Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/39C38FE24B4EDAD1F1887F1869AC9EDD023CD7B4.cer
File: 39C38FE24B4EDAD1F1887F1869AC9EDD023CD7B4.cer (raw, json)
Hash identifier: 8kSBmGnFSLac1sXHTSDwKBFLGEYp440fV+q6h9P3Ud0=
Subject key identifier: 39:C3:8F:E2:4B:4E:DA:D1:F1:88:7F:18:69:AC:9E:DD:02:3C:D7:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1ACF9C93ABA97C5ED2532BB5B781E1BA63CEABE7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FUqobSx1X9DgPS5eMK9n8WmSR46VwQ6yeRXG7ZTcgZ5q/0/39C38FE24B4EDAD1F1887F1869AC9EDD023CD7B4.mft
caRepository: rsync://rpki-repo.registro.br/repo/FUqobSx1X9DgPS5eMK9n8WmSR46VwQ6yeRXG7ZTcgZ5q/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 26 Jul 2024 00:16:32 +0000
Certificate not after: Fri 25 Jul 2025 00:21:32 +0000
Subordinate resources: AS: 267277
IP: 45.232.220.0/22
IP: 2804:4b00::/32
Validation: Failed, certificate revoked on Thu 22 Aug 2024 17:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:cf:9c:93:ab:a9:7c:5e:d2:53:2b:b5:b7:81:e1:ba:63:ce:ab:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 26 00:16:32 2024 GMT
Not After : Jul 25 00:21:32 2025 GMT
Subject: CN=39C38FE24B4EDAD1F1887F1869AC9EDD023CD7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:87:24:77:fb:20:6b:01:a7:c5:7f:e9:f1:f3:
54:b9:16:55:b7:e5:dd:cd:90:33:c3:05:ec:fe:e8:
92:ab:9e:f1:6e:07:29:bb:35:af:ab:ad:92:9f:3d:
e5:97:be:0a:c3:72:78:23:d6:fc:92:fc:db:17:7f:
a2:c3:2a:dc:cd:a3:89:a3:a4:9d:e3:c6:5d:e3:11:
ce:5b:6f:4c:e6:d0:9c:94:f1:03:d3:56:e9:9a:b3:
ee:12:52:6a:0f:4c:13:b1:dc:5d:3b:2d:18:a7:ed:
4e:43:af:9c:87:0b:cc:4a:c1:99:d0:cf:cf:15:cd:
fd:54:98:e0:91:eb:72:7a:ae:f5:8b:6d:51:b8:aa:
64:7e:85:ae:60:c9:7a:45:ca:dd:e7:31:50:c9:bf:
ef:4e:f0:c4:c9:af:de:73:cd:54:48:60:24:90:a6:
52:d2:e9:f1:56:73:cc:48:b9:1a:a0:47:d3:76:0f:
e1:6b:b9:5b:40:8d:e3:15:af:63:1a:1b:da:ef:5c:
ea:d8:52:7d:3a:d9:d6:d8:3d:2a:8c:d8:2e:3d:c1:
78:7f:04:31:63:86:b0:a2:0d:ba:24:28:1c:5a:d7:
36:08:e6:6f:91:fc:35:fd:44:6a:e7:c6:87:00:14:
8c:97:33:2a:4e:60:d6:3f:65:f8:c1:92:2d:94:2a:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
39:C3:8F:E2:4B:4E:DA:D1:F1:88:7F:18:69:AC:9E:DD:02:3C:D7:B4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FUqobSx1X9DgPS5eMK9n8WmSR46VwQ6yeRXG7ZTcgZ5q/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FUqobSx1X9DgPS5eMK9n8WmSR46VwQ6yeRXG7ZTcgZ5q/0/39C38FE24B4EDAD1F1887F1869AC9EDD023CD7B4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.220.0/22
IPv6:
2804:4b00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267277
Signature Algorithm: sha256WithRSAEncryption
67:54:3a:67:94:5b:a9:9c:de:42:a6:7c:03:a6:9d:6d:f8:97:
77:33:89:82:e7:26:6a:83:41:64:40:57:43:ad:6c:42:ba:ba:
5c:4c:a6:d1:d7:cf:9e:91:e2:ef:5e:17:28:1e:88:39:25:8a:
70:1d:96:b8:74:c1:73:e8:7b:d8:82:90:c1:7e:33:42:72:07:
d4:ec:03:02:9d:00:6c:de:36:fb:5a:bf:5a:9d:06:46:e7:19:
0b:e2:a6:b4:84:bd:6f:07:c9:09:a3:a3:18:9e:04:78:74:f6:
03:d0:89:ab:f9:38:9b:b5:3d:4b:44:a2:43:d1:23:ca:d1:e8:
53:22:c1:45:d2:f0:83:fd:a3:6d:c8:c3:97:82:28:0b:6e:f1:
05:8b:73:81:be:e4:b4:4a:ef:ed:66:aa:f1:0d:91:25:a3:6c:
9b:99:98:27:10:4d:19:d1:e3:11:3d:02:45:d0:93:e5:45:8e:
97:57:f7:4f:e0:5d:21:46:01:7b:4c:3b:08:74:c9:0c:2e:57:
8b:af:6c:99:6d:e2:a3:75:27:02:03:b2:3a:02:f1:89:68:3b:
af:6a:f3:e1:9a:4d:e4:0d:61:f1:ed:d9:e8:49:ff:e9:41:4b:
2c:66:d7:4c:75:81:40:e8:88:6b:5b:f7:dd:15:6b:7c:34:1b:
9a:08:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 22:43:21 2024 by rpki-client on console-ams.rpki-client.org