Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
File: 3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer (raw, json)
Hash identifier: L5qRQP1fyanC+y2sgNJalajvPUyz+vsxcwClXZjQe8c=
Subject key identifier: 3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 582F897C9C886DA64E24D97F34BB838830FBA53A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.mft
caRepository: rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 08 Oct 2024 22:36:34 +0000
Certificate not after: Tue 07 Oct 2025 22:41:34 +0000
Subordinate resources: AS: 268447
IP: 45.161.48.0/22
IP: 2804:515c::/32
Validation: Failed, certificate revoked on Sun 10 Nov 2024 13:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2f:89:7c:9c:88:6d:a6:4e:24:d9:7f:34:bb:83:88:30:fb:a5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 8 22:36:34 2024 GMT
Not After : Oct 7 22:41:34 2025 GMT
Subject: CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:73:ba:c8:b7:2f:a2:99:78:60:54:9b:e8:
04:3d:f0:7f:27:ce:7f:f7:db:28:6d:d7:3a:79:cf:
f8:83:d7:42:ad:c3:02:dc:4c:34:d8:72:9b:1d:be:
04:7c:09:b2:85:37:23:5d:f1:08:2e:1f:e8:8e:9d:
ab:86:03:15:03:98:0c:ee:ff:5c:c7:33:0e:97:0b:
fc:1f:34:94:37:5e:bf:01:53:50:bf:5b:50:cc:73:
71:17:5b:03:3d:5e:8c:44:01:dd:9a:3b:5b:00:7a:
e8:89:7d:51:81:9d:18:81:ee:8b:c8:27:4c:4e:0e:
57:cf:5d:fb:d2:4d:74:35:2e:c2:0d:c4:df:d2:d7:
99:f5:9e:35:2b:c1:ab:85:30:07:08:a4:0b:9e:56:
09:a5:db:4b:86:66:97:e5:71:67:a0:23:7a:3d:a6:
98:39:6d:a3:8b:32:aa:f2:44:e7:be:4f:21:a2:10:
d0:cc:57:69:e3:aa:86:25:44:c5:f3:df:da:99:16:
33:96:85:3e:bb:77:76:f7:7c:28:53:5e:e5:85:fb:
f5:c0:16:88:8a:8f:55:23:1b:b5:df:97:66:ee:13:
57:94:ab:ad:f6:96:b9:c6:82:8f:60:d4:2c:45:97:
c8:d4:7e:60:d2:f9:9b:26:e6:be:d2:99:ca:9a:95:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.48.0/22
IPv6:
2804:515c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268447
Signature Algorithm: sha256WithRSAEncryption
d2:04:41:b2:90:34:9c:72:27:f5:61:77:f5:ca:9d:60:b9:0e:
39:f6:6d:ff:a4:ea:3a:28:3d:05:36:a4:b4:13:bb:ac:7c:a5:
90:9b:09:d8:32:86:16:53:d7:7f:d2:59:81:de:5c:f1:be:5d:
ca:4f:2d:39:f7:aa:42:82:a4:60:5d:02:55:28:62:f1:09:6d:
77:d6:2e:60:ec:8f:85:d0:9d:ef:e7:2d:e1:20:01:12:7b:70:
9e:76:8c:bd:a7:7b:a3:77:f2:f7:8f:b2:12:18:7e:a3:2e:8d:
fe:a4:11:49:6d:3c:dc:a2:07:ac:5d:0f:1e:d8:4f:7d:62:b7:
78:e5:a5:d1:77:a0:1d:87:9b:69:bb:99:eb:d3:7e:62:ee:83:
0a:07:4a:ab:79:62:b5:7d:e6:26:06:47:98:c4:ee:6f:6c:7b:
d8:51:40:66:d7:cf:e2:57:10:39:31:8b:b3:bd:7e:56:60:83:
13:9e:24:ff:00:35:6d:0c:f3:b0:9b:1c:16:9e:02:22:86:c1:
ad:01:f3:fa:4a:fe:23:01:1c:f3:23:bd:14:90:86:6a:2b:d8:
5b:a6:16:75:9f:92:b2:73:76:46:ab:10:e3:d3:45:07:c5:68:
07:27:39:a4:92:92:15:d8:af:25:a1:63:56:f5:82:3d:0f:18:
56:9f:4d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 17:38:58 2024 by rpki-client on console-ams.rpki-client.org