Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.cer
File: 2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.cer (raw, json)
Hash identifier: 5R0B5QfNgeHKRionI8cUb8mhCf6zkJpwAeMOttrEUsI=
Subject key identifier: 2D:CA:FB:3D:2D:82:42:05:A3:59:EE:5D:E2:FF:C4:C0:7D:1B:4A:2B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7D1CA2C2CC43A49FF17F70FD97502E08B05E9831
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.mft
caRepository: rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 15 Jul 2024 19:03:54 +0000
Certificate not after: Mon 14 Jul 2025 19:08:54 +0000
Subordinate resources: AS: 269102
IP: 45.178.236.0/22
IP: 2804:5f78::/32
Validation: Failed, certificate revoked on Fri 02 Aug 2024 18:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1c:a2:c2:cc:43:a4:9f:f1:7f:70:fd:97:50:2e:08:b0:5e:98:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 15 19:03:54 2024 GMT
Not After : Jul 14 19:08:54 2025 GMT
Subject: CN=2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:8c:3e:fe:c3:56:94:ae:f2:2c:b5:87:f5:
5d:37:6e:0a:10:d4:f4:b2:42:93:56:5c:88:2e:b0:
30:7e:c0:46:4b:21:c8:43:99:0e:53:bd:c0:60:01:
85:0e:26:29:5b:92:9b:7c:ae:88:84:68:b2:4a:eb:
00:c1:0e:0a:85:c1:8d:63:2b:61:17:35:e2:c8:c2:
7d:1b:9f:99:cf:64:e2:89:b0:68:86:fa:af:f1:30:
38:12:7c:e5:4f:4d:9b:cc:c6:8a:90:aa:4d:8e:68:
f1:e5:7e:3e:17:19:b4:f4:f9:79:fb:87:5b:be:17:
59:05:bd:6e:3a:d7:be:bd:48:6c:6e:b8:04:17:06:
ec:e7:53:b0:7d:fc:51:0c:bd:a6:9f:44:f4:1c:a9:
12:71:0e:95:84:e9:42:f0:3e:45:e3:1b:9b:93:ed:
9d:de:10:14:ec:58:26:fb:5a:1c:ba:07:40:df:7c:
79:60:be:e3:3b:bb:5e:7b:ea:17:9e:aa:93:ca:af:
c1:ef:23:f2:4b:77:5a:f3:15:73:e4:d3:8a:9e:ad:
af:48:c9:4e:a5:d0:ce:2f:0b:cc:6f:a9:69:c2:5c:
a7:24:c8:78:28:15:9e:1b:0d:34:47:f0:da:8d:ea:
02:b4:b4:72:ba:d6:f5:cd:8c:b3:d0:ac:ab:b9:e5:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:CA:FB:3D:2D:82:42:05:A3:59:EE:5D:E2:FF:C4:C0:7D:1B:4A:2B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.236.0/22
IPv6:
2804:5f78::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269102
Signature Algorithm: sha256WithRSAEncryption
0a:6d:26:8b:cd:a9:40:40:48:c0:dc:ff:0f:75:8f:17:02:54:
c0:79:7a:ca:d8:f7:8f:e7:77:b6:8d:5c:f2:00:91:7b:29:15:
a5:96:c8:99:b7:2a:88:cd:2c:dd:e1:46:9b:2a:b2:26:f1:dc:
84:31:17:c5:d7:4b:4e:f4:ab:5f:7e:52:f6:54:b7:55:c5:83:
33:7a:17:4c:b2:40:97:8c:ed:51:79:c8:5b:10:67:48:04:fe:
91:aa:45:86:02:85:7a:57:b4:f7:c7:4b:46:23:48:b7:7a:67:
03:df:d6:08:af:de:e2:d4:92:ee:68:7e:0c:ae:bd:9d:4b:9f:
6d:dd:2f:23:f7:13:a9:e0:f6:cd:50:ba:a1:01:c0:08:c7:cb:
b4:76:9d:c4:2a:76:69:04:23:30:17:39:51:fa:df:09:2e:90:
a9:13:0f:0c:7f:e2:fb:03:72:8b:84:e7:c8:8e:f9:1e:c1:83:
03:87:25:94:22:cb:32:71:93:89:ad:12:86:3c:af:5e:24:4b:
1e:4c:f7:58:f3:33:38:0b:f2:0b:b5:c4:ef:90:0c:1f:47:7e:
36:01:5c:d3:98:54:0b:21:2a:13:67:54:69:74:20:cb:cb:d7:
62:84:d0:e3:d5:1e:8f:da:63:eb:94:08:af:5e:4a:de:1f:cb:
8f:fc:e6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 20:38:46 2024 by rpki-client on console-fra.rpki-client.org