Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.cer
File: 552F7488ADA4685AF1FF21758FA2AE8DE225C52C.cer (raw, json)
Hash identifier: vR3CpFR9r16Ai4VvtvO8K5R1CSG7yNrHy7aToaaLQGQ=
Subject key identifier: 55:2F:74:88:AD:A4:68:5A:F1:FF:21:75:8F:A2:AE:8D:E2:25:C5:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 66255EBBB1284DFE4A99F34A03AA92F319AA2DFA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.mft
caRepository: rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 23 Aug 2024 20:06:00 +0000
Certificate not after: Fri 22 Aug 2025 20:11:00 +0000
Subordinate resources: AS: 52655
IP: 138.94.176.0/22
IP: 177.66.164.0/22
IP: 2804:c00::/32
Validation: Failed, certificate revoked on Thu 03 Oct 2024 11:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:25:5e:bb:b1:28:4d:fe:4a:99:f3:4a:03:aa:92:f3:19:aa:2d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 23 20:06:00 2024 GMT
Not After : Aug 22 20:11:00 2025 GMT
Subject: CN=552F7488ADA4685AF1FF21758FA2AE8DE225C52C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:e1:d4:87:61:fc:7e:58:f7:d4:88:66:f4:
f9:ff:1b:18:3c:74:ce:d2:e3:dd:ea:5f:1f:0e:c7:
97:75:66:e1:0d:ce:cf:bb:18:07:04:d5:31:2f:39:
40:a9:ba:e5:9f:b5:26:c8:46:2a:78:04:b9:6f:d9:
9c:fd:5c:b2:89:dd:94:88:63:00:90:6b:03:02:23:
3c:1b:ca:a8:e7:54:a7:91:d1:16:42:f6:d5:8a:d7:
b5:1b:41:36:51:a7:d3:a2:82:3d:31:e4:bd:c9:c4:
9c:a2:f2:7c:54:22:e8:d5:4c:8a:b5:d2:57:cb:75:
c6:7e:14:41:43:a2:37:7a:a6:1f:ff:6a:59:f9:2a:
e0:15:29:25:f0:c1:5b:12:54:21:d4:35:7b:f0:93:
8b:c1:1e:8b:ba:e3:ed:8a:25:0d:d6:bf:17:20:a8:
cd:64:41:80:3a:56:b4:47:93:5b:a5:40:9c:6c:96:
bc:d8:41:3c:b7:6e:cc:13:b9:dc:0f:97:62:e6:62:
34:06:12:c1:51:07:19:f5:7e:f1:4a:54:eb:4f:f1:
33:0b:0a:71:a1:3b:93:62:71:0c:60:6b:51:d0:6b:
06:c1:7d:fa:f1:79:68:d0:4d:c6:8c:3d:2c:12:6a:
3f:01:94:c0:6a:82:dc:8e:b7:79:10:7f:fb:1f:be:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
55:2F:74:88:AD:A4:68:5A:F1:FF:21:75:8F:A2:AE:8D:E2:25:C5:2C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.176.0/22
177.66.164.0/22
IPv6:
2804:c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52655
Signature Algorithm: sha256WithRSAEncryption
29:ee:be:78:80:00:2b:7d:ba:58:84:66:26:86:71:a5:9e:b5:
59:de:60:7a:22:cd:2f:57:62:85:9c:af:66:fc:45:10:98:e5:
49:1e:3f:cb:bc:43:87:4b:c0:3a:19:26:19:11:a9:b7:0d:fb:
81:b3:0c:58:6e:63:5b:23:0b:b2:0b:aa:07:17:fb:66:d4:78:
73:be:7d:90:18:a1:a4:75:c4:8f:55:04:c4:5f:c6:7c:30:48:
23:ed:bf:5e:54:cb:fb:9a:13:5d:4e:1d:c2:a1:4e:d7:9a:d8:
0a:cf:e8:a4:80:98:05:39:7c:86:10:0a:6e:0b:84:72:ed:3b:
89:6d:0d:36:58:b3:c9:1d:7f:35:23:e0:44:dc:3f:e7:67:74:
b5:b8:9d:85:cb:ab:65:6b:a8:2b:47:d2:4f:95:3e:58:70:b1:
2a:1d:38:1a:8a:c2:59:d7:30:1e:e6:af:6b:0f:dd:65:ef:d0:
24:b8:5c:99:36:ad:f4:a0:d2:60:37:32:23:ef:a5:a2:25:4a:
19:ba:22:5c:68:ce:33:15:24:45:92:30:ed:06:2e:0f:26:2f:
f1:11:16:f4:69:8e:32:9f:e1:89:f1:70:0a:f9:b7:f7:93:97:
30:c6:43:a9:d2:ab:40:b9:53:e7:8a:5c:61:48:50:16:75:46:
c7:9d:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:30:04 2024 by rpki-client on console-ams.rpki-client.org