Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer
File: 3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer (raw, json)
Hash identifier: kqo9e6VLzo5Vc1mqaTYNbCTEMQoMP/1EXhzrws6CpME=
Subject key identifier: 3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0E1C42C4DD52758A4909D2B5BDEB8FD6A850EC5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.mft
caRepository: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 24 Apr 2024 12:31:46 +0000
Certificate not after: Wed 23 Apr 2025 12:36:46 +0000
Subordinate resources: AS: 270253
IP: 200.110.204.0/22
IP: 2804:692c::/32
Validation: Failed, certificate revoked on Tue 16 Jul 2024 15:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1c:42:c4:dd:52:75:8a:49:09:d2:b5:bd:eb:8f:d6:a8:50:ec:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 24 12:31:46 2024 GMT
Not After : Apr 23 12:36:46 2025 GMT
Subject: CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:98:6b:af:59:3f:de:84:b4:73:e4:88:c7:
b6:d9:2a:7b:89:90:fc:1b:0b:6f:51:ec:bc:f1:6c:
40:cc:fa:99:bc:a3:4f:43:f9:c8:24:fe:ea:c9:ab:
31:fd:9f:35:e3:96:f1:02:85:d8:43:9d:8c:9f:14:
a2:47:d2:0d:fd:46:55:9f:18:94:06:be:a9:f5:20:
90:62:a9:da:66:51:bc:8c:72:87:df:56:13:c3:d1:
97:83:37:fd:81:94:3d:b4:0f:1e:9d:a9:c8:c6:57:
da:fb:1e:8a:83:61:d9:63:60:5c:cc:cc:9c:5f:53:
76:05:4d:cd:d3:5a:96:db:6d:2e:a2:f3:1e:10:35:
0e:b6:69:bf:9a:4c:b4:bf:90:cd:c7:d0:56:fc:c6:
9f:87:2b:92:3a:d8:09:04:8d:80:d8:ce:d5:3d:fe:
22:7c:47:9c:89:86:fe:33:5b:27:5e:c9:98:05:c8:
50:0c:b4:66:05:1c:5d:4a:75:b2:d6:65:19:57:71:
f3:ea:68:13:53:01:73:42:01:a6:80:bb:4b:69:37:
8a:d2:78:7a:5d:f5:76:c1:25:01:f5:67:44:bf:6e:
67:c2:c3:00:9a:7f:e2:43:3e:aa:b7:11:8e:40:a2:
43:87:ea:da:d2:55:25:65:71:4b:c4:05:bb:13:b6:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.110.204.0/22
IPv6:
2804:692c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270253
Signature Algorithm: sha256WithRSAEncryption
37:19:93:a0:4a:36:be:fe:12:03:23:53:54:c8:79:48:fb:5d:
6a:2f:f3:b5:da:46:ce:cd:5b:09:ba:0c:ca:b3:93:01:58:cd:
32:80:b1:de:e6:65:c5:da:93:94:5d:4b:3f:66:7e:c9:c4:1c:
41:64:1b:84:59:1f:3d:c3:4d:77:56:00:26:78:4f:93:00:f5:
9e:90:d1:3f:93:f6:c0:18:c1:46:d2:30:2f:04:e1:8d:88:10:
ed:a0:b5:94:16:48:dc:bc:dd:2f:dd:aa:1e:00:6d:f0:7e:6c:
de:02:9c:15:77:9b:c3:55:95:d7:4c:e8:49:7d:f6:74:f6:9e:
29:66:47:89:80:20:40:ed:56:73:ac:10:cc:78:7a:4d:3b:a6:
e5:9d:4e:7c:2c:f5:db:e4:4b:4e:8c:32:63:78:8b:3e:60:8b:
09:5f:ad:9a:e3:92:19:ed:17:37:03:8e:02:bd:44:32:83:2f:
cc:81:61:ae:03:61:2d:5a:dd:14:ff:5a:75:da:5b:82:27:ef:
24:e3:9e:41:7e:a1:73:9c:1e:0c:f7:a8:45:6d:91:3b:f5:d1:
b6:18:9d:49:5a:51:03:de:f9:f3:95:04:26:2a:9c:fd:18:28:
ea:bc:7e:50:f1:96:eb:de:86:9a:08:66:6e:17:85:64:4f:b3:
89:8b:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:33:28 2024 by rpki-client on console-ams.rpki-client.org