Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.cer
File: 42DC11A6099FD286F81D6C471E47FFD8469A91E7.cer (raw, json)
Hash identifier: rDh0oq5Oel2WS+yYa0PjUWbrNBEsLLZdXkAw/BoAiLM=
Subject key identifier: 42:DC:11:A6:09:9F:D2:86:F8:1D:6C:47:1E:47:FF:D8:46:9A:91:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7291F5C582F00AAE2CA1ADC104F645096E6DB7CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.mft
caRepository: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 05:59:36 +0000
Certificate not after: Thu 03 Apr 2025 06:04:36 +0000
Subordinate resources: AS: 61599
IP: 200.71.76.0/22
IP: 2804:3ca0::/32
Validation: Failed, certificate revoked on Thu 30 May 2024 23:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:91:f5:c5:82:f0:0a:ae:2c:a1:ad:c1:04:f6:45:09:6e:6d:b7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 05:59:36 2024 GMT
Not After : Apr 3 06:04:36 2025 GMT
Subject: CN=42DC11A6099FD286F81D6C471E47FFD8469A91E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:28:25:27:c5:fb:e1:b5:43:1c:4b:4a:54:
55:04:a8:f2:54:ba:02:1a:e8:c0:a4:b4:55:ad:d0:
59:bb:75:ac:15:13:ef:19:77:bd:36:b3:41:62:20:
2a:c9:6b:7e:49:1d:83:5d:83:3e:9e:d3:1e:11:b1:
01:b9:0e:ed:36:9e:06:17:74:66:98:ef:1d:82:a7:
4c:2a:40:06:37:a4:4f:28:b1:59:9d:ac:5c:c5:12:
b2:27:aa:70:d4:86:dc:84:40:f4:95:43:c7:56:7d:
aa:a2:36:06:05:6a:87:be:08:a4:26:5c:56:d4:a6:
9b:27:a5:b5:87:ae:4a:72:2b:19:30:cb:33:12:df:
9b:9a:d7:60:4b:8c:95:a4:f1:19:29:de:34:ad:ae:
d4:98:f1:e4:8e:a0:53:e4:19:f1:83:63:e7:00:bc:
14:57:72:52:74:dd:94:ef:d5:a6:ff:54:45:80:c2:
73:5e:41:58:28:91:b3:5d:06:1c:60:bc:90:87:f0:
7b:d1:60:47:d0:8a:90:83:56:9c:aa:97:6e:a5:6e:
8d:20:ef:b9:61:fe:2c:d2:b3:15:33:e2:87:24:49:
c4:96:be:29:f7:04:38:fe:c9:19:08:36:e6:20:03:
c2:4c:c0:95:e6:1f:a9:53:42:31:5c:57:c8:1c:b0:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
42:DC:11:A6:09:9F:D2:86:F8:1D:6C:47:1E:47:FF:D8:46:9A:91:E7
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.76.0/22
IPv6:
2804:3ca0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61599
Signature Algorithm: sha256WithRSAEncryption
94:4d:f0:f0:c9:82:e6:5b:0e:5a:33:16:dc:8d:d2:c5:98:06:
70:fa:f1:01:ee:10:4b:98:fc:6b:3a:3f:e0:a3:10:24:78:07:
ae:56:fe:02:5f:1f:38:c5:fa:18:7b:ce:c6:76:ed:ec:2c:0c:
45:5f:a7:7f:2f:4b:56:2d:c6:8e:e2:cb:f4:c2:69:de:39:46:
75:25:e6:c9:69:9d:ed:c5:d2:4b:40:7f:e4:9d:fc:26:6c:47:
d7:42:53:e8:ff:06:ba:53:0b:52:ff:6a:37:83:49:af:66:48:
7a:d4:75:c1:c2:bb:1d:9f:a0:5c:b9:5b:51:ba:c7:16:95:88:
8c:4c:20:30:66:bd:0d:01:10:70:42:65:bf:50:74:f4:72:cb:
21:d3:e3:a9:22:f9:3c:a2:be:38:3a:9b:16:ce:02:03:43:8e:
6d:ab:2f:d2:8f:a4:bf:5d:32:9a:21:20:e2:e9:7b:28:c6:40:
36:a7:92:e3:f8:98:54:8b:42:99:25:02:54:af:ac:1b:9d:a0:
d0:d8:28:8c:be:5f:75:b6:bd:9f:93:10:7d:d7:2f:ba:70:b2:
c7:0c:2b:00:de:67:c8:cc:dd:f3:ad:b0:25:ef:05:ca:6a:9d:
30:c7:a5:d0:7b:b3:f6:51:b0:0c:38:48:b4:03:1a:f5:b0:60:
09:d4:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org