Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5486AEA6C28FB675CECB92A461586318BDB37E70.cer
File: 5486AEA6C28FB675CECB92A461586318BDB37E70.cer (raw, json)
Hash identifier: HXRyUF5cvDhVYx7BCwL4CnQrZB22M897DPl4SSJ1fCo=
Subject key identifier: 54:86:AE:A6:C2:8F:B6:75:CE:CB:92:A4:61:58:63:18:BD:B3:7E:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2EDBE67FFD28011F8476F9C0DB42A08B3DE41740
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/5486AEA6C28FB675CECB92A461586318BDB37E70.mft
caRepository: rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:26:33 +0000
Certificate not after: Wed 02 Apr 2025 18:31:33 +0000
Subordinate resources: AS: 268848
IP: 45.174.100.0/22
IP: 2804:5b7c::/32
Validation: Failed, certificate revoked on Wed 29 May 2024 15:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:db:e6:7f:fd:28:01:1f:84:76:f9:c0:db:42:a0:8b:3d:e4:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:26:33 2024 GMT
Not After : Apr 2 18:31:33 2025 GMT
Subject: CN=5486AEA6C28FB675CECB92A461586318BDB37E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:42:b1:7e:c0:29:3e:92:b7:cd:df:75:b3:
63:6f:79:18:37:bd:51:93:0d:fe:9e:ed:e0:1e:bb:
15:7e:f2:cd:31:90:71:ce:03:fe:c3:b3:d7:e1:0c:
cf:32:04:97:fd:41:6c:92:ac:14:0b:d3:2e:ad:8e:
90:f2:7d:39:7d:a5:12:81:1e:62:e9:4f:7e:09:d8:
45:55:f9:83:8d:a8:97:c5:4d:8a:a6:8a:f9:ca:14:
7a:9b:fc:3f:d9:9c:de:55:54:d0:60:88:05:69:36:
18:a9:65:2a:45:f3:84:4c:2f:21:2e:1e:cf:d2:f7:
27:8e:90:b9:8b:d1:bc:98:f4:ce:5a:c4:ae:0e:ca:
dd:0c:7a:2d:d4:76:50:cc:16:8b:ad:f0:44:29:47:
a7:05:08:a8:bf:52:53:22:7e:b1:f4:f6:e9:82:c7:
35:00:4d:01:e9:5e:8a:42:d6:17:51:7e:e0:f5:cb:
94:22:07:62:de:7f:13:77:fa:34:61:af:86:98:02:
dc:5e:5f:10:f9:c9:44:5d:67:32:36:ae:47:ab:48:
42:cd:6b:e0:bd:99:5d:44:db:88:74:ab:99:25:b3:
2e:b2:c1:f6:ce:9a:b8:2a:d3:8d:da:50:ca:bc:38:
8c:bb:0b:0e:16:da:04:00:e0:bf:65:c0:9c:2b:28:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
54:86:AE:A6:C2:8F:B6:75:CE:CB:92:A4:61:58:63:18:BD:B3:7E:70
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/5486AEA6C28FB675CECB92A461586318BDB37E70.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.100.0/22
IPv6:
2804:5b7c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268848
Signature Algorithm: sha256WithRSAEncryption
6d:ee:ca:95:0d:7e:4e:88:d8:a8:98:dd:45:69:cd:e8:b6:eb:
38:9e:9c:a7:b8:be:21:4c:5a:ed:e2:c5:43:b1:a7:26:7e:ab:
91:b4:4d:58:94:32:3c:fa:75:a9:39:7a:99:80:11:e1:4b:33:
11:52:a2:be:11:2e:a4:fe:58:23:b0:b0:a1:ee:25:74:b4:ba:
62:17:ff:77:d7:ec:fd:b7:c6:b6:ce:91:0a:da:8e:58:e7:78:
04:03:24:50:bb:f1:19:f7:e3:ca:f0:e0:71:ed:62:fa:7c:ff:
f6:93:cf:4f:28:09:31:81:24:28:da:6a:dd:8e:25:c2:ea:6f:
d2:88:d9:d8:f9:9c:c5:31:17:08:23:80:c9:31:c5:44:4b:63:
d2:c6:88:bf:f3:7f:93:2f:95:e7:03:07:57:46:d5:5a:12:35:
4e:4b:ea:5b:d6:b6:c2:3e:05:e3:76:14:12:eb:26:1d:c9:85:
27:1f:bd:06:d5:db:73:47:45:bc:df:90:a2:1e:ed:7d:e5:37:
f5:ea:9e:e1:88:7c:06:4e:37:6f:0c:22:64:22:d9:b1:4e:46:
3d:6c:28:98:3d:83:85:98:73:50:63:4c:df:58:ac:44:54:31:
03:b9:39:41:3e:2c:77:4f:7c:98:b7:58:3a:da:5a:a5:a3:23:
cd:0a:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 20:47:45 2024 by rpki-client on console-ams.rpki-client.org