Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43D2235C9A370300FEC33EDB7AA910513ECA26FA.cer
File: 43D2235C9A370300FEC33EDB7AA910513ECA26FA.cer (raw, json)
Hash identifier: 94TmI0BII1xqQ0Y+2ZonS4Xkxs+KqjxQ33UyXbv9wAI=
Subject key identifier: 43:D2:23:5C:9A:37:03:00:FE:C3:3E:DB:7A:A9:10:51:3E:CA:26:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 206A2901EAC1D5AE717B903365652F0F17A658E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/43D2235C9A370300FEC33EDB7AA910513ECA26FA.mft
caRepository: rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Jun 2024 19:10:57 +0000
Certificate not after: Wed 04 Jun 2025 19:15:57 +0000
Subordinate resources: AS: 263997
IP: 143.0.52.0/22
IP: 2804:2918::/32
Validation: Failed, certificate revoked on Wed 10 Jul 2024 21:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6a:29:01:ea:c1:d5:ae:71:7b:90:33:65:65:2f:0f:17:a6:58:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 5 19:10:57 2024 GMT
Not After : Jun 4 19:15:57 2025 GMT
Subject: CN=43D2235C9A370300FEC33EDB7AA910513ECA26FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:61:f4:8c:a1:37:74:4f:dd:85:f6:65:28:
8e:78:22:5a:76:17:a6:36:90:5c:fa:b7:4e:3d:e4:
70:4e:5b:9a:8f:26:2d:4a:24:1e:91:dd:21:bf:d5:
7c:b0:e9:11:52:5a:d8:62:2d:3e:95:22:b3:1e:a4:
40:6a:60:27:f0:40:53:3c:c0:ce:45:50:ac:08:c9:
e2:c5:fa:f9:81:2d:5d:44:8e:cf:a1:b8:64:8a:a7:
ec:0b:8f:0b:a7:63:05:ab:ad:49:47:38:28:ed:55:
4c:12:35:dd:41:8a:bb:eb:76:4a:4d:55:6b:a7:88:
69:1c:1f:23:95:11:95:bf:f6:ca:d5:b4:74:29:2c:
77:85:4d:b3:6e:54:39:0e:27:25:13:f5:e3:55:ab:
c9:4f:20:e7:d1:af:f2:a4:9f:d9:eb:4b:aa:18:4e:
6e:9e:32:ca:5e:1c:38:45:c3:69:58:a6:25:d8:be:
a9:f8:fd:a5:43:e4:d2:d2:61:af:72:0b:b5:0d:d9:
c8:d4:7b:35:8e:9d:4f:72:6d:29:ea:01:88:f0:66:
40:ff:c2:f7:2b:cc:21:40:54:56:57:8e:0a:39:91:
22:38:c5:28:62:60:fa:a2:3e:d2:8d:0e:7d:05:f0:
90:75:57:b5:5c:5b:7d:ba:17:6e:2a:77:c6:aa:b7:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:D2:23:5C:9A:37:03:00:FE:C3:3E:DB:7A:A9:10:51:3E:CA:26:FA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/43D2235C9A370300FEC33EDB7AA910513ECA26FA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.52.0/22
IPv6:
2804:2918::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263997
Signature Algorithm: sha256WithRSAEncryption
0c:07:d8:1b:56:94:c8:71:2b:0d:f7:6a:8f:78:94:4f:49:42:
59:4b:34:e1:e5:d1:8e:5a:6f:5a:b6:14:56:cb:b8:5b:c2:5d:
43:f1:71:92:aa:0d:03:1a:0d:da:51:93:fd:cf:94:3c:ba:3a:
51:6b:49:12:92:fa:af:f6:f7:06:0e:c6:88:2c:bd:a7:0b:69:
4c:60:43:33:c7:fa:d4:8c:89:55:b7:1e:93:73:0c:a2:56:2f:
9c:84:88:67:b9:18:29:f2:87:3c:20:d0:f9:93:7a:83:46:e3:
c3:1f:92:a8:cd:e7:bd:f1:e7:5d:ca:35:99:cf:fc:41:dd:e5:
c8:4c:04:b2:68:6d:91:d4:9e:c0:bd:9f:04:23:96:2b:c2:01:
47:77:de:7c:45:98:e3:5b:96:b9:69:3b:e7:ce:61:d5:96:6b:
5b:45:44:e5:15:f8:e4:b0:db:4b:d0:22:ca:29:12:55:96:81:
f1:0e:29:d4:f0:29:ba:36:6d:6b:e2:05:8a:a5:f5:43:e3:41:
11:66:50:c0:ad:6d:30:b2:60:21:0f:be:8f:a4:c0:1e:f7:6f:
8f:eb:fe:e3:24:8c:51:5a:af:b0:c1:6a:69:6b:9d:42:82:67:
7d:69:40:49:ec:27:e4:aa:67:51:8c:95:6b:45:ae:e2:be:3d:
28:08:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 23:41:05 2024 by rpki-client on console-fra.rpki-client.org