Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3522D792545A0E921327122C3F67A5F8EC6EB2AE.cer
File: 3522D792545A0E921327122C3F67A5F8EC6EB2AE.cer (raw, json)
Hash identifier: kYpX1OxuDDV7CBv7lD5yAgdivCLzn4hHN/5XL/wqh9I=
Subject key identifier: 35:22:D7:92:54:5A:0E:92:13:27:12:2C:3F:67:A5:F8:EC:6E:B2:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 78D3E5CA5ED00EC3C470C5670951C14F9515E8D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/3522D792545A0E921327122C3F67A5F8EC6EB2AE.mft
caRepository: rsync://rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Jun 2024 15:26:52 +0000
Certificate not after: Fri 06 Jun 2025 15:31:52 +0000
Subordinate resources: AS: 273518
IP: 2804:8fe0::/32
Validation: Failed, certificate revoked on Tue 30 Jul 2024 15:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d3:e5:ca:5e:d0:0e:c3:c4:70:c5:67:09:51:c1:4f:95:15:e8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 7 15:26:52 2024 GMT
Not After : Jun 6 15:31:52 2025 GMT
Subject: CN=3522D792545A0E921327122C3F67A5F8EC6EB2AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:68:71:89:6d:1f:f2:77:48:c8:c1:8f:d2:
6d:0a:6c:d0:b3:34:2e:bf:f8:5d:49:94:3a:ca:aa:
33:e2:1f:a1:61:59:6b:7c:12:25:f3:bf:e4:be:23:
9f:0e:49:14:3b:c3:1f:37:ff:8e:59:50:6c:ed:56:
5f:b4:83:4a:a1:52:25:7d:06:43:ac:fb:f3:35:e5:
00:1f:49:08:2f:03:28:98:a1:1f:01:fb:44:d6:ce:
f5:df:7a:ab:7b:f2:9a:bd:0b:7e:7a:0c:0f:4a:8c:
51:f1:13:f1:24:01:0b:f4:37:4b:2c:89:b9:d6:b7:
00:30:2f:85:9f:25:6e:05:df:40:f2:a8:f8:39:25:
2d:2f:2a:44:0e:68:b6:e8:d6:5f:50:60:9b:f2:71:
7c:d9:99:32:62:f5:00:68:06:f7:5b:49:fa:61:2e:
c5:42:b2:45:79:5e:30:c2:1f:32:89:5e:6b:62:36:
8d:ef:21:e0:14:ca:4c:d8:7b:d5:e8:19:74:61:d5:
23:51:68:5a:f4:05:27:32:c8:2e:cc:67:8b:73:cc:
43:9d:25:2e:75:2a:88:5a:9b:a2:f6:55:df:18:87:
0c:0f:d3:96:d9:10:91:1e:86:7e:69:ce:69:be:57:
b3:d3:44:17:6c:b5:e5:90:70:e7:b4:84:49:8d:08:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
35:22:D7:92:54:5A:0E:92:13:27:12:2C:3F:67:A5:F8:EC:6E:B2:AE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/3522D792545A0E921327122C3F67A5F8EC6EB2AE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8fe0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273518
Signature Algorithm: sha256WithRSAEncryption
b2:fb:e1:d0:18:d7:70:b1:fe:a1:64:f9:06:2b:5d:53:48:12:
42:fd:8f:fe:da:b2:8d:c6:8e:1c:14:df:36:74:2d:d8:98:98:
10:e4:ef:06:60:3f:49:2b:34:45:ed:8f:7a:aa:b7:af:35:42:
0c:0b:7e:f7:aa:33:11:36:fe:19:5d:f4:e1:5d:be:0d:1b:43:
d9:2b:fa:19:14:91:b6:d4:c6:e1:c0:07:da:38:b5:68:26:8d:
c6:a6:b6:fb:fd:59:32:01:8b:4f:3e:2e:d4:e1:82:16:ba:6d:
7f:d0:78:cf:7d:f6:57:d5:32:e6:9a:24:13:3c:c2:d2:e9:cd:
8b:97:25:ee:b2:28:04:77:7d:f6:a1:5c:10:9b:8d:ea:45:19:
17:bf:33:9c:b9:68:08:d8:6f:78:d6:e1:b4:b9:6c:d4:8a:64:
95:db:db:5b:9a:52:84:1b:22:06:f2:ec:cc:cd:68:dd:9e:a8:
45:95:52:ab:0a:4d:67:62:2d:31:86:6d:91:45:f1:7c:76:17:
c8:e2:29:7e:7a:31:8c:bc:1b:65:9b:8a:77:a7:4d:96:f7:c8:
5c:2a:0f:b3:67:8b:93:dc:ce:d1:ba:c4:56:b2:e8:8a:35:69:
32:c2:3d:e3:a4:be:cc:d7:8b:ed:0b:b1:25:43:a2:34:12:e1:
00:82:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 19:59:39 2024 by rpki-client on console-ams.rpki-client.org