Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/39E9F96C5FF57D647F0BA040ACA9DF579D0CC13F.cer
File: 39E9F96C5FF57D647F0BA040ACA9DF579D0CC13F.cer (raw, json)
Hash identifier: PKUGoO6/1aaf6LgK5vir91GB+R7ZjIykxaFdRSNsh2I=
Subject key identifier: 39:E9:F9:6C:5F:F5:7D:64:7F:0B:A0:40:AC:A9:DF:57:9D:0C:C1:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 15DCF4C805DE58EBFBDC0EEFD784DDE4A3D55184
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/1/39E9F96C5FF57D647F0BA040ACA9DF579D0CC13F.mft
caRepository: rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 21:33:21 +0000
Certificate not after: Thu 03 Apr 2025 21:38:21 +0000
Subordinate resources: AS: 53160
IP: 138.186.132.0/22
IP: 187.19.112.0/20
IP: 2804:26d8::/32
Validation: Failed, certificate revoked on Tue 30 Apr 2024 14:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:dc:f4:c8:05:de:58:eb:fb:dc:0e:ef:d7:84:dd:e4:a3:d5:51:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 21:33:21 2024 GMT
Not After : Apr 3 21:38:21 2025 GMT
Subject: CN=39E9F96C5FF57D647F0BA040ACA9DF579D0CC13F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:ed:41:db:1b:04:1c:a4:97:46:51:55:36:
29:3a:de:4e:cf:f9:ec:63:43:fd:e8:c4:a3:44:00:
18:99:f1:57:d4:f0:56:5a:7a:cb:da:19:44:2b:21:
49:27:c6:3a:79:49:ee:3e:9f:3c:cb:ab:a5:42:0b:
10:69:1a:89:68:fa:1e:e6:7d:b5:18:6d:50:9e:ab:
85:29:1a:92:a3:e8:ba:98:e8:f5:1c:45:19:3e:0b:
3e:b9:51:dc:ed:a7:bf:8a:e8:38:82:66:58:fc:a1:
67:a2:f8:90:06:ca:7c:12:5e:29:b8:79:01:3b:aa:
a7:ae:3a:21:ac:99:11:6f:98:b2:55:ca:07:4c:22:
20:c4:2e:fa:79:93:2c:9f:e9:f6:57:d9:98:d7:ed:
e0:a1:42:97:c1:bc:48:bb:ef:2b:e2:7c:49:9d:3b:
49:17:34:1d:d4:60:5b:56:0b:a4:32:04:ff:de:96:
a5:4e:e3:6d:1f:46:f5:55:b9:21:bd:cb:1f:b2:e5:
c8:a0:ec:d3:22:88:15:80:71:d4:1f:57:23:dd:dd:
00:3e:7c:ca:28:2f:66:eb:46:dd:5e:81:e1:ad:03:
d1:af:06:4a:d7:91:31:23:11:f8:d3:33:78:c1:01:
81:cc:aa:ba:73:d4:e9:ad:eb:da:b1:48:3f:5c:64:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
39:E9:F9:6C:5F:F5:7D:64:7F:0B:A0:40:AC:A9:DF:57:9D:0C:C1:3F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/1/39E9F96C5FF57D647F0BA040ACA9DF579D0CC13F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.132.0/22
187.19.112.0/20
IPv6:
2804:26d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53160
Signature Algorithm: sha256WithRSAEncryption
13:4a:ac:36:12:c6:1a:00:bb:27:d8:69:b1:2a:99:56:db:8c:
0d:54:35:98:ef:54:46:64:4a:eb:ca:e1:01:44:dc:68:cc:0c:
99:4b:48:32:b1:b3:93:6f:46:f6:a8:94:22:59:2b:98:b9:9a:
07:0f:d0:44:c8:60:a8:bf:f6:29:8f:3e:07:83:c5:b7:e9:a0:
ad:9a:95:17:4d:09:c0:96:81:13:ba:27:f6:ae:ce:49:69:b0:
59:f3:1f:b1:3f:df:57:10:74:e3:51:c3:67:ef:b2:7d:d7:6d:
da:13:dc:d7:9a:1b:eb:de:29:73:17:1d:8c:12:a6:6b:54:01:
26:ce:20:24:17:bc:38:4b:28:55:9a:bf:bc:f3:a1:a8:de:b0:
30:0a:37:b0:17:1d:a3:ed:cd:84:9b:70:a4:20:d2:24:62:d1:
c0:65:33:6d:15:6b:f2:a8:9c:7d:21:4c:c8:9b:33:b8:e0:17:
42:f1:d1:ab:52:99:6b:86:8f:fa:f6:4d:19:b8:0f:05:7e:79:
93:fc:f3:56:a9:c0:b8:e4:71:29:2c:85:c7:50:9b:38:1c:c7:
80:2e:f5:ae:15:e5:de:04:fc:89:07:b2:ee:4e:9c:4b:dc:a1:
1e:03:31:10:9f:a2:c6:a1:f6:68:38:3c:44:4b:13:e9:b8:18:
f0:61:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org