Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer
File: 2BE96A9D00DF227936266A4035089C530868CA3A.cer (raw, json)
Hash identifier: hwggQsKH9eD/gFvk4EYnC/f2T3EFmgc/fAlSZCMrDgo=
Subject key identifier: 2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5FB4DB10C2C1811A31E2B0E493EC72C927A97C79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.mft
caRepository: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 23 Sep 2024 13:16:02 +0000
Certificate not after: Mon 22 Sep 2025 13:21:02 +0000
Subordinate resources: AS: 271180
IP: 200.0.64.0/24
IP: 200.125.129.0/24
IP: 2804:7778::/32
Validation: Failed, certificate revoked on Mon 23 Sep 2024 16:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b4:db:10:c2:c1:81:1a:31:e2:b0:e4:93:ec:72:c9:27:a9:7c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 23 13:16:02 2024 GMT
Not After : Sep 22 13:21:02 2025 GMT
Subject: CN=2BE96A9D00DF227936266A4035089C530868CA3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:79:42:2a:f9:1d:8a:90:4e:83:83:4c:c6:
59:2d:29:55:32:ff:c9:11:6c:0c:85:5f:3a:0b:19:
d0:4c:91:f1:4b:b9:a1:45:22:d7:ec:4f:f1:35:58:
74:2d:52:1a:1b:42:f8:15:cd:ee:34:f8:49:68:04:
99:05:ff:94:73:71:71:5a:98:11:ad:e9:d3:c5:58:
85:9e:15:0a:4f:32:6f:08:13:4e:13:20:dc:c8:29:
26:b4:88:0a:33:af:5f:6c:8b:b8:cb:fb:eb:a1:cd:
7a:d3:a2:10:49:ee:1c:a2:a2:fd:20:8f:ac:38:44:
03:82:6a:fb:d0:e6:73:e2:6d:13:a5:7a:22:68:7d:
25:5d:b5:13:f4:4c:67:ee:cd:bb:4a:a5:01:8c:1c:
d1:79:92:80:c9:77:72:42:1e:ac:47:ae:07:9b:52:
cc:93:64:19:54:f4:b5:3e:d6:fd:95:2a:bc:d6:cb:
1a:20:be:e8:1b:20:9e:ef:9c:6f:21:52:98:d1:23:
05:86:e7:c8:73:a6:22:e0:16:d3:42:73:cf:d4:4f:
24:b8:34:ae:aa:4e:fa:59:76:88:42:76:fc:ce:53:
c1:2b:88:26:80:6a:4f:64:ed:cb:88:be:78:59:9d:
83:bc:8c:31:bc:79:e7:52:f7:39:f1:72:61:df:be:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.64.0/24
200.125.129.0/24
IPv6:
2804:7778::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271180
Signature Algorithm: sha256WithRSAEncryption
a1:e5:ce:04:36:22:5c:dd:f5:3c:7d:32:80:70:2a:f3:59:2c:
ed:16:4e:9c:6d:c1:2a:9f:3b:8b:e7:13:23:2a:84:30:08:5d:
65:1d:1b:41:73:56:97:05:95:c0:28:5b:d2:35:64:fe:e5:23:
97:2e:ab:30:7d:24:b5:4e:b0:68:24:ad:60:07:48:af:b3:0c:
f3:fb:7e:b8:cf:fb:7e:f7:9e:ae:2a:6c:8a:15:b5:45:7d:45:
2a:8e:c6:02:e7:7e:7b:f0:79:5c:7d:d1:f8:f7:06:f2:ef:59:
a0:e5:aa:b6:a0:64:14:a8:1b:a0:37:40:f7:81:cb:e6:f4:44:
87:6c:b8:e3:03:e6:05:06:83:d0:21:0e:e2:65:48:cc:4c:df:
5b:0e:9e:71:74:0d:0f:5d:68:8d:03:ba:6f:35:69:48:22:a8:
88:77:ca:3b:66:ae:f7:1b:e3:d6:57:fe:50:84:96:f8:ee:0b:
0c:36:94:cc:9e:de:26:3c:bf:9c:3c:68:b9:30:09:30:ef:d0:
1e:4a:72:f0:c4:64:9d:9f:4e:fd:5e:d0:0c:7d:cc:82:7c:25:
64:28:63:73:af:6b:51:2f:92:27:27:34:2a:7f:c1:9b:aa:98:
ef:7f:cf:04:7b:36:b9:84:c6:5a:27:9a:b4:5c:42:ab:59:06:
97:48:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 20:19:21 2024 by rpki-client on console-fra.rpki-client.org