Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.cer
File: 2A2DC1A8A522E5692AEF631E05B5909122DEF928.cer (raw, json)
Hash identifier: L4AGQml/FuYeyVOdAxleHghCnoksOkVTsc2T+oWrP6E=
Subject key identifier: 2A:2D:C1:A8:A5:22:E5:69:2A:EF:63:1E:05:B5:90:91:22:DE:F9:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7929B2089A6AFAD53450FA89E20345092C3BBFD2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.mft
caRepository: rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 20 Apr 2024 01:50:05 +0000
Certificate not after: Sat 19 Apr 2025 01:55:05 +0000
Subordinate resources: AS: 270414
IP: 190.89.252.0/22
IP: 2804:6ba4::/32
Validation: Failed, certificate revoked on Sat 20 Apr 2024 03:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:29:b2:08:9a:6a:fa:d5:34:50:fa:89:e2:03:45:09:2c:3b:bf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 20 01:50:05 2024 GMT
Not After : Apr 19 01:55:05 2025 GMT
Subject: CN=2A2DC1A8A522E5692AEF631E05B5909122DEF928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:c8:fb:8c:b4:a3:92:0d:80:66:00:87:40:
cd:21:7b:9f:5d:cd:91:a3:c2:15:00:a8:2a:e9:d0:
cb:e5:ac:86:a3:f3:15:74:34:f1:db:7a:d8:71:41:
20:63:f8:8d:6f:a3:df:b9:54:bb:6f:95:2b:2d:a4:
ea:cc:b8:68:c0:f6:e1:77:7a:6c:c8:79:fb:4d:6e:
fb:a2:1a:07:ab:7e:48:21:b5:3e:43:35:f4:73:18:
a6:08:96:8f:26:9d:21:8a:3c:8b:ad:5a:e8:03:e2:
66:09:d9:33:6e:17:c8:b4:cc:cf:86:81:d5:9c:72:
ec:fb:6d:76:52:02:4d:9b:b6:3d:ef:c9:04:f0:75:
22:0e:87:46:66:e0:b2:d0:a7:45:86:ca:bc:f2:84:
58:15:0c:0a:88:c5:93:aa:44:67:cf:53:f5:35:ee:
58:64:10:9c:b3:86:f7:50:68:3e:10:a9:f5:56:5e:
61:cd:f5:d9:d4:ba:f3:be:09:d7:b1:01:01:68:a1:
25:19:45:d2:79:61:41:10:59:31:14:4a:71:90:b6:
29:e8:3d:f4:fd:49:4d:cf:cb:2e:77:0e:72:ca:e5:
fc:f3:ae:72:36:63:26:02:67:2e:76:6c:06:06:68:
c1:0f:fb:6e:04:79:17:48:41:49:1e:7a:65:9f:52:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2A:2D:C1:A8:A5:22:E5:69:2A:EF:63:1E:05:B5:90:91:22:DE:F9:28
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.252.0/22
IPv6:
2804:6ba4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270414
Signature Algorithm: sha256WithRSAEncryption
8c:46:85:98:75:00:b2:3a:bf:4e:74:c8:2e:1e:2c:f8:fe:c8:
c4:45:e7:f6:17:5f:b7:4e:79:2b:36:5d:f3:0d:bb:90:e1:7f:
38:a7:83:f2:d5:f3:ba:04:8a:94:28:6e:e9:df:0b:cd:11:af:
8a:63:51:1f:71:04:1d:95:0e:45:45:06:02:e3:ff:f1:56:2a:
8d:f2:2a:4e:5f:ca:dc:3d:8c:69:1d:35:f5:20:d2:c9:4b:bc:
5f:35:45:12:12:9c:47:2d:f1:ac:37:f2:f9:fc:ba:63:8e:31:
3e:82:bb:9f:2f:3b:c8:e2:4e:6c:e5:92:fe:47:34:a6:13:98:
13:25:cf:8c:67:4a:0b:51:9a:aa:36:90:ac:2b:93:47:b8:c0:
5b:dc:b4:92:e2:cb:90:2b:93:b8:85:b3:48:04:b9:88:31:ae:
32:61:9f:4f:d9:4e:f6:26:ea:e5:df:4c:07:f5:7f:59:35:1d:
ec:98:c3:2f:2a:b2:7d:d5:a6:15:24:20:f6:51:f6:be:72:f2:
d5:15:b1:e7:99:86:e3:7a:9d:58:17:a2:3a:88:87:5b:54:33:
dd:22:c8:21:52:f2:c9:d9:0b:c8:01:ce:0e:ac:91:eb:4d:66:
51:53:86:2e:d2:2f:61:d2:3d:b5:8f:36:eb:68:46:b7:28:b8:
86:5c:df:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org