Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/720929CF576E60789CD9860A6B57545753C0FA3F.cer
File: 720929CF576E60789CD9860A6B57545753C0FA3F.cer (raw, json)
Hash identifier: ok/YESlO8jzAOJWpxA73aO1lZTSfWzahq1+iU2/Srf4=
Subject key identifier: 72:09:29:CF:57:6E:60:78:9C:D9:86:0A:6B:57:54:57:53:C0:FA:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 30353190C33B116734C9C572838042ACB03C14B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/720929CF576E60789CD9860A6B57545753C0FA3F.mft
caRepository: rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 06 May 2024 15:09:18 +0000
Certificate not after: Mon 05 May 2025 15:14:18 +0000
Subordinate resources: AS: 268031
IP: 45.168.60.0/22
IP: 2804:56e8::/32
Validation: Failed, certificate revoked on Thu 11 Jul 2024 10:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:35:31:90:c3:3b:11:67:34:c9:c5:72:83:80:42:ac:b0:3c:14:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 6 15:09:18 2024 GMT
Not After : May 5 15:14:18 2025 GMT
Subject: CN=720929CF576E60789CD9860A6B57545753C0FA3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:bc:ed:4b:48:86:97:6f:cb:3a:57:cd:f5:
b3:b8:2e:f6:d4:d0:2d:8c:fa:8c:58:f4:79:87:50:
df:f2:ec:b2:11:b3:a9:0e:99:3d:a4:1e:56:d1:0a:
39:ad:85:4c:3f:ec:85:50:be:2a:dd:c3:03:56:0c:
5d:87:f9:59:0a:d0:e7:f4:e1:f3:7b:8a:d6:ce:44:
b0:9e:59:40:71:c1:60:60:05:79:9e:0a:bc:19:2c:
81:76:3f:ee:3e:7c:12:5c:3a:b3:7e:c9:13:e7:d1:
2f:09:32:f2:82:5d:f2:f0:8a:90:3d:20:8b:5f:73:
e8:8c:d5:9e:7a:e8:9f:b0:b9:4f:41:13:f7:7d:fc:
cf:5d:73:5f:ad:a0:06:c4:17:57:75:a9:33:3a:d3:
9b:33:cf:f0:55:59:48:7b:00:50:43:52:6a:b3:30:
54:52:bb:24:3a:18:07:1f:d7:e0:84:75:56:cb:d8:
3b:ac:47:f3:d4:e3:77:5e:29:9a:f5:91:5a:f3:e8:
80:b3:49:45:fb:05:55:34:bf:26:d6:61:a2:ca:88:
43:f7:e6:24:ca:57:80:dc:c0:d9:e7:ef:34:eb:62:
5c:5a:40:ba:0b:ee:ae:8f:53:3b:45:4a:cd:82:b5:
32:05:3a:43:24:bd:8e:fe:54:4f:56:46:ee:0b:f6:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
72:09:29:CF:57:6E:60:78:9C:D9:86:0A:6B:57:54:57:53:C0:FA:3F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/720929CF576E60789CD9860A6B57545753C0FA3F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.60.0/22
IPv6:
2804:56e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268031
Signature Algorithm: sha256WithRSAEncryption
47:ff:0d:ab:e1:98:ba:9a:0e:c9:db:94:19:ce:89:cb:fb:48:
f0:c1:74:fa:4e:49:e1:e6:8a:49:ff:b0:9e:ec:28:7b:2a:3f:
0b:f1:80:26:76:e9:99:86:ef:c5:92:9a:64:1e:a6:c5:54:5a:
4d:70:02:c7:d6:ac:95:fc:8a:ca:32:84:f7:5b:11:ad:bd:fa:
57:bc:5d:bc:95:50:35:8a:f4:9b:eb:87:08:bf:60:59:60:e6:
ff:5d:10:33:c3:dd:5c:55:eb:53:a9:a4:51:c6:35:27:a2:71:
da:42:e0:cf:26:e0:f9:71:f0:40:f1:ce:67:fd:18:32:3e:e2:
c0:fa:63:7f:0b:38:88:36:8e:f8:61:57:f9:ae:14:c5:19:04:
36:a3:dd:d8:2c:bd:d6:fd:f9:f4:03:0d:a9:ad:33:92:42:81:
7b:eb:32:ce:b2:55:7d:e9:bb:ae:43:02:eb:fe:96:43:d2:a8:
f0:37:a9:62:ff:13:8b:d1:73:6c:94:85:f1:d5:7c:e6:93:c5:
d6:9c:fb:9a:26:76:6a:58:61:f1:d7:d6:ad:8c:a7:56:bd:e2:
3a:b4:ea:09:7e:ba:f0:78:cb:f0:f4:70:cd:bd:b6:65:44:c1:
95:75:be:e8:1b:67:0c:ef:d6:78:a1:7e:9b:c3:7b:29:ec:d8:
31:fa:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 11:45:41 2024 by rpki-client on console-fra.rpki-client.org