Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D3AA17BEE9CEF037A01DDCE96C78968B7A23E47.cer
File: 2D3AA17BEE9CEF037A01DDCE96C78968B7A23E47.cer (raw, json)
Hash identifier: 4BzatCVp9YifPpjNJg2TP6QsADqD4SqYkoHVw5Syu5g=
Subject key identifier: 2D:3A:A1:7B:EE:9C:EF:03:7A:01:DD:CE:96:C7:89:68:B7:A2:3E:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 68FE50599A5BFA66A8F9708294E674E866C0F8A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2D3AA17BEE9CEF037A01DDCE96C78968B7A23E47.mft
caRepository: rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 12 Sep 2024 12:07:32 +0000
Certificate not after: Thu 11 Sep 2025 12:12:32 +0000
Subordinate resources: AS: 263855
IP: 138.186.84.0/22
IP: 2804:26c4::/32
Validation: Failed, certificate revoked on Sat 09 Nov 2024 15:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:fe:50:59:9a:5b:fa:66:a8:f9:70:82:94:e6:74:e8:66:c0:f8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 12 12:07:32 2024 GMT
Not After : Sep 11 12:12:32 2025 GMT
Subject: CN=2D3AA17BEE9CEF037A01DDCE96C78968B7A23E47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:eb:d6:ab:f6:86:5e:0c:cb:02:8c:6d:b2:
58:6f:93:47:2d:44:64:37:06:b7:2c:10:50:53:5d:
78:d7:31:a4:08:14:46:26:d4:5a:9c:f5:f4:e7:c6:
fd:6e:7f:b9:94:d9:9d:bf:38:63:a8:9a:ca:c3:19:
ff:05:23:8f:69:a6:46:07:b8:56:52:22:40:de:3a:
3a:67:51:09:9f:49:e0:56:d3:12:0d:56:de:86:dc:
de:f8:31:0b:1e:74:0b:13:19:f7:48:d9:74:3c:e9:
0e:d0:84:c3:3f:a8:a2:71:41:e5:47:5b:33:db:34:
ee:b6:e4:5b:51:82:20:99:2e:92:be:8a:70:fb:b8:
f9:03:93:42:03:e5:9b:3b:85:bd:3f:8b:89:24:cc:
8f:8e:14:82:87:84:08:c2:dc:db:c3:3b:65:e8:46:
1b:f9:f4:08:ab:ef:41:9c:7a:32:ea:31:42:77:cc:
c0:42:d0:5f:d1:37:58:bb:44:3b:88:55:7b:f2:e5:
53:89:90:af:89:c4:c7:dc:dc:fc:a8:ac:b7:06:29:
83:28:ab:38:a8:c5:7b:4d:d6:fe:79:7a:1e:d6:d4:
72:b8:87:ed:ac:87:22:15:34:55:52:3b:4a:ea:9f:
a7:00:aa:74:14:67:11:7b:ab:14:91:ec:b9:f3:38:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:3A:A1:7B:EE:9C:EF:03:7A:01:DD:CE:96:C7:89:68:B7:A2:3E:47
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2D3AA17BEE9CEF037A01DDCE96C78968B7A23E47.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.84.0/22
IPv6:
2804:26c4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263855
Signature Algorithm: sha256WithRSAEncryption
6c:93:b5:e1:07:cf:37:54:d2:03:c2:f3:45:1b:47:b0:b6:fc:
78:62:d6:0f:7c:48:6e:fc:1a:6b:15:c3:42:3e:73:16:5f:9f:
e4:8a:2d:81:04:72:b8:fd:9d:7c:96:0c:17:78:78:2c:ff:39:
04:3f:12:88:a5:da:c5:f4:1e:d3:89:94:3c:48:a7:10:d9:69:
dc:7d:25:33:91:1a:68:f0:4e:ee:7b:ac:93:40:c6:5a:27:f4:
11:55:c4:87:85:ee:02:ee:20:10:11:f6:e2:b5:d3:fe:92:c1:
53:d7:2f:ca:56:5d:c0:22:3f:42:b5:48:c5:9b:39:9f:21:d9:
89:c7:4e:64:b9:92:0e:63:68:1e:df:e6:59:99:81:88:f3:ef:
9d:f0:7d:ee:0e:a2:8c:6d:24:10:0b:62:ba:4b:76:f4:93:fd:
f1:7b:3a:c7:2f:fd:68:a4:4c:55:4f:47:c7:ce:3e:ec:07:4e:
9f:e3:03:54:71:95:e7:a5:8a:ac:13:7c:d0:84:b3:f7:e0:0f:
ea:22:39:49:ed:80:92:5c:a6:05:d3:12:fd:94:27:61:e6:ae:
58:cb:2b:26:65:0a:a2:ba:67:d7:5e:09:dc:40:b1:17:a9:30:
29:c9:21:67:24:72:8e:c6:bd:4e:a9:8d:d0:17:9c:06:45:95:
82:1a:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 18:21:07 2024 by rpki-client on console-fra.rpki-client.org