Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer
File: 2AA457BEF432F83463DE6AD111F6881D89605D25.cer (raw, json)
Hash identifier: 55WOKd+7jjP/15B8FyPa+s8Wp0k0CM0W5UCk710P9gM=
Subject key identifier: 2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2A3D944B1F87DF1EF76C3B522ACB43A17BD78899
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.mft
caRepository: rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 19:01:31 +0000
Certificate not after: Wed 02 Apr 2025 19:06:31 +0000
Subordinate resources: AS: 264409
IP: 131.221.44.0/22
IP: 2804:1e20::/32
Validation: Failed, certificate revoked on Sun 20 Oct 2024 13:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:3d:94:4b:1f:87:df:1e:f7:6c:3b:52:2a:cb:43:a1:7b:d7:88:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 19:01:31 2024 GMT
Not After : Apr 2 19:06:31 2025 GMT
Subject: CN=2AA457BEF432F83463DE6AD111F6881D89605D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:f1:90:59:38:08:69:0a:e5:1b:d2:50:43:
e1:d0:b9:4d:60:de:e1:b7:b6:5d:a8:5f:64:5a:28:
43:ec:6b:c4:ad:42:16:df:c4:c5:db:3e:b4:14:ee:
a4:23:8b:66:89:63:3c:ed:ec:6b:76:3a:78:73:d6:
f1:5c:f5:58:3e:e0:e8:77:88:63:ae:5d:8e:c7:e8:
ec:17:40:98:55:46:40:f4:b7:d1:64:f4:b2:4a:1d:
70:84:f1:c5:83:5e:5e:a3:48:fc:1c:c4:db:a9:61:
46:b1:5e:6c:66:45:0c:d3:37:94:53:fa:c1:30:aa:
f5:d4:b2:dd:d9:69:db:05:61:38:5e:aa:08:9a:71:
5d:38:fc:95:f6:d3:06:e4:8e:3f:89:a8:47:a1:07:
0e:4c:2b:73:38:a9:18:c6:ca:76:57:60:0b:ac:e3:
e1:79:23:f0:5a:3e:4a:8d:63:01:49:84:9a:12:8d:
d7:b1:30:9a:6c:61:ff:a2:d7:49:3c:f4:35:60:62:
03:59:34:62:cf:a4:ad:16:b1:cd:33:df:1f:94:58:
a0:cd:00:1b:47:f7:fb:96:ea:f9:1c:91:3b:0d:7c:
46:58:2f:94:ce:4f:c0:ea:e7:b2:17:b8:63:50:eb:
a8:2f:73:e8:ea:14:69:e1:a4:51:99:ce:4f:97:d6:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.44.0/22
IPv6:
2804:1e20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264409
Signature Algorithm: sha256WithRSAEncryption
6e:f0:fc:d5:d1:24:21:06:68:59:46:66:42:a9:b5:84:9a:54:
b2:f1:cf:93:e7:b1:1f:55:e7:25:6f:a2:c1:e1:82:bf:79:ab:
69:e5:34:fc:93:88:a5:be:2c:9d:d1:14:48:4a:2d:2e:7a:3e:
da:8a:8c:8c:51:1b:26:b5:b8:cd:11:f8:d5:a5:b8:bd:79:84:
16:0a:7a:0c:48:e3:b9:49:4d:95:59:1f:4b:6b:39:60:95:d6:
b8:69:ec:92:d0:9c:42:1f:40:c8:f3:5a:9a:66:08:7d:2e:96:
82:5f:7f:e9:f0:ef:30:79:0b:2c:ae:82:86:4d:de:17:2a:cf:
5c:8f:e6:69:05:3e:b0:a3:65:7a:a3:ee:b9:8b:0f:01:4b:1b:
a5:08:5e:0f:9e:54:ff:52:a3:d8:0d:5b:d3:c2:48:d0:72:8f:
bc:67:d6:dc:65:64:f2:4f:5e:c8:38:ce:04:4b:7d:f0:f8:c3:
c4:d2:c8:90:25:f7:03:58:cd:47:9e:4b:f3:56:9b:8c:40:e9:
8a:66:76:29:9e:44:2a:10:e4:2c:2d:ba:9f:e8:1d:28:cf:ec:
7d:be:de:23:15:b5:78:4e:bb:2c:ae:11:22:91:b5:94:28:88:
7b:37:31:1d:81:68:ed:c8:ad:1c:e2:67:ed:72:18:26:fa:c5:
56:5c:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 18:11:12 2024 by rpki-client on console-ams.rpki-client.org