Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer
File: 3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer (raw, json)
Hash identifier: ONM5zySM8FfGCOIX12gMStHhI1vJ0lwPZfUk6z6yCwU=
Subject key identifier: 3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4ED093CD4933FBBF7ACCC447A48C274FDB3DDE04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft
caRepository: rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 05 Sep 2024 16:10:55 +0000
Certificate not after: Thu 04 Sep 2025 16:15:55 +0000
Subordinate resources: AS: 268955
IP: 45.176.224.0/22
IP: 2804:5d2c::/32
Validation: Failed, certificate revoked on Sun 10 Nov 2024 17:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d0:93:cd:49:33:fb:bf:7a:cc:c4:47:a4:8c:27:4f:db:3d:de:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 5 16:10:55 2024 GMT
Not After : Sep 4 16:15:55 2025 GMT
Subject: CN=3F84F51408CD88D165CE931B15E48DC9CB8084BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:2d:35:3c:23:83:e4:14:c0:9e:fc:5c:25:
71:d0:41:1f:67:27:15:23:5f:b3:4b:38:7c:22:5a:
00:60:86:58:4d:21:49:1e:6b:aa:df:7b:2a:23:f5:
b1:45:bb:d7:d4:a7:c0:38:c2:08:28:8b:e7:3e:8d:
8b:35:ef:85:89:8e:dd:3c:30:57:a2:71:80:ca:4d:
f5:0d:9a:43:e5:08:8d:63:8c:31:85:da:ec:b0:77:
0e:71:7a:9f:5f:f8:53:70:ab:c9:ce:f1:e0:4e:e3:
b8:c5:bd:0d:09:f0:b4:6b:b6:1b:39:30:34:d2:8d:
3d:be:80:de:d3:1d:2c:15:1e:4e:52:dc:fa:a2:cc:
7c:92:b1:d2:ab:77:60:60:3e:32:9c:f6:96:4f:1a:
06:5c:04:2e:3c:80:d7:21:5d:37:72:2c:1a:ae:b5:
a1:f6:8e:98:84:d1:86:15:83:0c:e4:cc:1c:77:aa:
da:57:db:65:d4:35:8f:a9:ec:ea:6b:60:2a:7e:b8:
a2:34:bb:d0:e6:6c:04:89:de:eb:c0:66:f3:0d:4b:
a1:62:ab:a1:8f:d5:69:07:85:53:67:5f:fb:fd:36:
b8:36:07:76:f7:f2:f5:6d:e7:5d:b8:74:da:af:24:
92:47:5f:68:3b:fa:d3:0e:5f:5d:b9:54:8a:fe:71:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.224.0/22
IPv6:
2804:5d2c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268955
Signature Algorithm: sha256WithRSAEncryption
09:8e:8a:41:1a:a3:d2:b8:90:f1:b2:9d:df:cd:d0:c6:0f:c2:
2e:2a:47:a6:55:1c:e0:e9:51:ce:59:b0:ed:17:f5:b8:12:41:
20:af:50:58:9e:25:c7:db:53:9a:08:a3:65:44:99:5e:26:9c:
32:bc:6d:31:7a:ac:6b:87:6a:ab:ce:5c:06:d0:5e:40:f6:e0:
a6:90:83:80:1d:60:a0:f8:ce:93:b2:63:6e:51:10:86:9f:df:
31:c3:0d:c7:18:cf:f9:6c:60:99:41:2f:0d:bd:08:2e:c6:99:
97:97:d3:b6:53:04:88:4b:44:90:db:28:f4:a9:a8:7b:24:8b:
56:69:0e:b9:9e:88:df:b0:90:5b:0a:ee:f6:f2:7b:12:ca:8d:
d9:6a:0a:3b:70:3d:49:56:75:47:c9:ec:42:22:13:21:d1:df:
41:0a:7f:23:02:53:14:04:62:e1:57:1e:8e:57:27:76:94:f1:
09:6e:56:66:bf:ff:e4:42:4e:67:bb:c7:66:7a:35:5e:89:2c:
58:fa:dd:c9:63:da:2e:83:ed:62:84:34:0f:4a:1a:12:96:52:
34:72:29:73:b8:84:d7:9e:69:6a:1d:cc:3a:12:08:36:a5:4e:
f6:c8:d7:bf:b5:48:86:a8:d2:1d:56:3e:8d:5c:7e:d9:ba:4a:
00:91:da:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 19:36:36 2024 by rpki-client on console-ams.rpki-client.org