Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3298509C3A03BF455C49F263BB3401A974D10FE1.cer
File: 3298509C3A03BF455C49F263BB3401A974D10FE1.cer (raw, json)
Hash identifier: dJGXhnihCGl7/PgKh1CqnVapWzKrSvUFO4hXrt2RK3E=
Subject key identifier: 32:98:50:9C:3A:03:BF:45:5C:49:F2:63:BB:34:01:A9:74:D1:0F:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 452A5B58291D212E492489AA1F8E95C63A15CEE0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/3298509C3A03BF455C49F263BB3401A974D10FE1.mft
caRepository: rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 13 Sep 2024 19:06:33 +0000
Certificate not after: Fri 12 Sep 2025 19:11:33 +0000
Subordinate resources: AS: 266965
IP: 45.226.60.0/22
IP: 2804:460c::/32
Validation: Failed, certificate revoked on Thu 19 Sep 2024 12:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:2a:5b:58:29:1d:21:2e:49:24:89:aa:1f:8e:95:c6:3a:15:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 13 19:06:33 2024 GMT
Not After : Sep 12 19:11:33 2025 GMT
Subject: CN=3298509C3A03BF455C49F263BB3401A974D10FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:53:0c:e6:32:47:89:d4:3b:2b:e5:03:cd:
27:9f:14:a8:3d:a2:21:92:2b:25:bf:46:62:82:d3:
02:d7:8d:bf:f7:63:fb:a2:55:95:93:c1:56:5a:51:
c8:38:df:16:6a:0e:45:ee:af:f5:a2:f9:ef:48:8f:
12:fe:d6:76:ed:c3:2b:f3:a3:3b:79:60:ec:8c:ac:
0c:aa:1a:af:85:ba:6e:6c:71:d7:82:70:88:e8:cb:
e2:28:0d:5b:86:d2:42:63:92:91:9f:b8:e0:2d:a0:
a7:4d:d6:b4:52:34:38:5a:19:a5:22:46:9e:63:a3:
87:f5:ac:0f:47:ee:75:15:5b:17:d2:4f:51:81:3e:
2e:4f:95:5a:98:ba:d9:64:19:27:51:6f:dd:c0:78:
4b:30:07:b7:c0:60:0c:7f:15:cf:cc:bd:25:f6:2d:
6a:04:1b:94:e4:1c:f3:79:53:fb:9a:2d:66:02:1f:
9e:9b:99:95:38:11:c1:37:58:d1:da:9c:92:c3:a9:
a6:a7:1f:16:ce:df:3d:45:f9:1e:93:2f:0f:78:ef:
80:84:10:d3:fe:8b:64:da:98:61:2d:69:95:4a:e1:
e6:44:e5:6a:9d:aa:13:7e:f7:34:7e:89:7a:83:20:
15:ea:b6:58:93:96:0a:ca:22:a3:0f:73:ce:e3:f6:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
32:98:50:9C:3A:03:BF:45:5C:49:F2:63:BB:34:01:A9:74:D1:0F:E1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/3298509C3A03BF455C49F263BB3401A974D10FE1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.60.0/22
IPv6:
2804:460c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266965
Signature Algorithm: sha256WithRSAEncryption
be:c2:f4:0e:17:a1:ba:b6:a7:d3:00:ed:5c:57:b9:d7:b5:3d:
21:9d:60:c7:34:52:23:d4:89:f7:a8:a4:ca:49:ec:1f:1c:72:
3f:a3:34:37:c8:fc:74:63:49:1d:28:d2:51:10:66:ef:e8:09:
83:35:98:b6:b9:dc:18:b5:76:b0:d4:87:b8:9b:ea:45:87:9c:
c5:c4:ba:2e:d6:a7:43:9c:90:f0:76:e0:d4:bc:a6:dd:86:ab:
8b:bb:79:64:8e:80:d9:12:06:9a:d1:2e:44:56:ef:d3:90:ae:
49:75:61:af:95:14:51:4f:cf:de:2f:45:5c:13:62:e4:f4:d0:
4c:37:43:dd:95:18:c4:68:27:72:43:5a:f3:a5:42:7d:d2:52:
51:e2:ec:54:af:0c:b8:38:6b:d6:2b:7e:4f:e7:a3:df:15:61:
90:bc:e9:0e:da:cc:c8:9d:1f:1a:a2:fb:56:32:96:12:50:2b:
82:0c:45:98:21:c3:08:d1:7a:d2:7f:34:48:b4:68:af:e2:fc:
a6:52:86:42:d2:2f:ad:7f:a1:8f:59:ca:d4:c9:d8:f1:ab:b2:
83:b9:32:94:c4:f5:9a:98:d3:1f:04:d9:2a:2d:41:f7:3e:31:
bc:2f:4b:a6:09:9e:ee:36:3b:70:63:a5:9e:b9:65:30:38:11:
7d:c3:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 17:07:54 2024 by rpki-client on console-fra.rpki-client.org