Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.cer
File: 2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.cer (raw, json)
Hash identifier: KusHRBO4qL39s1HcGxwBT1rza4SrxJmY8R2qJzbq4wg=
Subject key identifier: 2A:33:1F:F1:DB:9B:9F:1C:7A:D2:7A:FE:FD:FD:15:6E:6B:B2:4D:99
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2C51547705B5744E69B74107DE4FF9F10E0E9E04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.mft
caRepository: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 27 Jun 2024 15:35:07 +0000
Certificate not after: Thu 26 Jun 2025 15:40:07 +0000
Subordinate resources: AS: 263891
IP: 138.204.48.0/22
IP: 170.78.160.0/22
IP: 2804:2748::/32
Validation: Failed, certificate revoked on Wed 11 Sep 2024 16:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:51:54:77:05:b5:74:4e:69:b7:41:07:de:4f:f9:f1:0e:0e:9e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 27 15:35:07 2024 GMT
Not After : Jun 26 15:40:07 2025 GMT
Subject: CN=2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:d1:64:75:1a:4a:7c:cd:4b:6b:ce:ad:5a:
c0:41:b8:c5:05:fd:62:b6:62:7e:21:77:f9:61:44:
04:ea:3e:3d:e6:44:c4:95:f4:0f:c4:84:4a:0f:1b:
cf:6a:ae:c6:fe:3f:e7:7a:c3:c4:05:77:c6:7c:5b:
dd:2d:27:71:06:75:07:48:17:d8:ff:97:dd:6b:e9:
ee:4f:60:a0:96:95:bb:79:50:57:0a:a5:27:cd:d4:
9c:a0:44:8f:4d:12:8f:f0:95:95:f5:f3:fe:83:b8:
a1:3b:bd:a5:26:ad:0b:f4:bb:26:5f:b0:2b:9e:08:
8d:a2:58:55:1f:9c:48:d0:a8:c4:2d:56:f9:fe:d8:
d2:77:59:78:44:5c:d7:fc:b9:98:9b:5e:2f:98:e3:
12:18:bf:ff:10:c7:f1:5f:df:48:46:b2:d6:27:03:
1b:3b:9f:ab:84:10:a1:00:04:88:80:3f:0e:1a:a4:
ec:59:26:f7:ef:a3:c9:c9:e6:c0:ac:89:ef:68:ca:
3b:15:88:a5:b3:e0:2e:a7:63:35:f8:da:f7:43:bc:
7c:6d:a5:70:fb:a3:2c:7c:04:b9:d2:93:6a:ac:ef:
f0:4e:3e:b4:2c:99:a2:b5:fe:0e:75:43:a1:bf:62:
2d:fd:54:72:f3:11:59:89:dc:81:af:2a:f9:68:4d:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2A:33:1F:F1:DB:9B:9F:1C:7A:D2:7A:FE:FD:FD:15:6E:6B:B2:4D:99
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.48.0/22
170.78.160.0/22
IPv6:
2804:2748::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263891
Signature Algorithm: sha256WithRSAEncryption
77:e8:8c:78:49:ee:e5:65:2d:6e:06:88:10:34:58:aa:4c:70:
b2:71:77:00:47:be:fc:5e:98:e3:03:3b:bb:31:4a:5f:4c:3a:
c2:49:83:61:c9:07:f7:26:7f:eb:8e:1b:83:d1:06:da:98:18:
fd:d5:10:da:67:c6:6c:b7:09:0c:ce:9f:43:76:48:d4:f7:7d:
20:fe:3e:b8:dc:4a:8c:07:34:e4:0b:cc:8d:c7:61:a4:46:51:
30:12:2e:92:b7:bb:cc:d4:9f:d4:09:5b:50:2f:52:cc:30:39:
00:08:8f:65:40:20:a2:39:7f:ba:7b:e6:9e:47:2b:52:16:f0:
bc:f9:1c:b3:75:67:66:44:1e:7d:a7:0f:81:cd:7d:3c:ea:3b:
24:13:a9:ac:86:32:42:5a:a0:15:93:42:10:ba:df:d8:e9:e2:
66:84:ce:c1:f6:16:f3:79:e6:51:39:83:6a:b8:08:4f:c5:9b:
78:26:9b:32:17:3c:cc:65:4c:df:5c:46:4e:bf:65:35:1f:99:
90:47:35:c6:de:52:d8:51:b7:f5:3c:3f:74:9e:28:6c:f3:79:
b1:47:17:0e:66:88:a8:e4:7d:a3:9a:2f:07:6a:5e:ff:dd:ad:
ce:56:71:fb:45:13:d3:95:03:fc:f3:c6:1a:c6:c6:5e:8e:0b:
f9:94:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 19:10:19 2024 by rpki-client on console-fra.rpki-client.org