Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
File: 5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer (raw, json)
Hash identifier: bXYHosBsLY7qj2aYkYiejCkGzNsGTvYsAcB/3d4s5sg=
Subject key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 74D51051A3A2B2F0D3DF25559339C736AE1B9E37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.mft
caRepository: rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 30 Jul 2024 17:35:52 +0000
Certificate not after: Tue 29 Jul 2025 17:40:52 +0000
Subordinate resources: AS: 264500
IP: 131.255.228.0/22
IP: 2804:2098::/32
Validation: Failed, certificate revoked on Fri 25 Oct 2024 17:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d5:10:51:a3:a2:b2:f0:d3:df:25:55:93:39:c7:36:ae:1b:9e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 30 17:35:52 2024 GMT
Not After : Jul 29 17:40:52 2025 GMT
Subject: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:d8:c9:ac:5b:67:7d:0b:ae:6d:a0:94:c6:
93:a0:31:e5:ef:0f:7a:ff:7c:44:58:5c:5e:c1:12:
f7:0c:91:01:84:2c:52:3c:eb:ed:30:43:ab:da:a8:
93:71:64:ef:7c:d6:66:7f:24:c6:d7:89:63:2c:6d:
83:c1:63:dc:99:45:e2:da:04:63:9d:54:f6:fe:d8:
08:b8:f4:3e:c3:76:6d:6a:77:17:da:81:7e:e9:56:
94:ba:59:1f:f5:bd:16:9a:2d:10:37:cb:2d:75:5d:
7f:dc:1b:2b:47:0b:e2:69:ab:9d:fa:5b:6e:f8:8c:
84:23:6a:c8:b2:2c:d1:81:0a:fa:ec:65:0f:87:ec:
8c:ac:b7:17:e2:59:d8:e4:83:40:71:a4:fd:20:16:
b1:8d:05:91:64:61:e0:f3:66:fa:ad:11:77:86:4c:
2c:60:f8:8d:65:6e:f8:fd:b2:e4:7f:77:54:1c:5c:
f3:fd:80:e9:36:30:bd:62:91:8c:47:40:5d:56:52:
29:df:26:ee:fb:a7:aa:81:e8:e0:ce:82:c8:71:6d:
b9:af:72:d2:36:50:e1:b1:a9:be:ae:02:c3:56:4a:
66:d8:ae:68:4f:9b:a1:c1:dd:e3:ca:fa:a7:dc:cc:
ed:f3:44:52:2d:dd:3e:65:65:e5:9a:6d:b9:8d:1d:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.228.0/22
IPv6:
2804:2098::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264500
Signature Algorithm: sha256WithRSAEncryption
ab:ad:5d:46:13:77:c3:65:3f:da:64:3b:2e:d1:c2:3b:19:b1:
35:85:d9:f4:ce:e7:11:7b:5c:00:1d:e4:97:5d:3f:fc:7b:40:
8e:f3:c6:6d:cb:b1:fb:ed:b1:db:51:34:64:fa:e0:f4:2e:5d:
3c:62:1c:04:e8:56:5e:d9:5c:98:88:f7:ac:f9:9b:6d:5a:41:
64:e0:65:78:85:16:b8:e2:45:f0:4d:98:cd:3a:d7:75:b8:1a:
b8:be:19:a2:af:77:53:db:1e:df:f8:8b:83:9f:30:82:2e:67:
fd:93:88:17:ed:0a:ae:98:4e:55:a6:ee:da:8d:d3:7a:a2:5a:
a6:4d:19:0c:4f:0c:1a:69:5d:ef:0a:bb:6a:53:e4:d4:35:99:
15:3f:46:5c:72:81:c8:75:c5:48:df:6b:b9:ee:a9:83:55:e2:
82:81:db:5e:76:5e:f9:05:5a:b1:45:06:7e:c9:35:b5:55:7e:
e7:c3:e1:5b:f3:9d:a1:92:a5:0b:f2:6c:8b:2a:89:f0:cc:4b:
a3:77:8c:16:eb:c5:6c:a5:f3:f9:19:19:e6:5c:ba:da:7a:f1:
31:b5:0a:ae:f7:96:e6:95:2c:a7:89:bb:c2:70:c9:a6:c0:2a:
c1:0f:b9:46:84:b9:94:4f:c2:1e:79:66:88:50:2e:4b:ac:a3:
29:d7:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:38:11 2024 by rpki-client on console-ams.rpki-client.org