Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.cer
File: 33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.cer (raw, json)
Hash identifier: kGIK8wKJYtFeLl4QaQa1ptbAlWmDLzp5yNSykt5aIB8=
Subject key identifier: 33:D7:02:3F:A6:E9:05:60:6F:20:9A:FB:3E:8B:4D:9E:01:B5:ED:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 23EEEB68E78D286B546F10FCE6CC56BBAE1A6630
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.mft
caRepository: rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 17 Jun 2024 12:27:50 +0000
Certificate not after: Mon 16 Jun 2025 12:32:50 +0000
Subordinate resources: AS: 268492
IP: 45.162.4.0/22
IP: 2804:5210::/32
Validation: Failed, certificate revoked on Mon 01 Jul 2024 04:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ee:eb:68:e7:8d:28:6b:54:6f:10:fc:e6:cc:56:bb:ae:1a:66:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 17 12:27:50 2024 GMT
Not After : Jun 16 12:32:50 2025 GMT
Subject: CN=33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:aa:46:3a:d2:a3:a5:f8:67:e7:c7:16:1d:6f:
30:db:95:6d:2c:d0:ee:74:6c:69:e6:45:b4:07:23:
6b:ae:36:70:db:87:29:32:fa:05:a9:90:24:37:dc:
f2:f3:55:aa:20:d6:cb:b2:b0:9b:23:c6:82:3c:cc:
46:f9:96:b0:c6:24:60:9b:94:12:cc:28:af:98:dc:
36:05:af:19:f6:90:d0:fa:0d:68:f4:03:30:8f:d8:
fe:89:3d:03:f5:cb:2f:ed:40:1c:c3:e9:da:92:ac:
f8:1c:ec:e2:84:14:95:32:ee:79:01:57:26:08:d1:
f5:44:b3:79:bb:41:2f:f3:31:15:b8:ad:7f:a5:2e:
82:d0:80:0f:34:27:97:10:fc:81:7e:8e:c3:0f:47:
8a:56:f7:fd:2a:48:39:f9:2d:55:01:1a:e2:ec:c3:
ed:c9:ed:8d:98:81:f2:2a:24:bd:14:6a:4f:f0:f1:
cf:e4:cd:9d:6a:66:c1:b7:f7:d9:6c:03:ee:60:cc:
1f:08:9b:3d:69:51:56:b2:35:d1:dd:be:8e:f0:1d:
d8:74:62:c6:cd:a8:6b:42:a1:c8:90:c5:d5:ce:72:
c7:b6:e2:7a:f1:9a:e1:7f:61:71:2f:c2:82:9c:bb:
3e:56:3c:c0:b0:77:50:f8:ec:19:a3:82:4e:e6:80:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:D7:02:3F:A6:E9:05:60:6F:20:9A:FB:3E:8B:4D:9E:01:B5:ED:EA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.4.0/22
IPv6:
2804:5210::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268492
Signature Algorithm: sha256WithRSAEncryption
af:4d:d4:95:96:52:14:27:f2:21:89:ba:0e:46:d7:f5:e5:e6:
8f:2a:29:fe:5a:a4:a0:df:4b:af:9d:01:51:75:42:63:a4:36:
90:ac:10:02:9d:c5:0e:52:ed:e5:12:86:c7:b4:b5:56:13:18:
ef:4e:12:53:ab:65:be:a2:7e:de:15:ad:45:12:a4:50:09:46:
fd:cb:08:57:f2:e8:05:3a:d4:ba:74:3d:33:00:16:1c:66:3e:
a6:7b:da:47:a6:51:4c:d2:f2:c3:d2:b6:83:e0:7e:b8:da:8a:
66:f1:ad:57:35:3b:a7:d0:dd:6d:56:50:c3:24:20:67:67:89:
b9:2f:a6:0d:ec:69:3d:89:a7:ef:4a:ca:73:f5:9b:6a:91:17:
ef:c9:8f:a4:47:24:b2:dd:48:4b:f8:ec:40:4c:aa:4e:fe:a7:
40:05:32:a8:48:55:54:e1:cf:c2:6d:f3:37:7a:84:e6:4d:d9:
b3:82:71:d3:be:ba:ea:bd:bc:f8:a5:6e:ea:53:e2:d7:62:fd:
6f:4a:26:c0:ff:1a:22:7a:c3:e0:62:79:50:0e:1d:93:d2:82:
d5:84:65:ef:7d:b5:9d:c8:98:eb:3b:1d:b3:83:90:7b:81:3e:
9e:10:31:9c:ba:e4:26:45:28:d6:37:22:0f:a7:80:2d:3e:ce:
88:2c:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 05:28:47 2024 by rpki-client on console-fra.rpki-client.org