:4b:33:e0:13:01:e1:5f:c7:11:b9:3b:28:81:08:73:97:93:
4a:87:8d:3c:01:32:16:55:b3:8b:45:2e:f6:c1:cf:cd:92:59:
e6:91:11:a4:eb:c3:2a:84:08:b9:47:4c:10:8d:e3:2c:5c:c3:
89:f3:fa:25:48:de:e4:c8:e8:e3:0e:21:36:30:5b:a6:44:4b:
75:ac:4d:d5:95:2b:6d:99:36:16:44:c8:c1:d2:4a:1d:29:5c:
f1:02:ba:b7
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZF/83ajqfyRUqgCXgSx7cNUJOpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDYxNzU2NTlaFw0yNTExMDUxODAxNTlaMDMxMTAvBgNV
BAMTKDIzQTc0OTVDQ0YyMDBCMUZDRThCRkZEOUEzNTg4REM3Mzg2RkREMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdCfzG5xv/IZlBRtQKeBzvX6C
BvTrgRW1rF/BS09U0rrNHFt9Nkq/c93MvVkvpzMuSImZgKFyrImQfkVtcwfhRM1q
NgfR7GMfVP37V7dwjn6Bi2cBC3WV7YmJuJsuBk/OLsQma9K+a120skC57yoRyOC3
iTXstvlXMHKsLaA3ny1bTvk4bsjfgtPXtXok/v2K8WhwKLhgiP4MPT8qxShz+lKd
eubKCChHKF/MTuy3V3srKn/LLvFoggxeSXZh266TX9nbxDZynICxfYDZ+HBXICc2
IIFenX60nFUIGIntYYKLjh9oKQhp2g8oORX0PwNvl0JiRRbIugNMU71LsxvFAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjp0lczyALH86L
/9mjWI3HOG/dFTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkpM
aEpmZTZoa05FSkF4YTZ6OXRNa3ROUHNCdWlZbkVyTHhmaGFjNWZzaFUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZK
TGhKZmU2aGtORUpBeGE2ejl0TWt0TlBzQnVpWW5Fckx4ZmhhYzVmc2hVLzEvMjNB
NzQ5NUNDRjIwMEIxRkNFOEJGRkQ5QTM1ODhEQzczODZGREQxNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqud4MA0EAgACMAcDBQAoBDIYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLXzANBgkqhkiG9w0BAQsFAAOCAQEAMjxND/yqnueE4iwe
f0ZRQvpWYTZbiY+Yj/NixvMDocgydl3iAawJdurP8ovKStSNHoPABCVyM0YbF48m
94AxvVZOdmFaWQJ4ky+IE3N73ghKnuAu1uPkqgXrSJd/yKdbnTRSdB8QiKvWpyAL
d71m2twV3FoWakepoY/HYkTa9Og2GqSmtZMxEkA4eDKbayTGhiUydgm212FsMfnw
LRKmjRCUB0sz4BMB4V/HEbk7KIEIc5eTSoeNPAEyFlWzi0Uu9sHPzZJZ5pERpOvD
KoQIuUdMEI3jLFzDifP6JUje5Mjo4w4hNjBbpkRLdaxN1ZUrbZk2FkTIwdJKHSlc
8QK6tw==
-----END CERTIFICATE-----
Generated at Wed Nov 6 22:55:50 2024 by rpki-client on console-fra.rpki-client.org