Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AEB42BBBF8D284E2EEC7DCF51F53ADB960C41D7.cer
File: 5AEB42BBBF8D284E2EEC7DCF51F53ADB960C41D7.cer (raw, json)
Hash identifier: Sj17QwnzQwyseuZ/VmsCXV+ygnSaiYb7J4hJhwGtNSs=
Subject key identifier: 5A:EB:42:BB:BF:8D:28:4E:2E:EC:7D:CF:51:F5:3A:DB:96:0C:41:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 62B5D0AA39E2A5C214A9B599DCC4116AB9DF0815
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/1/5AEB42BBBF8D284E2EEC7DCF51F53ADB960C41D7.mft
caRepository: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 20:49:15 +0000
Certificate not after: Wed 02 Apr 2025 20:54:15 +0000
Subordinate resources: AS: 268669
IP: 45.164.100.0/22
IP: 2804:54c4::/32
Validation: Failed, certificate revoked on Wed 17 Apr 2024 21:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b5:d0:aa:39:e2:a5:c2:14:a9:b5:99:dc:c4:11:6a:b9:df:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 20:49:15 2024 GMT
Not After : Apr 2 20:54:15 2025 GMT
Subject: CN=5AEB42BBBF8D284E2EEC7DCF51F53ADB960C41D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:a9:03:a0:03:68:e7:5f:c6:83:f4:68:9a:
ab:3b:11:b8:fd:08:b5:b7:dc:0e:64:43:a0:30:d4:
df:ee:90:e8:d7:68:be:46:60:af:60:6d:3c:62:5c:
ac:fd:33:00:54:10:4a:85:56:42:8a:63:64:84:87:
58:0b:c0:49:b2:d0:2a:fa:e7:21:e0:36:fc:7d:08:
18:10:7e:60:47:ed:20:23:99:e0:96:c8:75:53:b0:
49:69:9c:63:04:42:73:b4:c2:ef:bc:cf:1a:83:35:
43:23:a6:1f:1f:3f:80:ef:05:75:c4:e2:bb:d0:36:
ae:96:18:cf:9c:58:cf:16:bb:64:a3:ae:04:0e:0a:
b9:0f:23:0a:2f:be:9e:d0:46:8f:2d:af:fb:8e:96:
9c:49:ba:6f:57:a9:91:24:12:b9:4f:18:5d:cd:a3:
1d:11:bb:5a:19:ce:5b:8d:06:81:d9:43:95:ba:db:
c3:09:37:f4:7c:26:14:de:cb:1d:9c:5b:b6:5a:b3:
2f:cc:e4:a7:cb:fa:f6:78:ba:bc:79:6c:1c:74:27:
b9:c5:8c:e6:e3:62:0d:2b:f7:87:74:6c:e2:30:97:
4d:33:73:56:69:9d:8b:35:49:35:1e:2c:61:50:48:
98:84:44:61:28:60:c2:bc:37:03:bd:42:2f:43:50:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5A:EB:42:BB:BF:8D:28:4E:2E:EC:7D:CF:51:F5:3A:DB:96:0C:41:D7
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/1/5AEB42BBBF8D284E2EEC7DCF51F53ADB960C41D7.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.100.0/22
IPv6:
2804:54c4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268669
Signature Algorithm: sha256WithRSAEncryption
24:06:a0:08:48:17:dd:16:ba:13:28:2f:d5:1e:5c:c7:bd:99:
e3:9a:37:20:e7:5d:ad:ac:05:a5:ad:c2:0a:a7:dc:b6:bf:d7:
ac:e0:f2:86:06:b8:ed:37:ed:64:39:38:2e:3c:8d:98:17:29:
51:96:98:45:91:ca:d2:e1:9f:95:ba:ba:51:5d:36:fa:53:dd:
3e:4e:81:e6:eb:33:3b:1e:5c:04:01:fe:d9:ed:ff:48:d6:a3:
c8:a1:cc:78:29:79:50:5e:bb:4e:02:f8:eb:ec:d9:aa:d2:0e:
67:ba:c2:b5:d4:2c:53:f1:cb:20:90:00:aa:29:6a:d3:53:c2:
86:25:1c:df:38:8e:b3:50:e1:b3:73:1f:60:32:5b:4d:51:f2:
95:78:d5:df:2f:f7:6c:34:c3:2f:50:63:55:2e:c7:14:a8:4b:
be:f8:91:ec:a6:84:2f:f7:af:e6:48:eb:83:26:be:f5:7b:51:
35:13:1b:65:a6:59:10:a4:d9:96:a8:9c:c2:dd:ec:cf:4a:65:
32:56:94:10:a2:a9:ec:7d:6c:df:91:56:c5:89:16:e0:8e:20:
81:b8:a0:3b:d9:92:bd:ff:99:16:d6:79:74:8c:88:37:9d:33:
6e:d8:38:19:57:c5:57:ea:e2:0d:be:37:b9:51:96:bc:b6:9b:
d6:91:fb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org