Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5578365AC7BA35472A6FC6D697540848F8A67D88.cer
File: 5578365AC7BA35472A6FC6D697540848F8A67D88.cer (raw, json)
Hash identifier: HqMC8WLtHCejcsKIHAot8ckzEhDcos35vK9G73XUVbI=
Subject key identifier: 55:78:36:5A:C7:BA:35:47:2A:6F:C6:D6:97:54:08:48:F8:A6:7D:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 29D6B4D9ACDB611B247EBD1BE2A4E2ACA5160E9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/5578365AC7BA35472A6FC6D697540848F8A67D88.mft
caRepository: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 07 Nov 2024 14:28:45 +0000
Certificate not after: Thu 06 Nov 2025 14:33:45 +0000
Subordinate resources: AS: 264257
IP: 138.118.108.0/22
IP: 2804:2510::/32
Validation: Failed, certificate revoked on Fri 08 Nov 2024 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d6:b4:d9:ac:db:61:1b:24:7e:bd:1b:e2:a4:e2:ac:a5:16:0e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 7 14:28:45 2024 GMT
Not After : Nov 6 14:33:45 2025 GMT
Subject: CN=5578365AC7BA35472A6FC6D697540848F8A67D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:da:42:e6:16:b7:3a:91:37:fd:a7:4c:ad:
c7:82:25:e7:90:fc:c3:13:bc:d8:39:6d:e3:4e:cc:
28:d6:42:22:6c:44:63:3c:96:22:5e:d8:6e:70:3e:
02:38:d3:15:58:f9:ff:a5:95:db:e0:83:c7:58:a9:
94:4a:6b:7f:86:19:24:15:59:b6:49:c9:dd:d6:dd:
30:13:96:a7:e0:5d:56:17:24:e1:f9:fa:e7:6e:58:
23:a7:1b:d8:01:39:0a:b5:1c:a7:71:51:f4:8d:69:
c8:6d:50:c8:0c:b8:68:00:2f:0e:08:d0:d5:81:eb:
9d:f0:a7:fe:a9:67:02:62:dc:1c:8a:49:72:44:93:
6e:e1:1e:c3:9e:8b:df:a5:a2:b7:35:21:42:25:42:
57:5d:84:d4:fe:cb:7b:7b:f5:3a:b3:22:e8:16:17:
ba:48:3b:18:79:4c:00:99:00:c8:8d:a2:e7:d4:25:
71:8a:8f:9d:5c:d9:20:d4:8f:e5:ab:ef:15:6c:55:
32:c3:55:e3:22:15:c7:2e:89:f4:8d:5c:2d:b8:04:
3b:af:54:d7:09:ac:8a:6e:05:9a:36:05:d2:75:2d:
d2:9e:84:26:81:6c:82:8a:f3:0b:e1:54:29:63:fe:
f4:4d:ba:8b:72:93:f5:e4:36:9e:3b:66:a0:4a:c2:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
55:78:36:5A:C7:BA:35:47:2A:6F:C6:D6:97:54:08:48:F8:A6:7D:88
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/5578365AC7BA35472A6FC6D697540848F8A67D88.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.108.0/22
IPv6:
2804:2510::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264257
Signature Algorithm: sha256WithRSAEncryption
58:39:40:34:cc:3d:40:ba:73:13:b7:e5:7f:07:16:d2:bf:08:
57:d3:3e:55:b1:ba:3b:df:a6:11:b2:59:a0:61:45:78:0a:60:
52:86:81:1c:65:a8:a5:72:f3:7e:d4:df:a9:6b:bc:19:6c:7d:
62:1e:fa:f5:e0:6c:ad:6c:b0:c0:e9:07:56:27:42:23:ea:dc:
56:c7:a4:96:78:e8:07:06:b4:a5:e1:5a:0e:2a:c3:dd:ea:a7:
66:cd:9e:57:b4:b0:1b:cd:8c:5a:62:be:88:18:2c:8d:76:ab:
fe:3d:54:8e:a5:1f:32:e6:8b:ad:aa:85:e4:59:19:99:16:be:
e6:33:eb:2e:85:66:eb:45:7b:4b:52:df:6f:d9:ef:8c:68:b4:
30:dd:9b:64:1d:52:79:9f:73:99:4f:2f:ac:4d:21:ef:85:5f:
b6:86:d6:b0:dd:c3:31:8b:0e:45:1f:2a:c7:d2:05:30:22:ba:
8b:d3:c1:a8:ee:d4:5d:2a:45:16:53:a0:30:71:c4:a5:48:44:
fe:bf:51:bd:98:ed:18:31:7e:ab:20:d6:83:a1:cb:fd:9b:7f:
aa:ac:48:1f:88:d2:7b:03:ca:97:d1:2c:eb:f9:58:22:01:5b:
0c:b3:d9:7e:f8:bb:f8:c1:eb:fd:68:36:94:56:97:c7:d9:f5:
db:5b:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 22:21:21 2024 by rpki-client on console-fra.rpki-client.org