Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4F987340E53D5A3A07D027B2DACD493A3757DC0F.cer
File: 4F987340E53D5A3A07D027B2DACD493A3757DC0F.cer (raw, json)
Hash identifier: 6CMJ9p6dvFAQlXtFMXkJfEIYzv0Tyl+b/0Yk5XQ0C7c=
Subject key identifier: 4F:98:73:40:E5:3D:5A:3A:07:D0:27:B2:DA:CD:49:3A:37:57:DC:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6FB47A9B87341C225BC735F1EF6581EBAC414532
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/4F987340E53D5A3A07D027B2DACD493A3757DC0F.mft
caRepository: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 23 Jul 2024 16:30:37 +0000
Certificate not after: Tue 22 Jul 2025 16:35:37 +0000
Subordinate resources: AS: 266394
IP: 170.81.76.0/22
IP: 2804:372c::/32
Validation: Failed, certificate revoked on Thu 05 Sep 2024 05:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b4:7a:9b:87:34:1c:22:5b:c7:35:f1:ef:65:81:eb:ac:41:45:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 23 16:30:37 2024 GMT
Not After : Jul 22 16:35:37 2025 GMT
Subject: CN=4F987340E53D5A3A07D027B2DACD493A3757DC0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:6a:7c:12:2f:dc:b2:70:d4:39:6f:fe:2e:
64:3e:82:11:2d:2e:9d:1d:46:4d:32:7f:4c:a8:77:
1b:20:e1:af:80:93:6e:c7:1e:32:9a:9c:a7:b6:20:
87:68:77:98:77:29:78:26:50:4a:c8:3e:b4:20:40:
34:2f:10:6b:75:38:77:e4:a8:ba:ba:28:15:95:42:
e1:c3:de:0c:b0:59:c3:7e:9b:01:92:ed:85:b7:8b:
0e:8e:ae:8c:38:d7:2e:81:eb:de:ea:f2:f5:12:f5:
0a:cb:50:2e:ca:e2:1d:d3:3b:2c:45:59:c3:83:2b:
e7:7a:b0:5c:0e:6f:f4:f4:f0:83:1b:47:29:8b:88:
92:17:b2:a7:e1:fe:30:91:ed:3d:69:6e:81:88:e7:
fa:23:86:c1:d2:2c:cf:1b:d4:e2:2a:b6:a9:27:b7:
26:ff:bb:ee:3a:26:06:f1:e2:ad:89:c2:32:28:b7:
83:53:a2:f6:3e:b0:6a:1d:75:0f:99:ee:9b:6e:5f:
54:78:90:1b:ba:24:a0:74:fd:09:10:34:fd:37:34:
98:fa:fc:d3:bd:ef:d0:63:49:d6:4f:49:9c:bc:8b:
f2:9e:20:59:25:dd:a0:38:54:31:a3:b8:a2:02:31:
66:0a:a8:00:dd:72:61:0c:9d:f8:48:25:aa:1e:94:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4F:98:73:40:E5:3D:5A:3A:07:D0:27:B2:DA:CD:49:3A:37:57:DC:0F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/4F987340E53D5A3A07D027B2DACD493A3757DC0F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.76.0/22
IPv6:
2804:372c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266394
Signature Algorithm: sha256WithRSAEncryption
90:e5:96:76:39:7c:79:a1:af:3f:b4:2e:90:52:e2:0b:05:e6:
15:6e:fb:d0:f7:a7:1b:5a:4f:6a:f9:0c:fb:16:f7:09:be:d2:
e0:9d:2e:81:d4:3a:dd:19:d9:11:51:59:a4:8e:fe:71:17:b3:
77:5d:70:4d:9d:80:b9:a3:f3:71:2f:a3:a9:30:99:90:01:2e:
d4:9f:1a:d5:97:64:4c:f5:d2:54:d6:05:9d:63:4c:4b:d1:ce:
d1:75:21:9a:76:c1:28:f7:06:04:0f:e3:3e:3b:bc:da:1c:5d:
f5:7b:64:d5:fe:33:5e:e6:58:01:86:da:2d:62:be:ee:09:cb:
5a:f7:d0:24:0b:fb:57:2a:d4:d1:57:7f:45:d2:db:d4:7b:8a:
a9:af:0d:12:06:bf:0e:30:53:8f:f9:e6:d6:0e:d8:da:dc:79:
c0:a8:39:80:07:4b:ca:f5:b5:6a:3e:bb:35:fa:6b:f9:14:ff:
d3:fb:7e:22:91:2f:d6:1b:10:09:7f:ce:ad:d2:68:18:35:1a:
9f:8e:6e:0d:e4:e6:fb:73:43:a1:ec:36:31:bc:59:53:f8:d2:
26:bf:2c:80:5e:e9:dd:28:41:73:31:bc:ad:82:95:c3:27:68:
cc:79:d9:7d:14:2b:39:2e:43:71:d1:71:5c:d8:12:29:da:98:
bb:29:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 08:09:12 2024 by rpki-client on console-ams.rpki-client.org