Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.cer
File: 3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.cer (raw, json)
Hash identifier: KRynjb6t9Izzn4lkn/QvMXzba5WaBoblubJvGxHybxM=
Subject key identifier: 3E:32:FB:0E:A1:4C:66:D3:AE:07:1D:BE:07:6F:53:DC:CF:58:E1:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3D1A1057C9509AFED7C7B8D2DB3EF9796B3EEF24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.mft
caRepository: rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 30 Sep 2024 15:38:11 +0000
Certificate not after: Mon 29 Sep 2025 15:43:11 +0000
Subordinate resources: AS: 266406
IP: 170.81.120.0/22
IP: 2804:375c::/32
Validation: Failed, certificate revoked on Sat 02 Nov 2024 17:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1a:10:57:c9:50:9a:fe:d7:c7:b8:d2:db:3e:f9:79:6b:3e:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 30 15:38:11 2024 GMT
Not After : Sep 29 15:43:11 2025 GMT
Subject: CN=3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:f4:a3:79:04:a5:7a:f9:4a:fe:d8:1c:8a:
ed:f7:19:d1:2b:30:2d:4b:75:e0:c8:c5:ea:5d:0f:
44:5d:41:1c:0f:fe:0d:44:fc:1b:15:2f:33:fa:8a:
67:74:98:ed:c5:14:9a:46:bb:e6:55:1c:be:dd:be:
4a:70:59:96:ec:47:e2:74:b0:05:35:45:e0:c2:ac:
d6:ef:e3:b2:37:b2:42:43:1c:47:29:f8:f1:39:67:
5f:70:ee:a9:80:a8:1a:12:81:33:9c:e8:0f:34:7b:
aa:3c:23:a6:f5:fc:54:30:17:03:7d:d7:52:d1:fb:
54:5b:de:4a:83:03:08:eb:6f:0e:cd:e5:5d:bb:57:
06:c3:78:72:0b:aa:69:f9:fb:20:59:ce:3b:d0:3b:
e2:e7:5e:9a:74:57:c9:06:09:3d:bd:91:45:67:ea:
f2:74:ab:0e:67:90:2a:05:a2:ca:dc:bc:e4:7c:6e:
5a:51:d2:6b:3b:83:05:e0:f8:03:a2:01:d3:73:5c:
86:75:f3:7a:20:09:5d:9e:de:de:dc:f4:10:c4:f6:
66:8d:24:d8:44:85:47:f1:e1:46:3a:3c:bc:c2:57:
87:4e:c9:67:f1:c3:ca:f2:04:4f:7f:62:2e:0b:7c:
11:b8:93:bf:cb:dc:82:34:94:3d:71:dc:dc:2c:20:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3E:32:FB:0E:A1:4C:66:D3:AE:07:1D:BE:07:6F:53:DC:CF:58:E1:1D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.120.0/22
IPv6:
2804:375c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266406
Signature Algorithm: sha256WithRSAEncryption
0a:11:01:30:a2:40:4e:05:dd:2e:f3:64:dd:49:d1:f7:a3:a9:
1f:3f:4a:b1:b3:a3:8a:6b:3e:e5:53:68:3f:1f:22:3e:a7:cb:
37:63:bb:25:cf:6d:e6:6b:5d:8b:04:8b:4d:1f:fc:90:16:ee:
75:69:8d:6f:89:5f:c2:a0:80:e9:82:55:a1:05:4e:6e:54:85:
87:be:32:44:91:a8:ab:83:1f:f9:c9:6b:2d:b8:2e:ee:21:1e:
23:77:8d:4f:d3:fb:8d:99:21:26:14:d3:da:cb:d7:6a:74:18:
a4:9a:66:42:f9:ca:1d:b1:3b:60:4a:bb:eb:43:39:23:9f:55:
aa:34:d2:58:66:39:6d:0b:57:a8:f7:d9:92:39:a2:17:88:be:
b3:08:e2:ad:f9:5b:5e:63:e2:92:f4:0f:99:58:24:87:4c:b1:
5f:ef:f7:cb:84:60:cf:84:70:25:00:38:30:c3:61:f1:6a:db:
38:77:55:33:f0:3c:61:07:27:51:a4:dc:40:71:73:9c:5d:3a:
9e:40:d3:88:2a:15:74:45:64:e2:71:ae:96:ec:7e:c9:3e:27:
92:49:ad:cc:e6:28:1c:4d:67:6f:5e:92:7f:f8:16:e8:f3:47:
b3:c7:cf:0e:32:c0:eb:0a:fc:26:a8:5f:12:c5:54:6e:0b:f0:
d0:24:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 19:25:18 2024 by rpki-client on console-fra.rpki-client.org