Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.cer
File: 3C5A521D0400D454F230DFD5AC8D95290C0A8A51.cer (raw, json)
Hash identifier: vVXwSFtSD62TWPGsI3zDHS6A4/NOBpnmZIqGGPdljKE=
Subject key identifier: 3C:5A:52:1D:04:00:D4:54:F2:30:DF:D5:AC:8D:95:29:0C:0A:8A:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4286EF5C65B24EC2832C7C5DC9D0CC7D12710BB9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.mft
caRepository: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 26 Aug 2024 18:24:49 +0000
Certificate not after: Mon 25 Aug 2025 18:29:49 +0000
Subordinate resources: AS: 263486
IP: 170.79.128.0/22
IP: 191.242.248.0/21
IP: 2804:1298::/32
Validation: Failed, certificate revoked on Thu 07 Nov 2024 21:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:86:ef:5c:65:b2:4e:c2:83:2c:7c:5d:c9:d0:cc:7d:12:71:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 26 18:24:49 2024 GMT
Not After : Aug 25 18:29:49 2025 GMT
Subject: CN=3C5A521D0400D454F230DFD5AC8D95290C0A8A51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:b5:b6:f9:4e:7d:44:d7:5d:79:6c:bd:04:
a5:dd:7a:ae:86:36:1b:19:73:18:f5:73:13:01:f6:
fe:29:d8:de:ad:04:26:f0:49:f3:9b:1f:b2:5e:ee:
c7:fa:cf:46:8a:b1:25:dc:0d:ba:f4:e9:c5:14:4a:
0e:82:53:2a:1a:ba:e4:f8:cc:2a:92:58:90:57:c6:
30:a0:d5:40:41:fe:00:9b:6f:e3:fe:14:a5:7f:af:
c9:52:42:55:8d:c9:5f:d5:e2:55:14:6a:d6:6a:ea:
69:c5:d0:47:87:35:8f:e3:4e:96:13:aa:a4:35:4b:
c1:af:70:56:51:b4:30:7a:27:90:2e:e5:bf:5d:55:
32:50:7d:ff:83:cc:72:d1:b1:20:dd:39:36:fc:b1:
3c:3a:cf:bf:5a:09:d1:9e:7e:12:1d:92:6b:83:91:
1d:63:7f:9d:51:4d:9c:52:2b:24:28:ec:05:49:96:
04:5d:09:15:80:ab:fb:a5:3e:53:70:c6:99:d3:6d:
40:e8:d8:50:db:e0:db:9f:88:7a:f3:af:6d:bc:0a:
c3:d5:ba:e9:46:56:00:ef:d6:17:5c:51:1f:17:85:
49:8f:c2:45:9f:04:9a:6b:c0:28:ba:b0:5f:05:f6:
63:e0:77:d2:9d:6c:88:c6:a7:63:e8:a1:ca:82:77:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3C:5A:52:1D:04:00:D4:54:F2:30:DF:D5:AC:8D:95:29:0C:0A:8A:51
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.128.0/22
191.242.248.0/21
IPv6:
2804:1298::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263486
Signature Algorithm: sha256WithRSAEncryption
45:16:46:e9:71:74:ee:d3:fb:11:7e:f5:4c:27:2c:b1:bf:23:
19:8b:fa:2a:50:90:4e:43:94:a4:59:35:7e:25:78:9e:b6:07:
2e:97:23:59:3e:c5:67:c1:c6:6e:e3:34:8c:3a:a6:a2:10:a4:
14:26:24:3c:47:1c:e5:0a:70:8c:18:d5:64:90:23:a3:14:39:
71:b4:02:80:04:48:51:66:37:68:3d:36:a9:be:d7:18:f0:d7:
b9:71:88:e6:64:ea:81:42:0c:a5:03:01:18:d3:c3:2e:41:25:
da:5e:89:e2:5a:d2:ad:9a:59:20:bd:d4:75:f4:5c:ba:d7:90:
8a:0e:24:63:57:6a:97:fd:71:a8:a9:9e:6e:b6:62:19:46:f8:
e8:ec:d5:44:6f:53:da:a0:d9:cf:45:82:0c:b7:5e:6b:d4:c1:
7e:6e:7f:54:26:1c:49:65:8d:83:74:85:51:43:e0:cd:28:35:
ac:20:16:38:b9:26:a1:f1:fb:6f:7f:72:a6:f5:5a:70:30:52:
75:c1:df:31:8e:6a:fd:0a:4f:f7:38:b4:d5:a6:34:b7:79:07:
d5:62:1a:88:b9:bf:f2:90:64:32:c8:be:0c:d6:6a:44:88:b4:
99:ca:42:1d:cd:77:3e:84:62:b5:db:84:77:e6:f5:c1:ad:7f:
09:1d:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:09 2024 by rpki-client on console-ams.rpki-client.org