Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4712AC0351381C41E1370CBAA05940D33FF6E3DF.cer
File: 4712AC0351381C41E1370CBAA05940D33FF6E3DF.cer (raw, json)
Hash identifier: WN9f0KV9P9jK579e69c3nQ0yXRj3OHEd7YdMNbilw9U=
Subject key identifier: 47:12:AC:03:51:38:1C:41:E1:37:0C:BA:A0:59:40:D3:3F:F6:E3:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0D608B633984EA089BA49F2F492EF4C256B6D065
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4712AC0351381C41E1370CBAA05940D33FF6E3DF.mft
caRepository: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 25 Nov 2024 18:24:15 +0000
Certificate not after: Mon 24 Nov 2025 18:29:15 +0000
Subordinate resources: AS: 263256
IP: 170.247.200.0/22
IP: 198.58.8.0/22
IP: 2804:17e0::/32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 18:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:60:8b:63:39:84:ea:08:9b:a4:9f:2f:49:2e:f4:c2:56:b6:d0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 25 18:24:15 2024 GMT
Not After : Nov 24 18:29:15 2025 GMT
Subject: CN=4712AC0351381C41E1370CBAA05940D33FF6E3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5d:93:31:80:80:5c:36:e3:7e:0d:8c:ad:33:
76:32:6e:df:ca:54:7f:61:ce:c4:b8:10:a6:b6:2c:
af:8e:2a:c2:45:f2:20:19:40:3a:80:48:d8:dd:63:
22:34:df:37:e8:9b:05:1f:6a:9f:a5:ba:15:a0:8b:
d2:18:07:7d:77:3b:df:a1:90:45:3c:e3:34:ae:0d:
eb:d2:9c:66:7e:f5:f7:1e:e7:7f:9b:ae:f6:c5:ea:
6f:f5:92:2e:aa:b0:19:c1:45:ec:13:f1:73:5d:e9:
0c:95:50:ac:82:d4:dc:07:68:0c:b2:ce:bf:57:b4:
2d:84:80:2f:ee:62:0f:15:43:07:68:ff:1b:29:85:
a0:d7:a9:a4:aa:af:0c:0e:22:b2:17:b9:06:ad:89:
fa:da:64:47:13:b2:ab:90:8e:d4:43:22:53:28:54:
5a:d0:e3:59:dd:65:e5:e6:03:58:a1:a0:0c:13:0d:
da:ee:c0:44:79:c9:e9:c9:39:aa:9f:42:23:5f:29:
8a:34:7d:8e:f1:c6:e5:77:83:f4:39:8f:17:ba:f6:
ef:29:51:6c:7f:ee:4c:b9:1d:0f:68:9f:5d:41:87:
8c:ee:71:4d:d5:a2:04:22:80:84:33:0f:7c:68:68:
5e:45:0e:a5:e7:ce:af:88:ac:b2:74:91:6d:a5:2f:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:12:AC:03:51:38:1C:41:E1:37:0C:BA:A0:59:40:D3:3F:F6:E3:DF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4712AC0351381C41E1370CBAA05940D33FF6E3DF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.200.0/22
198.58.8.0/22
IPv6:
2804:17e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263256
Signature Algorithm: sha256WithRSAEncryption
6f:29:12:f7:af:b0:b9:61:c4:2d:03:fb:15:87:14:d3:45:e2:
65:78:6e:c6:1f:53:22:f8:e7:50:7c:a2:96:d7:aa:95:ce:b5:
77:c2:fb:87:19:be:f3:da:c8:66:70:64:43:12:91:5f:b4:67:
19:35:fd:54:f3:eb:02:f5:68:32:aa:55:46:81:08:ba:1c:90:
cd:36:5e:ff:82:20:0f:7f:fe:98:f5:07:e1:a6:b2:d9:60:12:
4a:a6:75:e1:cd:03:86:1a:13:06:0f:9c:93:11:70:db:97:76:
0f:ee:b9:cb:78:7f:a0:43:40:a7:04:42:3e:f6:a3:36:4a:2d:
71:53:0b:4f:67:20:16:dd:7c:2c:18:0d:1f:dd:19:c3:d9:8a:
9c:a7:ca:94:f5:cb:cf:25:7d:55:9c:97:8c:c9:44:de:f8:a4:
b5:11:f1:16:ac:85:7b:c1:37:b8:79:d4:be:cb:31:de:01:e8:
0a:e4:00:b2:1d:d5:27:ec:2e:6f:f7:d9:a8:1c:7d:75:ca:b5:
7c:d3:85:f6:21:5b:f0:27:03:8b:26:f9:65:82:9d:3b:b9:f1:
f1:f9:e6:68:29:f2:6b:76:e0:e8:aa:45:1c:87:4e:d9:75:95:
30:6c:ff:19:8c:ed:c5:f3:b7:09:cd:ab:b9:7c:7a:d6:14:9b:
9c:f8:22:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:45:24 2024 by rpki-client on console-fra.rpki-client.org