Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer
File: 6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer (raw, json)
Hash identifier: 4bgGVAWEVUgm+b/9A0QgegJ/XbnDmdwmhTWM6RNbm/g=
Subject key identifier: 6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 772DBBB2D7DB82417CEEE37309F3E4B1D2BC357F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.mft
caRepository: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:55:22 +0000
Certificate not after: Wed 02 Apr 2025 19:00:22 +0000
Subordinate resources: AS: 263528
IP: 170.254.4.0/22
IP: 191.253.64.0/22
IP: 2804:1350::/32
Validation: Failed, certificate revoked on Thu 18 Apr 2024 17:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2d:bb:b2:d7:db:82:41:7c:ee:e3:73:09:f3:e4:b1:d2:bc:35:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:55:22 2024 GMT
Not After : Apr 2 19:00:22 2025 GMT
Subject: CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:af:b4:cd:fd:6d:2f:33:d7:c2:09:1f:d0:
22:a0:78:e4:c1:c3:13:43:15:ce:1c:39:4f:65:14:
57:30:40:b2:3b:e1:4a:58:63:f2:f5:37:5c:5e:74:
f5:f8:eb:08:56:1c:d6:04:84:38:23:59:0b:1c:b1:
c6:40:22:04:ff:93:0f:2f:06:5c:69:8e:72:5c:db:
4e:71:ea:bc:1d:79:e4:23:f8:84:8c:75:9f:ee:eb:
82:de:50:43:2d:3f:f3:7a:2e:7d:e6:99:e2:dc:94:
bc:68:fe:ef:db:83:fc:1a:7f:6f:33:d0:c7:f3:60:
0f:ae:a1:9b:67:ff:2d:6d:64:af:f9:c1:99:56:46:
6f:1a:c0:b1:fc:95:84:1a:fe:7d:2c:97:01:a4:4c:
be:59:96:38:7b:01:3e:bc:3b:0a:94:de:95:e6:dd:
3f:c5:94:4c:3a:ef:41:a1:b6:2d:fa:e6:85:4b:8a:
f2:7c:1e:30:b0:df:dd:46:1f:33:b6:fa:f6:3f:09:
52:45:9f:b2:2e:17:14:86:e2:58:d1:b6:62:2a:48:
cd:84:85:34:77:aa:50:ce:9b:88:7d:cc:0c:29:3d:
65:92:f4:c6:59:20:c1:42:53:59:df:25:57:e4:27:
b7:5b:7c:b5:b0:3e:cd:b1:00:61:4d:d1:c4:d3:fd:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.4.0/22
191.253.64.0/22
IPv6:
2804:1350::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263528
Signature Algorithm: sha256WithRSAEncryption
45:28:43:a1:9e:a3:29:63:3d:5b:ad:80:58:6a:35:2f:61:d6:
f7:9e:33:07:d2:73:5c:b2:4b:c6:1d:76:7e:83:2c:dd:41:46:
11:70:77:1b:52:31:e0:b7:e1:9a:b9:25:92:55:44:11:cf:66:
b6:65:75:76:97:14:94:68:78:95:76:7a:a0:12:50:12:7e:c5:
51:37:56:11:b6:12:e9:ef:f7:55:3c:d8:8d:0a:b1:56:84:01:
dd:c7:b1:9b:fe:df:87:c5:56:2b:cd:e2:08:49:4e:8f:8d:f9:
90:e9:f6:b7:72:b7:5c:7c:b6:5a:15:87:03:ad:d1:bd:55:9d:
b1:dd:7b:0a:51:7a:68:8d:97:fa:45:54:7e:6e:bb:ca:fc:14:
26:32:90:71:05:df:ee:47:d9:ae:1f:45:32:0d:68:f3:18:27:
b0:d5:66:e0:88:2e:15:f8:10:a8:8a:51:38:9a:25:ed:17:11:
83:48:fc:15:5f:f0:1f:93:63:50:0f:30:ba:10:c9:f0:51:07:
62:0a:ee:23:cd:35:ac:94:65:7a:9e:b3:79:ea:7d:ae:29:7b:
17:11:da:3e:79:bd:68:c8:cd:83:25:1a:df:95:1b:8c:d1:b9:
79:51:50:5f:02:e6:48:79:b2:db:b6:20:71:eb:50:e1:64:ce:
a9:3e:38:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org