Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
File: 3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer (raw, json)
Hash identifier: mpYkgBYfJin+oADWW4eKbZwg8QZI2CtIcpYuIMCpU3Y=
Subject key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 189B55E02B188A9C249464C1EE136EC354E8A2DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.mft
caRepository: rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 07 Apr 2024 03:16:54 +0000
Certificate not after: Sun 06 Apr 2025 03:21:54 +0000
Subordinate resources: AS: 269514
IP: 45.186.236.0/22
IP: 2804:65c8::/32
Validation: Failed, certificate revoked on Mon 29 Apr 2024 07:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:9b:55:e0:2b:18:8a:9c:24:94:64:c1:ee:13:6e:c3:54:e8:a2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 7 03:16:54 2024 GMT
Not After : Apr 6 03:21:54 2025 GMT
Subject: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:65:b7:06:6c:b9:40:98:24:78:ed:bc:52:
5a:80:c6:c1:76:10:2b:fd:9b:41:31:e1:d8:2d:e5:
53:42:7e:45:f8:42:57:e2:03:66:ff:a8:22:b7:69:
51:fb:90:4a:9b:37:b7:bb:95:77:43:58:6f:29:31:
10:a0:48:d5:50:c1:0f:db:1d:8e:e1:6d:08:4d:50:
63:30:21:cd:15:7c:76:b7:8e:eb:0a:83:1c:91:aa:
bf:67:96:04:9f:d0:6d:cf:08:26:cf:3e:10:2c:c9:
ba:3c:c8:01:ac:8b:34:57:08:78:37:82:0b:09:94:
f2:e6:43:ef:16:64:27:03:ce:39:7d:2e:a3:dc:89:
70:e5:92:af:5e:5a:6f:91:de:40:2f:17:f8:e4:fe:
81:26:aa:37:a2:91:14:25:77:ea:17:ba:6d:4e:2a:
a9:18:26:37:a2:e8:77:36:fa:ff:31:2b:c0:d3:7b:
ae:25:e9:aa:75:ee:25:64:0d:c0:9c:6e:bf:51:50:
54:19:71:07:ea:d8:37:27:c5:21:0e:3c:4a:58:f4:
42:c0:2b:c9:22:8c:5b:bf:96:02:c9:d8:a9:61:b0:
ec:b1:a6:27:72:c7:e8:86:c1:67:ed:f4:53:1c:db:
b0:b0:f3:d9:53:2a:7b:4c:a4:98:9e:5e:d7:82:ce:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.236.0/22
IPv6:
2804:65c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269514
Signature Algorithm: sha256WithRSAEncryption
b4:9b:0b:02:3c:a6:29:6a:53:65:f7:c5:3d:a8:96:d3:bd:60:
6d:3a:17:73:57:0d:b5:9d:09:fa:4c:3e:95:07:46:af:b2:4e:
ac:1b:8a:eb:fc:85:4a:95:df:3b:1c:11:09:f6:9f:b5:13:e0:
ec:3f:27:8d:84:bf:fc:1e:18:47:4a:9f:fd:86:09:7a:64:d0:
b1:e2:07:83:68:da:20:6a:0c:a1:8c:aa:e8:9c:ac:8b:c9:df:
b7:5d:9e:79:d3:d5:a9:b3:43:05:53:83:3f:14:8d:bd:a7:14:
dc:3c:22:a3:49:fc:e2:a4:bb:ea:d0:89:a4:4e:f4:3c:a3:d2:
0f:7a:73:df:55:25:d9:ec:55:6e:2b:e8:64:17:b5:6a:59:ef:
86:21:bf:0d:e9:e2:6c:1e:bd:b7:9c:87:f2:a5:53:95:36:1f:
de:ec:03:a6:50:53:e6:bd:40:58:3b:5e:e3:41:db:6c:90:d5:
88:5f:95:ff:58:5d:51:9d:66:f6:92:aa:d4:90:4e:ca:cc:8c:
ce:14:e2:24:26:25:26:99:1f:bd:e5:55:67:f4:2a:a8:17:44:
9c:3b:78:ea:b6:4b:11:f7:b9:1e:04:73:70:c9:ac:38:30:fb:
3e:5a:d5:be:d6:4b:63:50:5b:99:cd:99:f2:fc:d6:84:ce:4e:
92:3f:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org