Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/420727CFEABF0BE1A6E5372AA0D636443DC5A1BA.cer
File: 420727CFEABF0BE1A6E5372AA0D636443DC5A1BA.cer (raw, json)
Hash identifier: 61r8mhf8MBncfPJb93a65926qw39uZNpVMOs6aZnGMs=
Subject key identifier: 42:07:27:CF:EA:BF:0B:E1:A6:E5:37:2A:A0:D6:36:44:3D:C5:A1:BA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4D8B101FE1F008936B0E8A987B2B201BBCD983BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/420727CFEABF0BE1A6E5372AA0D636443DC5A1BA.mft
caRepository: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 04 Oct 2024 11:15:35 +0000
Certificate not after: Fri 03 Oct 2025 11:20:35 +0000
Subordinate resources: AS: 263080
IP: 187.33.48.0/21
IP: 189.201.208.0/20
IP: 2804:964::/32
Validation: Failed, certificate revoked on Mon 07 Oct 2024 15:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:8b:10:1f:e1:f0:08:93:6b:0e:8a:98:7b:2b:20:1b:bc:d9:83:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 4 11:15:35 2024 GMT
Not After : Oct 3 11:20:35 2025 GMT
Subject: CN=420727CFEABF0BE1A6E5372AA0D636443DC5A1BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:41:5d:17:7b:d4:1b:39:b6:44:7a:76:7d:
0f:5d:ba:45:4b:32:ed:27:43:ae:b1:18:f6:e3:0b:
b3:bc:0e:22:e8:1e:95:a0:9b:e6:3a:ee:4c:71:0b:
2b:ea:0d:31:2d:24:f6:1e:30:fe:81:c7:36:31:4c:
23:bb:e1:3c:bc:60:7f:53:6a:c5:26:06:aa:df:ac:
c2:7a:e7:0a:78:e1:73:03:93:3c:3f:da:54:33:46:
26:a9:3f:9c:cc:cf:b7:c6:5f:bf:3e:86:88:db:17:
61:c6:2f:85:34:03:31:74:b1:87:ca:61:a4:3b:b5:
7f:69:72:41:d6:55:1d:31:52:bd:bc:3a:cc:03:19:
d3:61:1d:af:79:3f:ef:ef:83:d7:56:48:97:99:f3:
dc:7b:9d:ff:4b:10:77:aa:bd:81:01:f9:da:8c:73:
6a:58:d1:f3:38:72:31:bb:e1:5b:1b:06:67:20:58:
6f:70:81:c2:0f:06:72:cb:07:e5:af:e1:f8:c3:94:
c6:0e:dd:27:08:fe:3a:93:59:8e:f4:d6:a3:da:fb:
86:82:7b:ab:ce:f0:83:cd:b1:1d:3a:18:81:07:84:
b3:8d:12:98:fc:3b:a7:09:e2:b2:6c:5d:1a:cd:03:
3c:96:3c:70:88:98:4e:ef:af:c5:3c:0e:a3:4e:63:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
42:07:27:CF:EA:BF:0B:E1:A6:E5:37:2A:A0:D6:36:44:3D:C5:A1:BA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/420727CFEABF0BE1A6E5372AA0D636443DC5A1BA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.33.48.0/21
189.201.208.0/20
IPv6:
2804:964::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263080
Signature Algorithm: sha256WithRSAEncryption
03:64:0d:81:55:82:7f:ad:96:34:d9:c5:c6:05:9b:fe:8c:ed:
8a:59:04:41:c8:86:ca:95:91:ab:fb:33:23:eb:8a:77:89:82:
fb:19:81:70:ab:6a:ed:92:df:0a:97:9c:bd:85:7d:99:53:57:
b9:c7:35:32:0b:53:bd:f1:87:30:91:43:74:b5:d8:47:ec:c8:
ba:44:74:09:30:2a:99:8d:16:85:96:9c:9e:09:80:75:49:21:
e9:45:ba:5f:6a:89:df:8f:0c:1a:4f:e4:56:93:db:2b:20:bb:
28:57:5d:06:3f:f7:35:0a:c1:b0:d8:24:63:b1:ef:11:b1:26:
b3:27:ef:be:d3:c1:b8:42:e1:d4:10:07:2d:6b:2b:34:e0:b3:
94:53:7c:37:92:ee:ae:a6:8e:ed:45:f8:72:6d:4e:4a:db:73:
6a:16:5f:26:47:ab:5d:96:f7:0e:23:13:45:17:e7:fe:ac:9b:
41:58:00:09:4d:dc:14:45:d9:8f:b0:d8:12:8a:e7:cb:d7:7b:
03:42:ed:11:df:9f:17:81:09:c5:4f:a6:57:78:08:2d:44:25:
23:5c:9e:7b:44:d1:90:78:7f:11:4e:e1:ca:40:52:c2:97:96:
cb:1f:dc:41:1d:87:ce:b7:99:c0:de:c6:52:dc:53:e4:3a:8f:
50:04:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 23:07:55 2024 by rpki-client on console-ams.rpki-client.org