Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.cer
File: 2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.cer (raw, json)
Hash identifier: ijd4vz07N1nYpA4iKbRFzOZrs+H+fJuS4fnBS7jhDao=
Subject key identifier: 2F:0F:D6:0A:E6:B3:DF:EB:9F:5B:8F:4B:E0:D2:75:5E:CA:2E:3F:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5D764B3EE23F133040D80A3790FED55FE7F16866
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.mft
caRepository: rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 22 May 2024 21:09:54 +0000
Certificate not after: Wed 21 May 2025 21:14:54 +0000
Subordinate resources: AS: 268711
IP: 45.171.124.0/22
IP: 2804:5994::/32
Validation: Failed, certificate revoked on Tue 09 Jul 2024 13:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:76:4b:3e:e2:3f:13:30:40:d8:0a:37:90:fe:d5:5f:e7:f1:68:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 22 21:09:54 2024 GMT
Not After : May 21 21:14:54 2025 GMT
Subject: CN=2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:73:b0:1a:c6:51:ca:21:3a:96:5e:c7:bd:cd:
93:42:ba:fb:ee:88:20:64:b4:e5:b9:b9:0a:e8:17:
a5:af:91:08:1f:01:78:cb:53:2d:89:8b:90:65:69:
4d:79:df:b4:4c:f9:4c:ef:19:88:b7:fe:66:1c:34:
81:b7:7b:b4:1b:59:67:b1:f5:1f:da:53:82:fb:4c:
01:56:20:23:65:42:49:f5:61:00:97:c9:87:e7:b3:
58:69:2b:f2:1e:8a:7a:27:c9:01:40:ce:df:54:11:
7b:ff:4d:7d:a5:6d:af:67:b7:3b:1e:fc:2e:3f:a9:
01:1d:d4:f9:3f:87:82:9a:61:7f:4e:44:8c:64:7f:
15:ff:6f:81:8b:ab:98:04:80:1c:89:37:a1:88:88:
d0:8c:c2:4b:74:82:26:20:dd:77:28:26:58:e7:58:
e8:c0:ed:7d:c0:65:c9:86:5e:af:28:ae:f9:ff:4f:
f3:a5:4c:97:e1:c0:ad:d5:26:ba:03:4f:e6:15:e8:
82:ba:48:92:de:a7:9e:f4:ea:75:4b:1c:51:d7:0e:
f6:cc:c9:a3:51:85:94:47:9e:21:ca:d8:26:a9:99:
08:64:b5:7c:04:7a:38:23:3d:3a:06:80:66:cf:28:
1a:4e:36:95:63:97:68:ab:61:52:45:68:31:fb:4e:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2F:0F:D6:0A:E6:B3:DF:EB:9F:5B:8F:4B:E0:D2:75:5E:CA:2E:3F:13
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.124.0/22
IPv6:
2804:5994::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268711
Signature Algorithm: sha256WithRSAEncryption
c3:61:a0:a2:be:c3:99:ec:a1:56:e0:20:a2:05:6b:29:fe:27:
b5:05:fc:84:17:9c:7f:87:6b:17:01:97:85:53:1d:80:b5:88:
33:7f:14:57:f4:cd:3b:62:c5:44:52:ad:de:89:ed:2d:fe:68:
46:ae:30:3a:eb:af:ae:f9:19:5f:47:3f:e1:1e:7e:a8:76:bd:
8b:17:71:67:06:fe:65:88:f2:0a:2d:6b:57:fb:a6:2a:b6:c0:
23:cd:96:b6:4e:8f:fe:0c:a5:d5:5f:76:38:07:16:5a:98:2c:
f5:8a:54:6e:72:30:eb:83:c6:07:28:4b:b9:ca:7a:6f:eb:4e:
32:fe:bc:64:3d:5c:1d:98:ae:05:96:02:05:a3:e2:cd:2e:c1:
35:5d:28:4e:cc:4c:fd:9f:13:f2:96:14:ee:5b:39:14:85:8e:
eb:1a:7e:24:95:c9:9a:f5:48:db:97:36:38:36:bc:0f:7e:a5:
15:8f:2b:95:09:df:4f:36:ff:9a:61:f7:85:3c:aa:69:26:d8:
ff:a8:be:0a:be:6d:68:e0:e6:1a:15:21:08:84:05:b2:1c:95:
8a:8f:4d:93:03:4b:4b:53:41:35:13:4b:64:c3:4b:4a:e7:c5:
e8:54:c2:55:d0:58:ec:54:56:6d:ee:45:35:7c:0e:20:07:b8:
d2:0b:33:7d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUXXZLPuI/EzBA2Ao3kP7VX+fxaGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjIyMTA5NTRaFw0yNTA1MjEyMTE0NTRaMDMxMTAvBgNV
BAMTKDJGMEZENjBBRTZCM0RGRUI5RjVCOEY0QkUwRDI3NTVFQ0EyRTNGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrc7AaxlHKITqWXse9zZNCuvvu
iCBktOW5uQroF6WvkQgfAXjLUy2Ji5BlaU1537RM+UzvGYi3/mYcNIG3e7QbWWex
9R/aU4L7TAFWICNlQkn1YQCXyYfns1hpK/IeinonyQFAzt9UEXv/TX2lba9ntzse
/C4/qQEd1Pk/h4KaYX9ORIxkfxX/b4GLq5gEgByJN6GIiNCMwkt0giYg3XcoJljn
WOjA7X3AZcmGXq8orvn/T/OlTJfhwK3VJroDT+YV6IK6SJLep5706nVLHFHXDvbM
yaNRhZRHniHK2CapmQhktXwEejgjPToGgGbPKBpONpVjl2irYVJFaDH7TlwJAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvD9YK5rPf659b
j0vg0nVeyi4/EzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHhp
YVJQVUVQbkhIakhDaFE3RXNoYmdXSEhQQW9Sb3F0YWdOWHhQVzRDRWEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R4
aWFSUFVFUG5ISGpIQ2hRN0VzaGJnV0hIUEFvUm9xdGFnTlh4UFc0Q0VhLzAvMkYw
RkQ2MEFFNkIzREZFQjlGNUI4RjRCRTBEMjc1NUVDQTJFM0YxMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLat8MA0EAgACMAcDBQAoBFmUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZpzANBgkqhkiG9w0BAQsFAAOCAQEAw2Ggor7DmeyhVuAg
ogVrKf4ntQX8hBecf4drFwGXhVMdgLWIM38UV/TNO2LFRFKt3ontLf5oRq4wOuuv
rvkZX0c/4R5+qHa9ixdxZwb+ZYjyCi1rV/umKrbAI82Wtk6P/gyl1V92OAcWWpgs
9YpUbnIw64PGByhLucp6b+tOMv68ZD1cHZiuBZYCBaPizS7BNV0oTsxM/Z8T8pYU
7ls5FIWO6xp+JJXJmvVI25c2ODa8D36lFY8rlQnfTzb/mmH3hTyqaSbY/6i+Cr5t
aODmGhUhCIQFshyVio9NkwNLS1NBNRNLZMNLSufF6FTCVdBY7FRWbe5FNXwOIAe4
0gszfQ==
-----END CERTIFICATE-----
Generated at Tue Jul 9 15:12:05 2024 by rpki-client on console-fra.rpki-client.org