Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/531E45221C7D5F16652A745C08A7911AEF763553.cer
File: 531E45221C7D5F16652A745C08A7911AEF763553.cer (raw, json)
Hash identifier: 1mKO7/UlFjCuuaUv56034tT2Ufxq46qLu2hAbbXyCg8=
Subject key identifier: 53:1E:45:22:1C:7D:5F:16:65:2A:74:5C:08:A7:91:1A:EF:76:35:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2C07881C17EF4B0AC5CEF76F7C101DE2688F75BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/531E45221C7D5F16652A745C08A7911AEF763553.mft
caRepository: rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 20:14:38 +0000
Certificate not after: Wed 02 Apr 2025 20:19:38 +0000
Subordinate resources: AS: 271305
IP: 177.124.80.0/22
IP: 2804:7970::/32
Validation: Failed, certificate revoked on Tue 23 Apr 2024 03:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:07:88:1c:17:ef:4b:0a:c5:ce:f7:6f:7c:10:1d:e2:68:8f:75:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 20:14:38 2024 GMT
Not After : Apr 2 20:19:38 2025 GMT
Subject: CN=531E45221C7D5F16652A745C08A7911AEF763553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:bd:95:34:3f:69:60:60:e9:09:4e:21:d9:
1e:2e:1a:1e:69:2e:da:50:07:c8:2e:17:37:7b:72:
67:44:f4:4a:63:e8:af:9f:d6:86:91:0d:2a:84:26:
cd:39:f0:94:fa:1a:7c:2d:d8:64:52:34:06:fe:6c:
52:80:bb:85:6f:dd:5d:54:64:15:b6:0a:fe:15:52:
2d:03:0f:d1:48:f8:08:e1:b1:bf:ad:76:3b:10:0d:
39:cc:98:02:0b:7a:4e:5f:b1:a9:48:85:58:e0:79:
45:49:33:37:e0:0e:5e:eb:b1:0a:74:82:c5:34:56:
8e:d7:5a:e6:95:27:9a:c2:8e:02:45:f8:ed:15:f6:
e9:1c:4e:d6:20:35:78:b5:04:26:cf:29:2e:1d:6a:
ec:08:6f:48:62:68:32:fb:a4:1e:3b:99:9c:0f:01:
77:cf:e2:3c:b8:32:94:50:56:c1:61:44:b2:37:e2:
26:a5:f8:46:d6:52:86:39:cb:bd:30:62:95:32:a4:
36:c1:25:ac:4b:7f:1d:a5:b1:46:39:fa:9d:05:c5:
f6:a7:d2:48:e8:e3:71:73:b0:9a:f4:b8:f0:d8:ce:
a0:9f:19:27:25:4a:fb:94:73:91:9d:3b:ee:9b:f4:
85:0d:9e:b0:1f:7b:98:ea:47:5b:16:f4:40:56:8f:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
53:1E:45:22:1C:7D:5F:16:65:2A:74:5C:08:A7:91:1A:EF:76:35:53
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/531E45221C7D5F16652A745C08A7911AEF763553.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.124.80.0/22
IPv6:
2804:7970::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271305
Signature Algorithm: sha256WithRSAEncryption
c3:e6:fe:b6:df:e8:90:9e:5a:e4:a9:27:0f:c3:fb:8b:7a:2d:
d2:3a:90:8f:04:72:0b:5f:58:68:f4:a3:d1:9c:28:9c:e1:79:
f5:e6:61:1c:5d:70:b5:98:17:8c:8b:af:ae:2e:04:42:62:df:
14:d0:02:3b:98:85:de:a6:0d:fc:cf:e1:71:98:a3:41:dd:8f:
b1:f0:62:09:e4:0b:3e:ef:ff:68:a0:75:73:29:3f:bc:73:8d:
62:14:37:4b:9f:cb:0b:44:a6:9f:3e:b0:34:69:0d:b5:ed:f5:
1d:ee:62:e7:89:0a:c9:3d:18:ce:d2:0d:63:a1:fc:8e:94:98:
55:2d:de:1b:fe:39:00:d7:45:57:7c:eb:2e:bb:a0:5a:7e:13:
da:41:44:26:bf:99:17:e3:8b:d9:44:4c:1f:84:db:23:d5:33:
73:7a:e2:cb:99:00:96:05:be:64:06:9c:ae:f4:52:46:76:63:
5e:40:56:3e:7e:78:69:5e:12:31:3f:c0:24:51:ed:cd:0f:33:
22:d0:18:35:42:ae:16:a1:08:1d:be:04:a8:ee:0b:e3:1e:7a:
1f:a1:e8:bb:d9:b4:a2:2f:0f:bd:a1:19:ff:3d:ea:41:c7:4d:
60:47:f3:ee:cd:b2:0c:2a:a0:cf:24:a9:52:07:45:74:1d:e0:
80:a7:0b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org