Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/73A308EE05C4F2E10A0E3EE801B45E394B133268.cer
File: 73A308EE05C4F2E10A0E3EE801B45E394B133268.cer (raw, json)
Hash identifier: 91mo6RXNvWf6mh0+oiyRc+zQ9xgG5xCUxLtRJHS9Psc=
Subject key identifier: 73:A3:08:EE:05:C4:F2:E1:0A:0E:3E:E8:01:B4:5E:39:4B:13:32:68
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 66BA498D690D6FD12F0E34096D48D066EE3A57E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/73A308EE05C4F2E10A0E3EE801B45E394B133268.mft
caRepository: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 03 Sep 2024 19:34:37 +0000
Certificate not after: Tue 02 Sep 2025 19:39:37 +0000
Subordinate resources: AS: 271297
IP: 45.229.136.0/24
IP: 192.231.175.0/24
IP: 2804:794c::/32
Validation: Failed, certificate revoked on Mon 23 Sep 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ba:49:8d:69:0d:6f:d1:2f:0e:34:09:6d:48:d0:66:ee:3a:57:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 3 19:34:37 2024 GMT
Not After : Sep 2 19:39:37 2025 GMT
Subject: CN=73A308EE05C4F2E10A0E3EE801B45E394B133268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:e6:27:37:e8:27:1c:4a:29:bf:25:85:20:
56:fe:38:fb:ba:8b:f8:57:45:7e:08:83:06:47:6f:
b2:5a:82:6e:cd:3f:96:68:82:15:50:d0:9d:d9:5d:
93:5d:56:1d:82:d1:78:b5:55:cb:d1:e2:35:7e:31:
f5:e8:fc:37:0e:12:00:23:81:69:1f:b0:a9:d2:85:
62:e4:9c:d8:37:92:fb:f1:1a:8a:c6:4b:90:ed:b7:
26:61:b4:01:ac:6f:81:ee:ba:bc:c7:01:04:13:fb:
5e:06:f5:34:48:54:fe:c6:3d:4e:50:f7:e3:5f:16:
27:2e:b4:11:65:18:d6:20:c4:00:22:80:ea:10:97:
0d:3b:37:d5:9b:ad:b8:a2:8b:d8:10:08:04:67:00:
e3:14:ac:f5:03:34:ef:1e:f6:93:33:60:a0:31:17:
37:23:86:d0:9a:2a:0c:6c:42:49:67:48:16:8f:8a:
46:3e:64:bf:d2:33:19:40:74:ae:10:d4:d6:b4:0c:
a3:f6:e9:e3:70:e4:c0:f8:dc:44:4f:74:d3:10:d6:
d5:f9:96:26:8f:ac:bb:de:0a:9f:6a:c0:cc:9b:c9:
68:cb:7b:26:8d:c4:69:10:19:a3:1e:68:e5:ec:14:
3d:16:76:54:e6:32:8f:63:3d:ae:82:54:a3:21:5d:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
73:A3:08:EE:05:C4:F2:E1:0A:0E:3E:E8:01:B4:5E:39:4B:13:32:68
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/73A308EE05C4F2E10A0E3EE801B45E394B133268.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.136.0/24
192.231.175.0/24
IPv6:
2804:794c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271297
Signature Algorithm: sha256WithRSAEncryption
63:c4:45:4a:11:53:37:8e:0f:bf:f5:45:f7:bd:15:de:4e:64:
81:fb:21:f5:a9:cd:e5:2f:f5:26:77:f1:3e:87:12:2c:ac:14:
f0:84:81:81:7a:aa:d1:e5:c8:47:cf:a4:0f:00:66:ca:92:c8:
d2:c8:21:c3:f4:86:04:fd:b2:a0:47:d4:d2:e0:43:cd:94:83:
1a:2e:be:81:70:c0:8a:29:f5:a8:68:8f:ae:4e:fe:e8:78:20:
92:c6:32:61:cc:aa:1b:b4:84:3c:b0:40:a1:52:27:57:04:55:
01:55:b3:68:ff:63:0d:a2:12:b1:2d:2f:37:60:ee:b5:c5:7a:
56:ad:c1:55:00:fa:03:c0:cb:0d:75:e6:fd:9d:02:14:57:6a:
b5:af:b8:77:cf:50:f2:13:34:94:f2:4a:32:dd:11:ec:eb:f8:
a9:98:1a:ad:62:10:6c:e2:f8:5b:47:fb:c6:62:fb:99:6f:32:
27:6e:10:0b:1b:82:50:ea:a4:c5:ae:1f:a6:bd:9c:23:8b:55:
ae:de:eb:06:d0:4e:07:2e:d8:25:cc:33:d9:cf:de:33:ae:95:
2b:c9:32:b8:2d:4c:49:b7:44:3d:0e:8e:d6:9d:cb:65:14:51:
5d:5b:71:d0:d3:a4:9f:ca:d2:c3:27:1f:66:79:b2:f4:a7:ee:
fa:d9:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:47 2024 by rpki-client on console-fra.rpki-client.org