Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer
File: 60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer (raw, json)
Hash identifier: faE3AXJqg7Yf+gLbaBe/g8TIW5XcRZUBuYEdBfap0aY=
Subject key identifier: 60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2FCB5B80C71076FD5405BD785F1F61913AAAC6DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.mft
caRepository: rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 05 Apr 2024 02:41:11 +0000
Certificate not after: Fri 04 Apr 2025 02:46:11 +0000
Subordinate resources: AS: 265158
IP: 167.249.16.0/22
IP: 2804:2b88::/32
Validation: Failed, certificate revoked on Thu 10 Oct 2024 09:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:cb:5b:80:c7:10:76:fd:54:05:bd:78:5f:1f:61:91:3a:aa:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 5 02:41:11 2024 GMT
Not After : Apr 4 02:46:11 2025 GMT
Subject: CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:be:21:69:4a:08:ee:0b:43:38:de:07:8f:
1d:20:c8:c2:56:5e:1c:58:44:f3:79:f7:86:20:47:
6b:d4:b1:05:05:c2:95:df:67:28:8e:58:52:db:d5:
5c:6b:ef:43:0d:0b:0f:e3:14:8d:0e:ea:ee:b2:ad:
60:03:14:83:7a:31:95:f2:37:7e:37:ac:40:45:2e:
7b:55:b5:d9:34:d8:f2:26:bb:2a:7c:5b:52:f3:5e:
f5:ea:43:ae:5e:13:29:19:69:2d:b4:68:5f:0d:d7:
3f:40:f4:70:e8:27:2a:5c:37:94:70:a0:e0:06:53:
55:02:17:ba:37:b1:d0:c3:37:23:f0:89:94:28:ca:
a4:fc:17:46:12:dd:e8:07:aa:17:d6:af:3b:ce:b1:
ef:90:a5:18:27:51:e8:da:9a:e8:b6:f4:fc:3a:8d:
15:86:65:15:5a:b1:9c:b0:8c:07:5a:df:17:47:9b:
67:ec:e2:80:5b:f6:85:a4:72:bb:8f:a8:56:1b:21:
ac:e5:de:2a:75:be:d9:6c:61:3d:97:8a:c0:5a:c7:
71:dd:7f:11:cc:88:1f:6c:c4:4e:4c:7e:3f:19:a8:
d8:b5:b6:85:f1:63:10:17:b4:c7:21:4c:8e:2c:58:
d0:88:b2:33:80:2f:bf:44:be:84:cd:30:50:85:22:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.16.0/22
IPv6:
2804:2b88::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265158
Signature Algorithm: sha256WithRSAEncryption
13:26:a6:1c:ef:14:87:8b:68:4b:82:36:19:fa:a0:52:ba:f5:
8f:f5:1c:27:ad:d9:58:ce:bf:51:d8:d9:03:a1:e6:f5:24:1f:
91:9c:ef:d1:b4:1c:a3:a5:8e:8f:61:58:6d:0d:eb:3e:05:cc:
2a:30:61:3f:75:66:8d:76:d4:34:e5:40:59:f0:c1:8e:85:e0:
e7:f2:52:99:99:01:6e:64:76:85:46:4c:ec:56:f9:ac:80:99:
38:56:12:c1:d9:b9:e3:95:ff:f0:76:00:81:7a:03:c7:29:e8:
f1:2c:1c:ea:65:a6:9d:99:5a:fd:eb:bb:1d:e1:00:1b:2b:07:
6b:1c:90:d5:c1:e8:c4:3f:c0:1f:b5:b3:ef:66:fe:86:28:84:
87:8b:68:2a:8a:85:81:11:80:c4:93:92:52:1d:de:41:73:6c:
d7:d8:f8:b4:0a:80:15:0b:f6:5d:55:b9:dd:1d:00:6b:8b:53:
04:38:26:20:a4:3e:05:24:76:0c:29:65:d4:fa:bb:44:97:92:
5b:29:bc:45:4e:87:5e:47:2d:d3:27:40:05:9b:f0:8a:cf:f6:
bb:61:73:a0:09:05:ab:99:d3:ba:34:3c:1d:f3:ac:05:1f:f3:
44:86:a2:81:9f:54:0e:f0:54:a5:00:aa:31:38:49:2f:a2:7c:
3b:bc:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 12:45:06 2024 by rpki-client on console-fra.rpki-client.org