Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5561D2DB99D9149F730A58FD1CAE05445752A65C.cer
File: 5561D2DB99D9149F730A58FD1CAE05445752A65C.cer (raw, json)
Hash identifier: G9Xn40trHlLiYnFAXGFR8anw7Ya0NwMxPO0t3kMs/aA=
Subject key identifier: 55:61:D2:DB:99:D9:14:9F:73:0A:58:FD:1C:AE:05:44:57:52:A6:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5B47D0F59914378F05731679ABADDA43CCF27874
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/5561D2DB99D9149F730A58FD1CAE05445752A65C.mft
caRepository: rsync://rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 13 Jul 2024 16:23:38 +0000
Certificate not after: Sat 12 Jul 2025 16:28:38 +0000
Subordinate resources: AS: 267180
IP: 45.231.12.0/22
IP: 2804:495c::/32
Validation: Failed, certificate revoked on Fri 18 Oct 2024 01:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:47:d0:f5:99:14:37:8f:05:73:16:79:ab:ad:da:43:cc:f2:78:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 13 16:23:38 2024 GMT
Not After : Jul 12 16:28:38 2025 GMT
Subject: CN=5561D2DB99D9149F730A58FD1CAE05445752A65C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:ec:b4:72:58:9c:c7:53:76:15:bc:0a:91:
ca:72:93:59:7c:61:60:82:51:93:c5:a9:6d:73:5e:
c0:40:51:ad:9f:c8:4e:f6:5a:23:65:52:c0:e1:37:
e4:ba:68:88:b7:0d:80:67:59:91:98:7d:50:fc:9a:
74:c4:ce:89:b4:0a:a3:0a:b6:24:04:ca:32:34:9c:
8c:b6:80:19:ff:d2:33:7c:16:6c:63:bc:86:31:79:
6c:38:b0:0f:82:da:43:25:84:bd:9e:ae:b1:b5:3a:
cf:8e:9e:71:5a:3e:bd:6a:13:9a:c7:6b:51:26:39:
cb:52:46:e7:17:22:03:db:33:2d:6a:ab:79:49:2b:
cb:02:fb:d7:08:27:b7:75:53:9f:99:cb:32:8c:22:
a4:21:49:c2:1d:18:c7:a5:a3:4e:45:48:fc:89:80:
38:e4:60:49:d6:0a:a3:9f:d5:23:3a:6f:98:11:29:
34:78:91:29:5d:8f:a0:6d:8c:10:7f:af:2a:6f:c4:
42:5b:12:94:1d:eb:01:34:e2:75:76:d9:5a:e7:eb:
39:0a:a6:44:ac:6b:66:aa:e1:a0:72:80:86:f8:f0:
6e:27:8e:9e:c6:96:cb:81:45:be:35:d0:da:61:60:
94:d4:8a:90:67:c4:e3:93:66:5c:ed:52:81:49:a8:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
55:61:D2:DB:99:D9:14:9F:73:0A:58:FD:1C:AE:05:44:57:52:A6:5C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/5561D2DB99D9149F730A58FD1CAE05445752A65C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.12.0/22
IPv6:
2804:495c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267180
Signature Algorithm: sha256WithRSAEncryption
9e:5f:df:db:fe:1e:29:aa:58:0f:dd:c6:49:80:31:9d:30:4c:
ac:f5:07:89:66:14:f7:47:26:19:fd:18:93:f3:d4:d0:43:07:
9c:c5:c7:a9:d2:b4:06:4c:f8:fa:6b:03:0b:ff:2d:52:50:35:
e2:2e:5f:6d:8d:35:ae:53:a9:f5:22:0b:99:96:58:00:5b:cd:
97:ca:bf:d7:af:02:ac:3a:1b:63:57:58:53:1e:86:f6:f5:e6:
bb:a1:55:0b:50:f5:bd:44:e3:02:fa:f0:1b:ec:7c:00:ef:50:
1d:83:e8:88:a4:8e:58:06:30:f2:5e:e3:01:71:8d:3a:2b:6d:
4a:95:7c:68:71:47:37:07:5f:ab:85:da:7d:7c:4a:d6:05:9c:
95:bb:74:f5:ae:5e:4f:14:dd:88:2a:b5:ac:21:6a:dc:28:5f:
ff:e7:4b:6b:f2:eb:7c:23:af:d6:40:0e:99:f0:32:65:f6:46:
ab:8d:4d:a3:75:72:80:9b:93:8d:a7:6d:b6:18:d3:a9:df:52:
ab:5b:1f:08:6c:f0:de:8c:43:7a:a2:d8:f2:d2:62:76:c1:ab:
8b:76:17:df:09:da:8d:80:fe:e5:e4:44:b8:98:8a:42:47:54:
3a:1d:fd:e5:b3:35:5c:b1:6a:ad:54:0b:c4:59:70:4c:98:c2:
a6:e3:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 03:49:26 2024 by rpki-client on console-fra.rpki-client.org