Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
File: 48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer (raw, json)
Hash identifier: S3LNgEBKDQpYWI37M6cG33vvQNewff+NzaNsMelVuvM=
Subject key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7215952E407E8AB5CFC42680C5D081201387E533
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.mft
caRepository: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 10 Apr 2024 00:14:06 +0000
Certificate not after: Wed 09 Apr 2025 00:19:06 +0000
Subordinate resources: AS: 264550
IP: 138.0.136.0/22
IP: 170.0.32.0/22
IP: 2804:215c::/32
Validation: Failed, certificate revoked on Mon 10 Jun 2024 22:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:15:95:2e:40:7e:8a:b5:cf:c4:26:80:c5:d0:81:20:13:87:e5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 10 00:14:06 2024 GMT
Not After : Apr 9 00:19:06 2025 GMT
Subject: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:f5:f0:e9:c8:04:5f:7f:5c:fb:6c:9b:63:
29:fd:22:b5:06:29:f9:14:4f:b5:d8:87:47:5f:96:
92:79:6d:d1:d0:e0:8f:1a:6b:7d:dd:58:1e:2e:25:
1b:34:5a:47:09:37:51:e1:89:1a:40:3b:6e:50:26:
8d:eb:10:9d:d5:18:f2:34:04:82:bd:b6:b2:8c:96:
2e:96:f4:04:8c:2a:7f:b5:d5:25:68:ca:6c:a4:aa:
f1:d1:f6:04:a1:8f:dc:cb:09:06:28:7a:53:37:e7:
fc:79:3f:13:af:ad:89:d3:0b:6a:3a:aa:9c:65:dd:
a9:c9:5a:fe:08:60:a5:d9:25:ea:eb:e6:7b:61:21:
ad:85:22:ca:d7:08:17:77:47:5c:1f:91:71:1c:f0:
c6:da:b9:c8:cb:31:1e:50:a7:09:1c:73:03:b1:90:
69:c5:ef:08:a0:89:40:4e:f6:15:df:a8:ed:34:e7:
27:1c:5c:fd:8d:6c:fa:a7:35:ce:3f:29:d7:03:42:
48:f5:1c:42:44:76:be:12:7d:05:53:dd:7d:11:d5:
0f:b3:1c:dc:ed:ca:bd:d5:3f:4b:6b:df:03:24:d7:
0b:6d:7b:0f:12:3e:6a:e3:cf:0f:67:45:0b:7d:01:
88:aa:37:70:8b:ab:c8:3b:e2:98:05:b5:c8:60:f1:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.136.0/22
170.0.32.0/22
IPv6:
2804:215c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264550
Signature Algorithm: sha256WithRSAEncryption
b6:74:36:57:5a:7b:df:00:e9:a6:2e:cd:60:fb:ca:90:f1:00:
15:6d:e1:9b:3b:ae:c7:3f:87:de:4a:09:d1:9f:dc:07:26:9c:
ce:68:98:3d:7b:b6:a5:89:bb:cc:39:36:2f:7f:cc:59:4a:ca:
67:c2:4a:33:37:16:06:da:63:71:91:e3:85:e9:de:4b:bb:a4:
18:f8:43:88:31:cb:59:1a:0d:a9:4b:b3:c6:58:97:5e:14:a1:
78:80:89:6a:45:da:a4:2b:6f:50:f2:99:c5:04:dc:57:5a:8f:
8c:fd:d4:85:7c:6c:fa:90:9e:5d:00:f3:3d:3b:0e:69:2c:9d:
4c:3f:61:a6:a4:fb:16:1f:c7:48:f9:cc:29:15:53:55:f3:05:
0f:22:d8:3b:a3:33:28:e9:fe:e7:19:39:d5:6d:81:8b:91:ee:
5d:04:c7:8b:41:a2:2a:b7:25:2a:31:79:55:21:c7:cb:df:05:
4b:94:72:df:32:a1:07:49:dc:4b:1e:c1:d0:05:47:5e:0f:d5:
d8:4b:8c:d5:7c:a9:e3:34:ca:ee:d3:7f:62:66:43:71:e4:a7:
3a:90:cc:81:25:36:72:64:2c:af:2d:56:72:95:a9:e7:f4:ef:
01:42:bd:ed:1b:7e:16:ca:f1:b2:e9:53:dc:c9:0d:a4:a9:e1:
5b:5f:a4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 23:42:21 2024 by rpki-client on console-fra.rpki-client.org