Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/38391C65CACADCE14764C39BDCAF54A341E5BCD3.cer
File: 38391C65CACADCE14764C39BDCAF54A341E5BCD3.cer (raw, json)
Hash identifier: B6be+xeyjERotffxVkiJXu9sVHKwBjw96T7wzKMsWgc=
Subject key identifier: 38:39:1C:65:CA:CA:DC:E1:47:64:C3:9B:DC:AF:54:A3:41:E5:BC:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 20D55DA6EF5963C33A410D38200032D6D7A5F172
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/38391C65CACADCE14764C39BDCAF54A341E5BCD3.mft
caRepository: rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 13 May 2024 13:36:01 +0000
Certificate not after: Mon 12 May 2025 13:41:01 +0000
Subordinate resources: AS: 266298
IP: 170.78.172.0/22
IP: 2804:35a4::/32
Validation: Failed, certificate revoked on Thu 19 Sep 2024 02:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d5:5d:a6:ef:59:63:c3:3a:41:0d:38:20:00:32:d6:d7:a5:f1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 13 13:36:01 2024 GMT
Not After : May 12 13:41:01 2025 GMT
Subject: CN=38391C65CACADCE14764C39BDCAF54A341E5BCD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:da:3c:18:83:fc:0a:e9:22:0e:47:3a:15:
89:4f:95:cc:00:09:1f:b1:9c:89:1d:46:50:c6:30:
79:f0:35:fc:8a:7e:9a:21:c9:b6:ad:50:95:81:61:
8a:78:50:ac:1a:c4:fe:6f:52:d7:81:88:77:59:01:
f1:78:6d:3c:de:31:f2:54:c6:a4:60:95:b5:c1:79:
8d:2b:e1:c0:9e:18:9d:be:93:43:52:02:6b:d3:85:
18:0d:16:b2:39:16:bf:28:f2:be:c9:fd:75:10:8d:
be:6a:90:b4:d6:03:45:38:16:c0:f3:0f:47:64:b3:
fb:09:17:1d:a3:10:c7:e1:a8:d9:f1:3c:4c:0d:ab:
58:a1:54:5f:1e:a7:45:3d:27:a6:37:e2:1f:07:88:
75:83:42:40:37:34:33:fc:38:a2:c5:4a:49:44:14:
22:af:bc:d1:cc:3e:9f:42:5d:12:5e:1e:07:58:dc:
34:c0:f8:7e:0b:80:46:b9:a8:2d:5b:81:62:21:5e:
14:29:13:0c:8a:e9:e6:06:d3:7f:7e:4f:c9:26:a1:
f3:40:ce:10:66:4c:d1:ee:d2:b9:9e:50:32:41:73:
8f:12:af:ea:ad:42:21:e1:bd:f5:43:ed:86:7b:fd:
2f:f3:cb:bb:5d:fb:d4:b0:02:7a:88:5c:83:96:80:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
38:39:1C:65:CA:CA:DC:E1:47:64:C3:9B:DC:AF:54:A3:41:E5:BC:D3
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/38391C65CACADCE14764C39BDCAF54A341E5BCD3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.172.0/22
IPv6:
2804:35a4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266298
Signature Algorithm: sha256WithRSAEncryption
91:90:13:4d:6f:7d:e6:d8:9b:36:a8:ef:73:71:09:9e:af:c9:
39:10:66:a2:87:ba:6e:ee:52:ec:36:36:64:63:82:53:54:37:
fc:24:55:8e:fd:c6:35:44:4f:28:f2:21:be:47:6e:b1:4b:d8:
fe:5d:1a:52:4e:8d:95:de:4c:24:84:a4:23:1e:19:d4:5a:2e:
65:7d:a1:19:6f:67:7c:76:06:d4:d7:33:b5:59:13:88:b4:91:
0c:5a:8d:2b:d4:74:d3:bf:d8:10:69:ff:a9:3e:30:15:ee:75:
e8:d5:16:3a:cd:e5:47:51:d8:02:86:f7:a4:f3:94:a7:8a:c0:
f3:f8:4c:88:9b:3f:cc:9f:a9:82:38:d3:07:54:f9:3f:74:a7:
e8:f8:95:c8:db:a7:ac:96:42:8f:54:e7:88:81:4e:5b:6c:03:
8a:56:cc:7d:0f:38:f4:a0:d9:84:a1:51:f2:e5:17:2d:55:fe:
9d:16:c0:3d:f2:3b:34:4e:c8:b9:5c:4d:b9:8c:f0:8a:46:d4:
ea:81:a9:5b:6f:ce:81:aa:d1:0a:1f:f1:d3:fe:6c:14:24:e9:
94:ec:cc:d0:f1:f8:ae:11:2e:a9:c1:42:22:7b:8f:d5:01:d4:
42:10:03:a2:5a:b3:f8:33:5d:6c:35:df:bb:ef:b1:0a:fa:90:
81:02:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 06:07:24 2024 by rpki-client on console-fra.rpki-client.org