Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.cer
File: 2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.cer (raw, json)
Hash identifier: PeZ2cxaIHy4QuIeLP0Ah/Nixwso7FOREcfUif1hxhtU=
Subject key identifier: 2D:AF:A5:37:AE:3F:C9:D5:F3:2D:D3:B8:2D:AA:BE:64:8A:2C:70:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2F5C56C3EA5D8308CB20C15C8A7F4D5D8368E736
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.mft
caRepository: rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 08 Nov 2024 01:27:56 +0000
Certificate not after: Fri 07 Nov 2025 01:32:56 +0000
Subordinate resources: AS: 266616
IP: 128.201.44.0/22
IP: 2804:3eb4::/32
Validation: Failed, certificate revoked on Thu 14 Nov 2024 16:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5c:56:c3:ea:5d:83:08:cb:20:c1:5c:8a:7f:4d:5d:83:68:e7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 8 01:27:56 2024 GMT
Not After : Nov 7 01:32:56 2025 GMT
Subject: CN=2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d4:f8:e9:6b:b5:01:c6:95:d5:77:cc:ee:ba:
1d:27:54:a1:91:bb:d5:d3:3f:68:00:14:45:d6:b2:
05:c3:08:f5:03:13:50:11:0e:6a:22:95:cf:3d:37:
df:1b:34:fc:d0:41:d9:44:04:f7:75:6e:6b:67:db:
00:ad:c0:fb:24:32:b7:f2:59:39:31:f7:5a:54:60:
0d:b2:36:e6:a6:c0:39:98:d3:58:d5:e4:2e:93:ab:
24:b5:ed:bd:8a:34:13:6d:2c:82:96:ec:af:0b:f5:
ca:0c:ec:2e:b2:cf:3a:ee:b7:ad:3e:75:ec:52:7c:
88:d5:78:f7:28:05:ad:f2:49:63:d8:5d:38:0d:21:
b0:15:ac:d9:9b:1e:45:4b:d0:b8:c2:66:75:77:84:
91:55:59:39:f9:ac:2b:8a:40:85:9b:77:66:b5:d3:
75:83:8d:b1:9b:03:25:6a:0f:a1:f5:aa:e4:a1:ba:
50:c1:d4:b2:30:dc:33:1f:6b:72:ee:f2:96:22:9a:
1b:36:25:50:2e:04:65:3a:2c:57:60:38:fc:b3:64:
26:01:3c:41:59:fd:51:21:96:ce:3c:87:43:87:47:
83:d2:6c:74:02:7a:75:f9:85:01:23:ff:28:e5:3e:
54:de:19:d0:e1:40:a4:3f:0f:21:47:de:ae:c8:a4:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:AF:A5:37:AE:3F:C9:D5:F3:2D:D3:B8:2D:AA:BE:64:8A:2C:70:18
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.44.0/22
IPv6:
2804:3eb4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266616
Signature Algorithm: sha256WithRSAEncryption
2f:d9:1b:5b:33:0c:b6:cf:ab:05:23:d0:45:f8:7f:fc:00:76:
53:87:b1:81:e6:bd:76:93:51:c1:11:cd:ae:01:14:c2:cc:7f:
cc:a1:93:40:8f:c6:f1:1c:7e:ed:1a:12:38:35:dd:65:db:6b:
f8:2e:76:92:ce:1f:d6:d9:05:2d:be:70:f7:63:c3:94:09:5c:
e9:05:cd:03:93:c6:c6:05:98:ef:5b:94:12:c7:b9:07:54:5b:
1d:13:4c:56:7b:7d:3a:c4:c2:83:f3:26:4e:8d:f4:61:9a:bd:
88:92:a5:c2:49:07:d1:f3:17:0f:11:da:22:7f:79:e0:30:be:
88:e3:97:3b:86:ad:75:0a:d9:95:35:00:da:00:e4:c7:6c:b2:
47:57:6c:7d:58:a4:19:1c:d2:7e:17:04:b3:a0:01:34:26:fb:
0b:5e:51:e9:c7:1f:e2:37:df:e6:2d:3c:e8:a4:77:c9:0d:d7:
92:80:79:f7:90:81:fe:1f:4e:36:5f:e2:03:4c:12:c0:cf:e4:
f7:c8:2c:49:21:e1:6d:5e:71:84:e4:e0:5d:70:cd:f5:71:1d:
56:68:26:ad:1d:61:a3:76:8b:32:53:94:02:52:3e:bd:99:83:
9d:13:f0:7b:77:4c:a2:52:4c:80:ff:48:3e:24:48:f2:14:b5:
60:d8:40:14
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUL1xWw+pdgwjLIMFcin9NXYNo5zYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDgwMTI3NTZaFw0yNTExMDcwMTMyNTZaMDMxMTAvBgNV
BAMTKDJEQUZBNTM3QUUzRkM5RDVGMzJERDNCODJEQUFCRTY0OEEyQzcwMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1Pjpa7UBxpXVd8zuuh0nVKGR
u9XTP2gAFEXWsgXDCPUDE1ARDmoilc89N98bNPzQQdlEBPd1bmtn2wCtwPskMrfy
WTkx91pUYA2yNuamwDmY01jV5C6TqyS17b2KNBNtLIKW7K8L9coM7C6yzzrut60+
dexSfIjVePcoBa3ySWPYXTgNIbAVrNmbHkVL0LjCZnV3hJFVWTn5rCuKQIWbd2a1
03WDjbGbAyVqD6H1quShulDB1LIw3DMfa3Lu8pYimhs2JVAuBGU6LFdgOPyzZCYB
PEFZ/VEhls48h0OHR4PSbHQCenX5hQEj/yjlPlTeGdDhQKQ/DyFH3q7IpMaRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtr6U3rj/J1fMt
07gtqr5kiixwGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR015
S200aWRwZHVKRUxiWXFIdTZxZ1l1dmJHSG5WV1VvVWhWbzFiQmZRTDQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dN
eUttNGlkcGR1SkVMYllxSHU2cWdZdXZiR0huVldVb1VoVm8xYkJmUUw0LzAvMkRB
RkE1MzdBRTNGQzlENUYzMkREM0I4MkRBQUJFNjQ4QTJDNzAxOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCgMksMA0EAgACMAcDBQAoBD60MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQReDANBgkqhkiG9w0BAQsFAAOCAQEAL9kbWzMMts+rBSPQ
Rfh//AB2U4exgea9dpNRwRHNrgEUwsx/zKGTQI/G8Rx+7RoSODXdZdtr+C52ks4f
1tkFLb5w92PDlAlc6QXNA5PGxgWY71uUEse5B1RbHRNMVnt9OsTCg/MmTo30YZq9
iJKlwkkH0fMXDxHaIn954DC+iOOXO4atdQrZlTUA2gDkx2yyR1dsfVikGRzSfhcE
s6ABNCb7C15R6ccf4jff5i086KR3yQ3XkoB595CB/h9ONl/iA0wSwM/k98gsSSHh
bV5xhOTgXXDN9XEdVmgmrR1ho3aLMlOUAlI+vZmDnRPwe3dMolJMgP9IPiRI8hS1
YNhAFA==
-----END CERTIFICATE-----
Generated at Thu Nov 14 20:03:55 2024 by rpki-client on console-ams.rpki-client.org