Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2ED07AF80C8061463E4F90ED3B6776F0904CDED5.cer
File: 2ED07AF80C8061463E4F90ED3B6776F0904CDED5.cer (raw, json)
Hash identifier: 7i24lSThx7CfMncKC6Hax2QSX/5b+kpWA+Du/PzUtsY=
Subject key identifier: 2E:D0:7A:F8:0C:80:61:46:3E:4F:90:ED:3B:67:76:F0:90:4C:DE:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 220988B2D23E8D65F1548D6F732EC596B2721D9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/2ED07AF80C8061463E4F90ED3B6776F0904CDED5.mft
caRepository: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 20 Apr 2024 01:49:36 +0000
Certificate not after: Sat 19 Apr 2025 01:54:36 +0000
Subordinate resources: AS: 263919
IP: 138.185.236.0/22
IP: 170.0.208.0/22
IP: 2804:27bc::/32
Validation: Failed, certificate revoked on Sat 20 Apr 2024 03:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:09:88:b2:d2:3e:8d:65:f1:54:8d:6f:73:2e:c5:96:b2:72:1d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 20 01:49:36 2024 GMT
Not After : Apr 19 01:54:36 2025 GMT
Subject: CN=2ED07AF80C8061463E4F90ED3B6776F0904CDED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:eb:f4:9a:37:ff:a4:a0:bc:0b:8a:e0:15:
32:16:b8:f1:b3:c0:20:16:5d:15:a5:ac:b8:66:d3:
36:53:52:1d:25:7a:14:ad:c0:cb:e4:25:8b:cd:73:
45:81:0c:3b:03:0b:a8:d4:19:c8:cc:23:1f:70:e3:
81:3e:27:5f:b0:bd:99:be:18:74:1b:15:61:14:6b:
a5:62:a2:56:5a:af:dc:13:0b:14:9e:c7:d7:27:9e:
90:b2:17:7f:94:51:5a:6a:25:33:e2:04:28:28:cf:
72:64:0a:e8:94:8d:1b:e0:5c:3a:55:f3:55:2e:eb:
86:5e:5b:69:f9:98:ae:e4:77:7b:c6:a9:ca:36:80:
04:09:6f:36:22:82:c5:83:b9:1a:0c:19:a4:26:eb:
01:0c:7d:ec:39:e0:cd:d8:f2:00:9b:d8:0b:fc:cb:
7c:65:e3:93:de:35:a2:c7:19:90:f3:60:4b:37:53:
ba:34:80:65:04:c5:00:8d:5b:ad:92:4c:c0:5d:c1:
dc:5e:76:6f:2c:c6:b6:be:b8:14:8e:ed:56:2f:99:
40:bc:26:bb:b1:db:3f:18:45:46:50:df:fe:74:99:
24:d6:8c:23:1f:34:f3:ce:d6:a5:19:7c:41:cf:ea:
06:d9:2f:2f:89:10:8a:c2:c0:ae:0f:00:14:bd:78:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2E:D0:7A:F8:0C:80:61:46:3E:4F:90:ED:3B:67:76:F0:90:4C:DE:D5
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/2ED07AF80C8061463E4F90ED3B6776F0904CDED5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.236.0/22
170.0.208.0/22
IPv6:
2804:27bc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263919
Signature Algorithm: sha256WithRSAEncryption
31:55:13:18:85:de:8e:32:42:a4:f3:ff:d5:30:79:40:ac:8d:
f7:c0:5f:02:ef:06:aa:83:38:e4:18:32:20:92:28:c1:d0:77:
23:88:48:2e:36:02:f9:66:e9:f9:cc:2d:6c:9d:92:4b:2d:8d:
8b:e5:e2:0f:5b:6b:a1:9a:11:f3:29:cf:2f:0a:6a:43:31:cf:
8f:fb:ed:30:11:16:6e:ca:de:cf:57:b1:7d:84:02:48:18:2d:
9d:b7:0b:a1:78:be:48:a7:fe:45:b3:63:ea:0f:55:1a:a1:9c:
18:fe:11:c5:6d:a3:0f:67:e1:3b:c6:9a:93:be:c6:94:57:7a:
7b:35:eb:3a:73:f4:69:26:c9:6a:3a:42:0e:0d:9d:ce:ab:56:
56:a6:33:6b:33:9c:49:9f:a8:30:de:4c:a2:a8:dd:d6:a3:22:
1f:06:99:5f:7a:b7:3e:fe:39:0c:c9:78:45:7d:b1:60:71:52:
a3:e0:52:07:0e:02:05:92:81:c6:8a:64:b0:47:0b:6b:94:25:
d6:70:a4:2b:50:b6:6c:28:0d:54:a8:2e:ba:c9:08:7f:19:ef:
a8:ec:49:b6:21:2e:ec:ad:f5:4f:9c:97:59:e6:f4:f4:a5:7d:
5a:a2:30:ac:5b:e7:27:63:46:7d:76:c5:92:a1:5b:d9:57:ae:
66:0b:56:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org