Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
File: 3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer (raw, json)
Hash identifier: MjRV8cdazi7ZtoQw9LlrdZnVmlChX0ZCKf+r3tEBYsA=
Subject key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1E931BBC74CC7D670255985E9419C5A1530411FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.mft
caRepository: rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 16 Apr 2024 22:49:30 +0000
Certificate not after: Tue 15 Apr 2025 22:54:30 +0000
Subordinate resources: AS: 264022
IP: 143.0.220.0/22
IP: 2804:2990::/32
Validation: Failed, certificate revoked on Thu 23 May 2024 21:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:93:1b:bc:74:cc:7d:67:02:55:98:5e:94:19:c5:a1:53:04:11:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 16 22:49:30 2024 GMT
Not After : Apr 15 22:54:30 2025 GMT
Subject: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:16:07:bb:5e:6a:00:85:ea:9a:89:bb:ca:
95:b9:fb:64:0c:66:1b:c9:86:bc:4f:02:ab:c5:1b:
9e:5b:3a:00:97:28:42:e1:90:82:56:19:61:fa:b2:
9c:02:90:9a:8c:8d:ad:68:25:7f:6e:b4:6e:22:fc:
f9:57:de:fc:6b:7d:68:34:88:21:7e:c8:8e:c8:be:
08:9d:5a:88:57:a7:8b:79:23:32:a8:2d:08:50:e3:
7d:5a:87:92:08:4f:df:89:60:a8:47:b7:25:9c:be:
e9:fc:19:a9:15:2a:29:32:a5:0e:9f:78:22:39:97:
db:e9:b2:ba:cc:18:4c:ed:35:88:dc:d6:2b:88:b5:
ec:4b:db:1e:fe:27:a6:bc:92:a1:3a:fe:33:d9:ea:
10:1c:37:37:39:73:12:95:ba:29:d6:b5:35:81:fc:
95:f9:73:f9:fa:ad:9b:de:aa:c1:ac:86:a2:4e:19:
cb:1d:a0:e3:2a:19:33:05:e8:7d:80:42:dc:87:22:
b9:fb:32:e7:6e:0c:c9:9d:4e:ba:49:65:aa:cf:24:
d8:32:b8:7d:15:df:29:81:c9:da:4f:b1:e1:47:8b:
e9:f2:c4:e7:de:da:5b:ee:90:8a:ba:48:ad:65:9b:
37:be:7c:b3:4c:57:86:83:d2:4b:e9:04:3e:98:3f:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.220.0/22
IPv6:
2804:2990::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264022
Signature Algorithm: sha256WithRSAEncryption
51:e9:68:c1:e2:8d:36:93:ab:88:57:4e:99:60:20:42:c0:5c:
98:b8:f5:5e:4e:4c:e7:ab:76:54:54:ca:1a:ef:42:6d:b9:51:
03:f4:2a:eb:2c:39:f6:d7:27:b3:c8:f6:6c:3e:f3:b4:72:d6:
e7:1c:01:4e:02:c3:03:f7:d9:e5:67:5c:de:fc:8e:67:cd:40:
98:11:ce:a5:cd:fa:fd:78:5a:66:73:76:cc:0f:c4:87:5d:94:
3c:ab:dd:89:df:73:32:bb:1f:1f:af:14:2e:b1:97:ac:24:bc:
b5:74:54:00:b5:70:2c:3b:f5:11:38:b1:d6:9f:30:6e:6c:04:
3e:46:06:2f:dc:ab:b5:56:f3:28:0b:a8:66:67:48:5f:84:79:
89:89:cd:8f:71:ac:77:9f:ad:55:dc:84:68:86:e8:79:fc:1a:
3c:06:32:1a:81:28:be:8d:46:4f:cd:4e:f5:61:cf:b0:ef:3e:
4a:2b:19:af:1a:fb:69:54:c2:4e:1d:f3:c8:2d:7e:17:3d:ed:
22:3c:f7:e7:1d:55:16:04:f5:24:ad:48:ae:81:df:c0:65:5d:
de:96:1e:a2:26:8f:2d:e7:6a:7c:3d:e7:2a:b2:a8:ab:b7:e4:
f8:56:6f:f4:77:e2:9f:18:7b:f1:97:a9:4d:3e:97:1a:74:ef:
7f:d5:7c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org