Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.cer
File: 4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.cer (raw, json)
Hash identifier: DRs2hBtT5jFe0pLF80MkCfnKK2XecBhDjf6t4UvTNrM=
Subject key identifier: 41:78:BB:74:E2:8D:29:CB:C8:D1:23:A4:F3:CE:26:B1:60:CC:5C:82
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4A41EEB382B0F2CC64F1243C8BBC0E5E4B591DB8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.mft
caRepository: rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 01:47:33 +0000
Certificate not after: Thu 03 Apr 2025 01:52:33 +0000
Subordinate resources: AS: 264202
IP: 138.97.216.0/22
IP: 170.233.44.0/22
IP: 2804:241c::/32
Validation: Failed, certificate revoked on Mon 01 Jul 2024 11:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:41:ee:b3:82:b0:f2:cc:64:f1:24:3c:8b:bc:0e:5e:4b:59:1d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 01:47:33 2024 GMT
Not After : Apr 3 01:52:33 2025 GMT
Subject: CN=4178BB74E28D29CBC8D123A4F3CE26B160CC5C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:2b:c1:a5:7b:6e:e6:88:fa:62:dc:7d:3b:
6a:fd:4f:46:2a:cc:1c:cc:f6:7a:d6:6d:c2:d3:23:
64:71:f5:a3:47:0d:44:94:a7:52:8b:a2:24:7e:96:
72:f5:c0:cf:41:12:e2:8a:25:e1:6b:6d:e3:4b:35:
be:08:e4:0e:d1:ba:38:49:27:d9:c9:69:fc:ad:14:
15:a2:14:7f:2c:12:f6:10:fb:be:d5:63:c6:a6:7e:
67:ef:1c:72:6a:8f:9a:12:58:5c:df:da:0f:b6:ff:
18:8b:64:06:80:5c:6e:49:ea:4a:8b:67:22:5c:47:
eb:57:45:39:76:18:93:3e:89:e4:5f:a1:d1:e3:1d:
1c:f5:53:c6:94:48:5a:52:a7:b0:a5:fe:3d:19:3b:
4c:97:0e:b5:57:5b:c0:96:ad:60:37:b8:55:02:2f:
d2:63:97:29:bf:a9:ad:50:65:8b:07:41:2d:30:41:
42:ea:31:5c:88:78:34:ef:86:f6:37:e9:92:32:7b:
f4:bd:c7:7d:48:8c:7f:2a:f6:d4:5d:60:4b:91:17:
25:05:b3:ad:e5:7a:20:a6:07:14:6c:b5:81:fb:ee:
4f:e2:90:b4:32:d7:17:c7:e5:0a:4a:54:e8:55:91:
2a:fb:b8:de:af:8a:e1:22:45:e1:1f:ce:e4:08:d8:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
41:78:BB:74:E2:8D:29:CB:C8:D1:23:A4:F3:CE:26:B1:60:CC:5C:82
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.216.0/22
170.233.44.0/22
IPv6:
2804:241c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264202
Signature Algorithm: sha256WithRSAEncryption
78:55:8a:2c:ea:95:d2:b5:15:e1:da:30:64:83:2f:77:79:21:
26:bc:ca:9d:d3:00:33:ca:a9:14:52:a5:73:93:91:a9:ec:b4:
4f:33:89:df:49:29:ea:f9:27:b2:a8:a0:1b:87:7e:91:ee:27:
2f:5c:3f:80:74:cd:6e:e1:95:0b:26:1f:4c:9c:f2:9a:87:4e:
77:fe:de:f6:47:64:a2:51:08:98:0f:55:a2:94:88:97:4d:3e:
da:bd:80:50:19:1d:6e:f1:57:cd:68:d7:9b:cf:f6:7d:8f:82:
4a:df:f3:ed:9d:31:a9:e8:d5:94:b6:6c:93:00:6b:f4:d1:b3:
cf:3e:4f:5a:cd:34:ab:d2:28:99:48:5a:2f:62:04:1d:4a:d0:
23:9d:28:f1:dc:60:15:d0:13:63:19:00:c0:42:fc:19:dd:16:
aa:dd:90:d1:11:0d:20:86:28:5e:74:70:76:a5:49:86:2f:4f:
76:c7:6e:fd:48:33:62:94:1b:e1:79:96:ee:d7:62:f8:bd:54:
e5:75:8d:df:3b:e4:fe:52:06:7a:e4:66:ae:71:aa:fc:2c:e1:
c9:c2:15:90:a5:d5:e1:5f:6f:08:7b:96:5e:55:3a:70:84:1a:
72:14:0b:d0:38:ee:4d:9e:1a:93:40:7b:17:34:11:f9:5b:4c:
04:4f:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 14:21:11 2024 by rpki-client on console-ams.rpki-client.org