Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/41F3C0F65E8171965A227085FB864D9A4D75C0E2.cer
File: 41F3C0F65E8171965A227085FB864D9A4D75C0E2.cer (raw, json)
Hash identifier: RpQNRTwy6QoxQ9yrcRtKTgSjLBq2sgX1iKDd/5OeLNk=
Subject key identifier: 41:F3:C0:F6:5E:81:71:96:5A:22:70:85:FB:86:4D:9A:4D:75:C0:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 38A339D3EB6FADB84E25CF914254864420AF05F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/41F3C0F65E8171965A227085FB864D9A4D75C0E2.mft
caRepository: rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 23 Aug 2024 20:03:50 +0000
Certificate not after: Fri 22 Aug 2025 20:08:50 +0000
Subordinate resources: AS: 270732
IP: 189.8.120.0/22
IP: 2804:7088::/32
Validation: Failed, certificate revoked on Thu 26 Sep 2024 11:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a3:39:d3:eb:6f:ad:b8:4e:25:cf:91:42:54:86:44:20:af:05:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 23 20:03:50 2024 GMT
Not After : Aug 22 20:08:50 2025 GMT
Subject: CN=41F3C0F65E8171965A227085FB864D9A4D75C0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:96:53:02:89:a5:a8:1c:39:27:02:9a:cb:
9a:3b:10:f6:64:c4:27:35:22:bd:e0:09:df:1f:87:
97:d2:0b:23:12:25:a0:3b:b4:c9:6b:9a:f4:22:b2:
62:c5:43:85:f1:a3:ac:39:dc:3f:17:b1:9b:f9:00:
57:b2:43:82:41:87:64:81:4e:2b:b2:28:14:31:b3:
21:63:1e:d2:f7:61:b6:69:a8:e6:f2:46:6e:98:e8:
50:d0:0b:d1:e7:5f:bd:f0:f7:fd:47:b7:ca:c1:6e:
9c:18:c1:d1:f6:ee:ca:5e:e0:11:43:52:48:e4:f6:
dc:fd:d9:6d:54:55:8b:4e:d6:88:f4:ae:a6:0b:0a:
c5:35:bb:84:1b:ee:06:bd:39:e4:ec:8e:6e:a4:59:
60:4b:5e:58:9c:a3:f9:63:95:86:62:db:b1:27:81:
d1:2e:5f:70:4b:fa:a4:cb:37:9c:27:1e:f4:1c:cb:
6b:98:6d:36:0a:fc:2a:4d:aa:a8:80:03:40:a9:cd:
c3:b1:3d:c8:76:1e:8f:01:68:60:bf:7e:3b:6d:79:
84:78:0f:6f:18:ab:80:9b:a3:94:dc:17:5b:95:98:
1a:88:76:52:0a:84:9b:b3:eb:f4:f9:a7:2c:f0:55:
31:3e:f0:ec:26:f4:48:16:bf:02:18:72:46:38:48:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
41:F3:C0:F6:5E:81:71:96:5A:22:70:85:FB:86:4D:9A:4D:75:C0:E2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/41F3C0F65E8171965A227085FB864D9A4D75C0E2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.8.120.0/22
IPv6:
2804:7088::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270732
Signature Algorithm: sha256WithRSAEncryption
dc:70:b8:dd:1c:4f:16:9f:ce:fb:6a:15:c9:42:68:89:6d:c3:
c6:f7:f8:d2:7b:ac:46:77:e5:c2:1f:6b:bc:aa:b0:67:33:2d:
68:ac:b8:98:58:13:f7:7d:b8:0b:16:aa:9e:71:74:ed:d8:4d:
ac:ce:63:db:9f:a3:62:93:63:1f:86:6a:a8:ae:56:9d:79:a0:
d2:a5:ae:4f:ac:ff:d7:10:87:48:81:2f:1c:51:94:77:eb:12:
ab:a4:6c:91:a4:d5:7b:f7:21:71:33:8b:9c:95:53:9b:31:d0:
14:b6:a7:ea:46:6b:f8:fe:20:4c:7e:e6:f0:f0:a4:85:93:a2:
c6:a8:6b:95:08:cb:82:85:5f:28:3f:f6:99:91:2b:d3:77:b7:
1a:4f:9d:57:9d:33:af:30:88:cb:8c:1e:6a:f4:71:6b:b6:30:
25:1b:2a:22:db:b0:62:b9:a3:09:a2:4e:74:d4:a1:06:87:62:
96:cc:d7:0f:63:8e:65:8a:6c:ee:79:3b:ec:75:09:55:32:db:
25:6c:36:81:f0:0f:63:2f:7e:45:10:64:6c:8d:90:48:b0:2c:
a9:13:3f:6c:5b:99:ae:00:82:c2:eb:a5:d0:01:33:12:f9:45:
88:5b:fa:60:cf:5c:96:7c:29:71:d7:bf:e3:4a:57:df:f2:28:
4b:4e:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 14:02:14 2024 by rpki-client on console-fra.rpki-client.org