Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2.cer
File: 2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2.cer (raw, json)
Hash identifier: pZpCpCLXU7wegP3Ty3Qicy+7DNB3fmsaGsLvzs3aQOE=
Subject key identifier: 2B:B0:FB:0C:D2:AC:37:A1:5B:FE:78:54:A2:F3:4D:62:50:1A:97:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5D2ED1194D77CC78F22D5500776DE2C496538A86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2.mft
caRepository: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 30 Jul 2024 18:45:50 +0000
Certificate not after: Tue 29 Jul 2025 18:50:50 +0000
Subordinate resources: AS: 263444
IP: 138.36.164.0/22
IP: 177.91.160.0/22
IP: 2804:11dc::/32
Validation: Failed, certificate revoked on Wed 07 Aug 2024 19:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2e:d1:19:4d:77:cc:78:f2:2d:55:00:77:6d:e2:c4:96:53:8a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 30 18:45:50 2024 GMT
Not After : Jul 29 18:50:50 2025 GMT
Subject: CN=2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:79:d3:f9:48:c2:56:4f:98:4e:97:bc:5b:
37:24:04:61:15:5b:91:25:3c:35:0d:b4:bd:15:cb:
4c:a9:27:09:40:24:51:d2:ae:fc:58:99:6b:a7:93:
10:5b:d7:a5:e2:5c:fd:62:98:01:2c:cf:41:54:c5:
8e:cb:af:57:74:b7:6d:c8:c7:a0:fc:1f:67:71:89:
50:cc:b5:5c:9b:9b:83:dc:3c:ca:10:b0:54:4c:38:
dc:1a:10:4a:88:1b:ec:a5:c4:35:c6:68:cd:d2:ef:
78:42:38:ea:83:36:2e:b4:0c:00:98:9e:f8:99:d2:
46:48:63:79:b1:92:fc:1a:22:61:f0:37:e5:b8:4d:
bc:e7:70:a9:fd:2c:8a:22:d0:5e:8c:db:2c:c6:f1:
08:f4:c8:f9:8a:18:43:36:bd:fe:4b:4e:8c:ee:68:
57:df:5a:d3:b0:4a:f5:5f:25:98:b5:9a:da:f6:25:
4b:d2:81:5d:83:49:dc:30:a1:97:c6:71:c7:3a:40:
a2:a2:a9:81:14:66:33:44:d5:bb:b1:f7:0e:03:bb:
c4:88:df:9d:75:c5:7b:27:ce:f8:10:e8:4d:d0:a3:
09:46:b5:4d:98:e3:d6:75:57:99:37:d7:53:11:b5:
30:62:ff:d3:1a:4f:03:ed:8f:6a:a8:79:00:f8:66:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2B:B0:FB:0C:D2:AC:37:A1:5B:FE:78:54:A2:F3:4D:62:50:1A:97:C2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.164.0/22
177.91.160.0/22
IPv6:
2804:11dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263444
Signature Algorithm: sha256WithRSAEncryption
2c:d3:b1:b8:32:c6:1c:b8:1b:3e:fd:44:91:77:b7:4a:ed:35:
bf:68:96:dc:59:aa:a6:83:e7:9e:90:c5:82:c1:6d:21:e2:68:
73:69:a7:8c:8d:25:29:dc:f2:be:a4:d7:0b:9a:5a:ed:f4:12:
88:33:d4:91:d5:f1:94:7f:00:69:56:c8:17:48:8c:cd:fd:c0:
6f:e9:fb:18:38:a4:7e:3b:53:d4:f3:e1:ee:cd:d7:45:91:f6:
9c:99:cc:fd:80:f0:46:a7:59:16:bf:8f:fa:7d:43:4c:62:ac:
9a:2e:ee:db:72:1b:8e:ee:76:3c:d2:5a:04:76:72:62:7b:d3:
28:77:55:e5:f0:87:e0:d1:14:d2:f0:17:a1:ea:6d:f3:dd:65:
ce:37:a3:68:ca:0e:d3:50:ca:d8:51:41:4a:b0:94:b5:87:37:
bb:f1:41:83:8b:c0:c8:bd:55:1f:bc:82:19:56:33:06:c5:d6:
68:e5:bb:ec:38:01:2c:2d:d6:97:55:d9:8e:30:8b:c9:0b:75:
c0:d5:5d:6b:ef:f1:07:3c:1d:f2:44:7d:7e:cb:9e:e1:43:40:
5b:e3:e5:ad:5d:1f:f5:e5:2c:31:8c:98:ef:6f:80:2e:4b:97:
df:86:3a:9e:24:9b:c9:97:c3:e7:70:1b:f1:88:90:bf:4b:69:
99:df:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 22:08:47 2024 by rpki-client on console-fra.rpki-client.org