Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.cer
File: 67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.cer (raw, json)
Hash identifier: 5yzNOHZs/W2DGqB2SvtVGROT1iE5EQsj2diHx/2P5ak=
Subject key identifier: 67:F9:C1:5F:CB:2C:83:39:DC:83:7E:A9:BA:2B:56:A6:25:DD:2F:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 08154181540B43AF2A79F6D5A451197039FC6C4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.mft
caRepository: rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 25 Jun 2024 14:25:47 +0000
Certificate not after: Tue 24 Jun 2025 14:30:47 +0000
Subordinate resources: AS: 53045
IP: 138.121.232.0/22
IP: 170.79.4.0/22
IP: 177.85.144.0/21
IP: 2804:6d4::/32
Validation: Failed, certificate revoked on Fri 22 Nov 2024 05:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:15:41:81:54:0b:43:af:2a:79:f6:d5:a4:51:19:70:39:fc:6c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 25 14:25:47 2024 GMT
Not After : Jun 24 14:30:47 2025 GMT
Subject: CN=67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:93:b0:be:cf:52:50:ee:c8:f4:39:ea:04:
8a:13:51:c6:7f:51:a6:92:4a:50:7c:74:92:93:cd:
8f:de:2c:9a:34:9f:b4:6e:06:a8:7c:3c:51:65:51:
bd:1e:9f:dd:5e:ce:b6:51:1d:8f:6d:cb:9d:df:e0:
0a:5f:35:2f:44:a3:20:51:36:d0:8c:23:a3:5d:d1:
5a:96:bb:50:38:ab:3e:e6:1b:62:61:15:06:2d:22:
fd:cd:1c:9d:34:51:af:84:0a:ec:f8:78:9e:b0:5c:
47:4f:88:62:13:dd:7f:7c:d1:6d:54:98:c7:4c:c7:
40:d4:b2:46:b0:e7:32:c9:92:6d:49:9b:43:c9:d2:
0f:7f:95:b9:eb:70:13:2b:10:f3:80:e6:34:f1:32:
26:fe:2f:ed:5e:14:33:69:88:ef:14:42:bc:7e:e4:
8a:50:36:90:f5:ea:df:cc:89:89:f7:f9:49:82:fd:
fc:c0:05:2c:5d:9d:98:1d:31:dd:96:aa:d7:ea:be:
f3:b2:c8:61:3c:14:37:20:3a:f4:a2:d5:06:96:1f:
f3:c2:ea:5a:01:9f:b5:a7:a3:2d:ab:99:7f:73:29:
f9:ec:f3:a5:07:58:69:56:7c:20:3a:aa:c4:4c:d1:
c7:2f:71:e6:16:0e:d7:b9:57:61:15:9c:63:ad:82:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
67:F9:C1:5F:CB:2C:83:39:DC:83:7E:A9:BA:2B:56:A6:25:DD:2F:DC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.232.0/22
170.79.4.0/22
177.85.144.0/21
IPv6:
2804:6d4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53045
Signature Algorithm: sha256WithRSAEncryption
95:bd:f8:5c:9e:f9:ba:05:fe:e6:66:b2:e1:a2:4c:d8:e3:ff:
69:9e:52:66:1e:ef:44:b6:60:0b:e2:35:35:78:0b:73:63:eb:
f4:c5:0f:d9:33:2f:ec:1c:b8:ee:b1:8c:be:df:9a:27:d0:a6:
fe:d3:e1:9f:d2:ef:09:40:01:7f:81:1f:7c:8a:e9:15:6a:5a:
55:2b:f8:ff:07:27:ef:86:28:31:e5:32:34:39:19:f5:0d:9b:
3a:99:4b:32:7b:0b:b7:2d:93:21:07:bb:87:bc:2a:39:b5:53:
6c:a8:9d:66:d9:14:15:12:5a:f4:24:d4:57:27:52:60:23:7f:
18:76:e2:40:d1:76:a6:a4:ed:5f:40:2b:ff:67:61:82:74:07:
29:d2:2b:41:1a:ed:26:b7:68:60:a6:58:cb:c3:c0:92:97:7d:
df:b0:bd:33:e1:2a:3f:60:fa:73:7c:fa:a5:4e:46:b1:77:91:
78:59:a3:8b:70:9d:f2:41:b5:ee:de:bf:df:8b:95:f0:7f:b7:
08:eb:82:3b:63:0b:5d:8f:64:80:99:46:55:13:75:2a:06:b2:
1f:4a:7e:43:71:3a:0e:ce:35:8a:31:91:e6:9d:75:42:97:03:
0e:c0:cd:b5:28:5c:23:25:c5:b1:bc:9b:ba:88:4b:93:0d:5d:
01:c5:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:34 2024 by rpki-client on console-ams.rpki-client.org