Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5590E7442A6BC0AF4641BB5E09FEDCA90A20D666.cer
File: 5590E7442A6BC0AF4641BB5E09FEDCA90A20D666.cer (raw, json)
Hash identifier: qAdS112+cdXFG9KMFZsTwGB9VEczEUM5nQhYZIO2R+o=
Subject key identifier: 55:90:E7:44:2A:6B:C0:AF:46:41:BB:5E:09:FE:DC:A9:0A:20:D6:66
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2B2E78922A565A74D31D00F8FB2246C6CAE20DAD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/5590E7442A6BC0AF4641BB5E09FEDCA90A20D666.mft
caRepository: rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 21 Jun 2024 11:42:21 +0000
Certificate not after: Fri 20 Jun 2025 11:47:21 +0000
Subordinate resources: AS: 264521
IP: 132.255.212.0/22
IP: 2804:20ec::/32
Validation: Failed, certificate revoked on Thu 19 Sep 2024 16:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:2e:78:92:2a:56:5a:74:d3:1d:00:f8:fb:22:46:c6:ca:e2:0d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 21 11:42:21 2024 GMT
Not After : Jun 20 11:47:21 2025 GMT
Subject: CN=5590E7442A6BC0AF4641BB5E09FEDCA90A20D666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:c4:b6:af:89:b4:53:ad:f0:09:fc:96:77:
80:43:cc:5e:85:f5:a7:f2:e6:41:ed:2d:52:91:2c:
1e:ca:82:31:78:f7:0b:ca:4a:b1:06:52:b9:da:aa:
75:6d:2d:c7:25:3b:83:48:5b:39:7d:2d:d5:37:cb:
09:e3:d1:55:d6:01:3f:c8:1d:99:15:d8:e2:b4:7b:
4c:05:08:fb:66:d5:21:db:06:fd:5c:7c:e3:30:95:
1b:60:d7:ac:90:7d:af:b1:12:3b:d4:03:ab:27:c7:
32:88:ef:27:99:7f:47:6f:b7:72:8a:ec:0f:cc:0f:
11:eb:e1:fa:7f:d2:3d:ca:15:fd:95:0b:70:a3:bc:
81:3d:a8:ac:35:3a:c5:4f:e4:ae:2f:35:ae:a7:ca:
82:9d:c0:86:4b:ce:47:de:4a:ef:0a:76:36:09:31:
0e:48:23:59:ec:fe:40:73:1d:b9:a5:a3:cc:99:26:
be:73:22:03:fe:b2:ef:5b:6c:a4:5f:9d:b0:cf:90:
3d:ba:b2:09:8c:f2:af:60:5e:29:9f:bf:d8:33:72:
30:cc:c3:72:d9:8e:23:1d:21:be:80:c6:31:e1:2c:
df:f4:ea:21:42:f5:81:74:a3:4f:fa:f9:7f:a8:45:
28:53:f7:12:04:08:a0:45:f4:89:bf:41:9c:3e:ad:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
55:90:E7:44:2A:6B:C0:AF:46:41:BB:5E:09:FE:DC:A9:0A:20:D6:66
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/5590E7442A6BC0AF4641BB5E09FEDCA90A20D666.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.212.0/22
IPv6:
2804:20ec::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264521
Signature Algorithm: sha256WithRSAEncryption
11:d2:1a:e1:f5:d6:5f:52:44:60:ac:d4:36:7a:28:24:cd:6c:
24:0e:ee:65:f8:91:f6:91:17:c1:e7:96:4a:b4:6c:4c:d0:31:
77:11:47:80:49:a9:9f:b4:96:c7:67:b4:d0:4b:56:ea:97:fb:
e5:80:89:e7:49:b2:a7:24:86:b1:9b:26:d4:16:5b:84:53:8e:
38:2e:53:41:da:e4:3e:d8:26:ad:e9:0f:29:92:43:81:bc:17:
64:2d:b5:3b:7e:83:b4:2b:ed:ea:88:5e:a1:ca:53:11:4d:db:
54:de:c6:93:da:7d:1f:ff:bb:d9:77:a2:89:54:31:74:af:4a:
76:ea:c1:26:7d:81:d9:1a:0a:c5:b7:f5:03:45:7b:31:f4:4f:
bd:86:48:00:cc:62:c3:71:89:1b:9e:00:49:57:78:53:05:57:
ab:98:61:6b:49:c1:e1:bf:d3:8f:da:e3:6f:8f:0d:55:21:0a:
fa:c3:dc:c9:f0:b4:7f:7e:01:d3:1c:c5:fa:4d:d3:dd:36:47:
cf:61:05:be:18:70:7c:c9:75:96:4b:0f:31:01:b3:09:d4:cb:
a4:33:0c:fd:e6:79:a9:52:09:c2:71:d4:3d:db:07:37:92:bd:
64:a1:74:23:5c:e6:a8:89:75:37:9b:34:0a:70:22:20:7d:4a:
00:e9:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:31:46 2024 by rpki-client on console-ams.rpki-client.org