Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.cer
File: 4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.cer (raw, json)
Hash identifier: 0Se2Kl1gTkpTYjEMle8E0Xrjp6Cl1G3HXU/JWryxOmo=
Subject key identifier: 4B:4B:10:01:9F:BA:A1:FA:47:63:B4:B8:C3:85:E8:F1:3C:DE:B8:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 09DC6340F4B4CE3F1A36ACD738EEF27DE464E6F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.mft
caRepository: rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 15:41:30 +0000
Certificate not after: Thu 03 Apr 2025 15:46:30 +0000
Subordinate resources: AS: 268085
IP: 45.168.248.0/22
IP: 2804:57c4::/32
Validation: Failed, certificate revoked on Tue 20 Aug 2024 06:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:dc:63:40:f4:b4:ce:3f:1a:36:ac:d7:38:ee:f2:7d:e4:64:e6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 15:41:30 2024 GMT
Not After : Apr 3 15:46:30 2025 GMT
Subject: CN=4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:61:02:16:32:7a:3d:da:5c:b1:61:1a:08:
11:24:81:4a:d0:cb:43:39:6e:f4:09:16:a9:7a:04:
0d:d8:f9:96:20:d6:21:e8:96:1c:17:75:12:a1:48:
e2:63:a5:b9:24:91:20:5e:46:1a:e7:c8:c6:fb:08:
a1:91:cf:23:fe:87:f0:f5:89:1f:18:65:91:aa:28:
bc:4e:65:c0:8a:72:30:25:10:22:4b:d9:24:76:09:
8c:25:e3:4e:97:e9:8d:38:71:d6:b9:db:61:59:38:
6e:1f:fd:bb:c8:67:76:35:6c:28:ed:44:c3:c6:04:
9b:88:dc:b4:95:1f:bd:59:c3:01:80:ac:bd:4f:1a:
47:72:89:54:8a:9a:d5:5e:15:9b:a3:5e:6f:ff:88:
85:8c:6c:8d:c3:b0:cb:34:a9:ed:f9:a0:62:52:05:
19:a0:12:54:dc:04:6b:66:9c:77:06:52:9f:6e:21:
24:97:33:fb:1a:3e:bf:66:78:08:dc:32:f5:bd:28:
5d:3c:41:82:b3:8a:3b:2d:ae:42:fd:0e:4b:da:19:
a6:ab:38:cf:71:13:63:02:a5:c5:ac:82:90:88:06:
b1:2e:19:c6:cd:bc:e6:4b:af:c7:4d:5e:ed:bd:ba:
e2:a9:70:c7:18:ed:7a:d8:bf:17:f4:05:23:10:7f:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4B:4B:10:01:9F:BA:A1:FA:47:63:B4:B8:C3:85:E8:F1:3C:DE:B8:5C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.248.0/22
IPv6:
2804:57c4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268085
Signature Algorithm: sha256WithRSAEncryption
0d:f0:5c:5f:ba:c8:e6:fb:3a:19:7d:7b:72:b5:75:86:2d:27:
36:83:a9:2c:f7:08:55:f3:65:57:ab:65:6c:8e:b5:9d:da:86:
e0:48:d0:3f:de:30:cc:b1:30:8d:f6:79:27:a2:26:db:bb:fc:
16:77:2d:a2:7d:1f:b7:ac:3d:ae:a8:4e:32:ec:7a:47:ef:8b:
bc:09:5d:35:26:ec:0d:1e:97:93:9f:7f:d4:74:7a:44:9c:54:
d4:9e:2c:fc:e6:c4:b4:01:b5:49:0b:08:ba:30:52:85:4b:6d:
f8:7b:3a:67:e2:2a:17:78:69:47:2a:72:3b:06:0c:d2:b1:45:
b0:28:a7:c1:25:0d:d8:1c:87:b3:a3:82:31:86:eb:20:84:03:
44:37:50:d5:4a:cd:51:48:f9:c0:63:d4:b0:d3:0d:c6:ef:63:
b5:48:4c:2d:35:b4:e1:04:4e:d0:a3:01:43:84:bb:76:0c:33:
4d:29:bd:eb:1f:a9:59:6a:38:75:5e:17:44:6f:7d:48:f3:c9:
80:bd:31:bb:42:c4:08:c9:7b:2a:64:8e:70:72:5a:62:18:e3:
76:23:af:33:f8:58:fb:a3:79:b5:06:96:7b:63:bb:79:55:2f:
c6:16:d2:a3:d5:ae:51:3a:fd:cd:d3:4f:b0:46:18:ad:41:e3:
93:73:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 09:33:11 2024 by rpki-client on console-fra.rpki-client.org