Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4523B98C8A5D03211CD644C7D826F6AD10BE0C7D.cer
File: 4523B98C8A5D03211CD644C7D826F6AD10BE0C7D.cer (raw, json)
Hash identifier: kvZbzMaM9xEy8VPm+lGHaXs25iCyhvyeCZybpE3G4J4=
Subject key identifier: 45:23:B9:8C:8A:5D:03:21:1C:D6:44:C7:D8:26:F6:AD:10:BE:0C:7D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 78DA580360B3BF6AC52CE48F5EC7796351365235
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/4523B98C8A5D03211CD644C7D826F6AD10BE0C7D.mft
caRepository: rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 23 Aug 2024 20:00:44 +0000
Certificate not after: Fri 22 Aug 2025 20:05:44 +0000
Subordinate resources: AS: 266314
IP: 170.238.52.0/22
IP: 2804:35e8::/32
Validation: Failed, certificate revoked on Wed 25 Sep 2024 10:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:da:58:03:60:b3:bf:6a:c5:2c:e4:8f:5e:c7:79:63:51:36:52:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 23 20:00:44 2024 GMT
Not After : Aug 22 20:05:44 2025 GMT
Subject: CN=4523B98C8A5D03211CD644C7D826F6AD10BE0C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:50:8d:0d:fa:f4:d1:74:fd:51:ce:63:9d:
f8:3e:e7:43:93:56:d3:73:ed:1d:eb:19:63:dd:6c:
79:84:73:6c:be:ee:49:6c:eb:5a:71:8f:59:b9:ca:
b2:05:13:c3:94:83:18:9d:98:a1:ff:81:03:8c:f0:
ea:0a:95:b5:11:d4:59:eb:20:f8:39:5a:5e:ac:20:
a2:2a:6e:96:c8:cb:14:24:c9:d0:3e:fc:d7:f1:5e:
6c:42:c7:a7:0f:cd:06:51:f9:ff:a8:6c:eb:63:0a:
6d:57:5f:b8:2c:e1:f2:52:10:bf:91:f4:fe:5e:a8:
e9:91:30:a8:98:71:db:64:94:1b:6b:57:09:4e:64:
b6:0c:5a:a4:ad:bf:5e:44:08:10:34:bb:47:45:21:
15:bc:ea:f8:8f:4a:1f:d9:51:5e:b7:d5:6e:8b:83:
c1:f1:52:2f:dd:d3:48:0e:8d:b2:9c:7b:47:3c:1b:
4e:0f:a3:ab:4d:8c:b6:31:d5:a8:58:7a:8d:e0:b3:
e5:a5:d4:0a:56:02:90:69:90:93:3e:e4:16:a9:aa:
12:70:ac:8e:e1:fd:8b:9c:47:d3:47:ae:ed:e3:1e:
80:89:54:2d:3e:45:a2:97:f2:3e:e3:70:57:0b:a5:
72:d1:7a:fc:9a:d1:16:52:a0:da:b5:b8:12:ef:ae:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
45:23:B9:8C:8A:5D:03:21:1C:D6:44:C7:D8:26:F6:AD:10:BE:0C:7D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/4523B98C8A5D03211CD644C7D826F6AD10BE0C7D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.52.0/22
IPv6:
2804:35e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266314
Signature Algorithm: sha256WithRSAEncryption
4f:50:74:65:c5:5a:a8:86:4c:31:36:2f:01:00:c7:a0:b3:7e:
b5:e8:a0:d4:72:3a:13:6f:11:be:c5:3f:70:45:f7:a4:1f:4f:
d3:f5:e9:74:9c:e4:11:c3:9a:8f:4f:1f:3b:b0:4f:c6:3e:ea:
95:c9:73:74:65:5d:d5:cd:e7:6a:4b:d3:32:a4:28:3c:c5:10:
0c:1a:9b:80:aa:22:9c:7f:f4:3a:4f:70:2c:f2:cd:cb:90:1c:
76:e2:be:76:5e:8a:83:17:03:4b:43:f9:60:f8:33:d4:d4:1e:
d1:ca:a5:a9:3f:ca:79:d8:61:46:84:e9:5a:70:33:2c:fc:cf:
b2:40:c8:43:69:65:8c:e6:98:23:0b:53:26:7f:ee:94:71:15:
d7:ec:f3:84:0c:4f:d8:e2:c5:7c:e2:6a:17:9d:30:b3:57:35:
af:e4:dd:35:91:69:96:66:e5:e0:5f:90:6a:16:bc:f5:26:d8:
0c:54:5f:74:5f:8c:93:51:5d:63:f2:3c:40:fc:7b:aa:0e:d1:
8a:a2:c6:32:a4:a6:64:82:07:a8:71:84:88:58:95:e5:9a:c0:
41:6a:72:1b:99:4a:f9:aa:48:8b:bd:12:db:c2:ac:2f:7c:ed:
5d:af:2e:ef:d1:cf:c8:e4:cb:8a:a3:4a:8d:05:cd:84:08:dd:
09:a7:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 13:23:02 2024 by rpki-client on console-ams.rpki-client.org