Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.cer
File: 543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.cer (raw, json)
Hash identifier: LqGLzRWYE3GY1ZYTsZvfoTHv2TrxQmQNQ5hbBmWd4vo=
Subject key identifier: 54:38:65:16:3C:DE:60:F4:0F:98:BB:5A:B4:C5:B0:D1:A3:F7:45:5E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 74D3CF768DAB6AA6EBB76FFB62E8676372DD9294
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.mft
caRepository: rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 01:08:49 +0000
Certificate not after: Thu 03 Apr 2025 01:13:49 +0000
Subordinate resources: AS: 273482
IP: 2804:8f4c::/32
Validation: Failed, certificate revoked on Tue 27 Aug 2024 13:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d3:cf:76:8d:ab:6a:a6:eb:b7:6f:fb:62:e8:67:63:72:dd:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 01:08:49 2024 GMT
Not After : Apr 3 01:13:49 2025 GMT
Subject: CN=543865163CDE60F40F98BB5AB4C5B0D1A3F7455E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:76:96:e1:14:53:cd:cf:2a:db:f2:b3:bf:
0d:39:f3:89:26:b7:e4:5f:4d:5d:46:07:48:96:c6:
dc:c9:c0:c4:7c:ed:8b:08:5d:f9:c3:fc:67:ed:19:
d0:35:bf:7f:9f:9d:3f:6a:fb:98:e7:1f:13:36:45:
8f:7c:73:0f:51:3c:dc:1f:52:b6:ec:5e:82:73:90:
a3:07:2b:7d:c8:8a:49:7f:59:bf:b8:1d:ea:7b:24:
d7:86:ed:4b:a5:ec:79:94:a2:67:64:d3:cb:50:ee:
4d:40:6f:03:02:ed:8b:70:9b:85:ba:f0:44:79:20:
05:4f:1f:76:cd:e4:a5:71:e6:10:c7:ff:15:c6:8e:
e0:e4:80:dc:e4:53:48:76:fa:34:94:3e:f1:52:a3:
0d:34:1c:65:cb:84:d3:86:f9:02:ca:2f:a3:dc:15:
e3:6c:f9:10:b2:ec:2d:e6:00:2b:b2:95:3c:ea:02:
40:fa:1e:ad:d8:cc:d1:17:d8:e3:b5:eb:c5:ad:e2:
e7:e3:7a:a7:ab:5e:84:35:ca:e2:c1:b0:c6:01:e3:
9d:d8:b2:1f:c6:a6:2e:c4:e9:6c:87:43:04:a5:7b:
f4:45:10:73:a3:5d:1d:68:22:85:0d:7a:5c:5b:b5:
29:76:8c:4f:64:89:1a:0b:de:b6:90:26:ad:61:5a:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
54:38:65:16:3C:DE:60:F4:0F:98:BB:5A:B4:C5:B0:D1:A3:F7:45:5E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f4c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273482
Signature Algorithm: sha256WithRSAEncryption
0e:7a:12:ef:98:0a:94:26:74:95:27:3d:d4:ec:8a:dd:91:13:
b7:3a:16:27:cb:ba:e0:c3:77:f7:db:be:67:32:85:1d:bb:75:
e6:b2:cd:c1:fe:aa:63:f4:9c:53:d8:37:69:73:c9:9d:30:e0:
65:2e:8d:aa:50:0a:32:18:7b:ca:fa:8c:75:ce:30:8e:fa:34:
ed:f0:5e:d1:33:74:c5:58:d1:ff:5f:cb:11:65:4e:b7:73:58:
b9:76:53:c1:10:53:33:0a:84:3a:4d:4b:bd:e2:fa:7d:b2:16:
01:11:4a:9e:72:90:81:ff:19:71:4c:60:f8:e7:b8:a2:83:48:
fc:4a:f6:0e:ba:c7:0b:95:00:0d:9e:88:8d:18:8d:f3:e0:77:
98:80:f7:c8:aa:50:cb:4a:08:34:fb:a3:22:86:d7:e7:d8:3f:
19:57:b5:08:d1:bd:77:47:79:ba:a1:c4:fe:d8:3e:e0:b6:3c:
08:54:db:2f:c7:81:00:0e:b9:e3:62:65:76:e6:06:84:65:37:
79:51:0d:0f:72:a5:27:88:44:15:3d:61:23:0d:a2:d8:1b:48:
e7:c9:c8:be:92:43:34:8b:27:b0:2b:66:83:53:7a:3d:8b:ed:
3a:36:a4:94:21:ec:07:27:50:94:62:48:6a:01:ad:99:8b:40:
43:86:4f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 16:34:30 2024 by rpki-client on console-ams.rpki-client.org