Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.cer
File: 2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.cer (raw, json)
Hash identifier: v/PZVerjyEbwnDpeBW5tL/iPWfsyySTSHLO6q08wST0=
Subject key identifier: 2E:8C:F6:93:E5:DE:3D:EE:3B:A9:71:BC:3B:79:04:D9:99:F1:27:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 16D00C4B001753C1A10F7191DD99574FF347EB5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.mft
caRepository: rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 25 Nov 2024 19:39:42 +0000
Certificate not after: Mon 24 Nov 2025 19:44:42 +0000
Subordinate resources: AS: 264864
IP: 168.205.168.0/23
IP: 2804:2efc::/32
Validation: Failed, certificate revoked on Wed 27 Nov 2024 21:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d0:0c:4b:00:17:53:c1:a1:0f:71:91:dd:99:57:4f:f3:47:eb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 25 19:39:42 2024 GMT
Not After : Nov 24 19:44:42 2025 GMT
Subject: CN=2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:32:8a:be:f5:b7:09:16:34:6d:06:9e:07:
c0:d3:29:8e:1e:f5:43:98:ce:01:85:ac:2f:16:7c:
ca:ce:ff:fe:aa:87:60:d6:30:f0:01:a2:8c:ae:9b:
e0:75:77:56:af:fc:d9:c7:fb:f1:a6:83:53:28:26:
17:a7:53:94:fc:3f:ed:40:8b:42:e1:75:a3:41:ae:
f5:aa:97:c1:18:4c:32:c2:d0:a7:bf:94:e9:62:2f:
b1:2d:f1:58:f5:23:f4:fd:76:af:c5:98:6c:65:09:
aa:3c:22:d8:c7:92:10:87:96:a3:46:ff:75:84:fa:
00:ba:90:31:d9:2f:82:5d:04:85:4b:55:d2:9e:f0:
45:13:f3:3b:95:9c:8b:d5:c7:33:37:fe:b3:80:14:
04:20:9f:08:d4:c4:90:67:e2:3e:74:89:0a:0b:4a:
e7:30:2c:a0:67:16:9b:5a:9d:59:5c:de:71:0b:cc:
a2:58:40:f8:d4:fb:3c:9f:52:84:41:4e:c4:35:0f:
27:80:e0:07:6a:a4:71:70:10:1c:1a:bb:f0:6c:44:
e4:49:a1:45:b8:a7:da:05:da:0b:8b:42:6a:34:43:
ee:e1:4a:16:ca:32:2d:b1:73:d4:85:e9:8b:03:0f:
ca:cc:47:58:1d:c0:b0:1e:dd:79:53:b6:17:05:34:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2E:8C:F6:93:E5:DE:3D:EE:3B:A9:71:BC:3B:79:04:D9:99:F1:27:B5
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.168.0/23
IPv6:
2804:2efc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264864
Signature Algorithm: sha256WithRSAEncryption
4a:7b:b2:0b:40:13:16:3a:7e:3b:54:0d:6a:71:81:51:de:80:
8d:d9:59:b1:39:81:94:77:8d:a5:63:c9:8e:c8:d5:8c:9f:28:
d8:af:18:cb:59:d5:14:0a:97:2b:0b:20:b1:68:21:64:3c:8f:
67:da:85:9c:f1:9e:10:cf:dc:91:07:26:d7:e9:46:7f:9e:78:
aa:66:a6:df:83:7b:0e:1e:22:3b:62:b6:7a:21:c2:5c:e0:53:
33:ea:8a:65:79:02:02:ad:93:34:26:ba:15:f2:89:99:43:ff:
9d:d0:cd:45:0d:10:87:a9:f9:39:67:9b:0a:d6:6e:e9:11:d4:
cb:16:a6:48:e1:40:fe:0f:c4:c6:f0:a4:b8:a8:88:12:c2:23:
61:6a:88:1e:0a:0e:a7:b7:c2:bd:db:12:e2:72:74:a2:3d:03:
5c:56:ab:f1:43:e6:c9:f0:09:83:68:07:d6:86:de:e1:65:b6:
eb:b4:4b:5a:f8:96:f2:7d:93:95:a7:e1:a1:16:4e:ee:91:94:
69:b7:7e:8b:e3:b6:53:70:6b:ac:f7:91:0e:a2:d8:6a:9b:ed:
b3:aa:9c:db:28:a2:5a:17:89:19:c3:c7:8f:15:f4:64:2e:f0:
fd:fd:3a:cc:fe:67:fd:1a:d6:f7:be:ff:6f:52:3f:9d:ab:e9:
ca:b3:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:01 2025 by rpki-client