Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/78A3D869517C444C3929B262B37CA69DD8662483.cer
File: 78A3D869517C444C3929B262B37CA69DD8662483.cer (raw, json)
Hash identifier: 3bFm45mCcjmXCi/HcBXcqucyH3R+Lxg5to741IUYvrw=
Subject key identifier: 78:A3:D8:69:51:7C:44:4C:39:29:B2:62:B3:7C:A6:9D:D8:66:24:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5EA923F632BD0C7CCA515E0E805D7E904D803FAB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/78A3D869517C444C3929B262B37CA69DD8662483.mft
caRepository: rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 27 May 2024 15:31:28 +0000
Certificate not after: Mon 26 May 2025 15:36:28 +0000
Subordinate resources: AS: 52878
IP: 170.239.0.0/22
IP: 186.232.200.0/21
IP: 2804:93c::/32
Validation: Failed, certificate revoked on Sun 02 Jun 2024 13:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a9:23:f6:32:bd:0c:7c:ca:51:5e:0e:80:5d:7e:90:4d:80:3f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 27 15:31:28 2024 GMT
Not After : May 26 15:36:28 2025 GMT
Subject: CN=78A3D869517C444C3929B262B37CA69DD8662483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:b8:c6:1d:b0:7f:e3:94:76:3a:56:6b:ab:
42:81:03:64:11:46:6f:ff:67:50:55:05:1a:5c:86:
b1:0a:da:d4:40:27:51:2c:ab:3c:a0:1a:95:24:c3:
b7:35:99:18:56:c9:86:0e:ba:66:29:26:c0:f3:6b:
83:fe:8b:5b:03:e9:ae:61:45:88:74:ca:52:b9:c7:
4c:ec:45:a5:40:ea:d9:63:c4:9e:41:42:33:fc:90:
af:cf:81:f7:d0:c4:5d:93:67:57:80:9f:ed:6a:7c:
9f:f7:9e:4e:27:df:0f:21:1c:c5:f3:97:79:22:10:
a4:8d:d2:49:09:ac:7e:a4:84:60:a9:cb:86:49:98:
cb:33:5b:aa:de:2b:b4:7c:92:3b:b0:01:fc:eb:10:
25:e5:05:71:bb:57:e0:e7:f1:1c:3d:43:9b:fa:2d:
fa:29:7a:86:75:1c:b9:29:59:b2:59:e9:9d:7c:cf:
4e:d3:49:0a:1c:87:8b:27:73:9b:a2:8d:a3:73:4d:
28:4e:7d:e4:09:e3:0b:6b:1b:3c:31:bf:e9:cf:31:
c5:0d:d2:99:c5:d2:ca:5b:56:1c:c4:98:8b:8e:47:
b9:f8:c9:e4:62:f1:16:ba:a7:75:9a:ae:80:08:27:
b8:f1:15:2d:5f:53:5d:62:7a:46:7b:2a:ff:3b:c4:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
78:A3:D8:69:51:7C:44:4C:39:29:B2:62:B3:7C:A6:9D:D8:66:24:83
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/78A3D869517C444C3929B262B37CA69DD8662483.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.0.0/22
186.232.200.0/21
IPv6:
2804:93c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52878
Signature Algorithm: sha256WithRSAEncryption
94:f8:26:48:5c:04:6e:4f:73:19:2b:a5:29:45:aa:8b:7f:4b:
99:d2:b8:64:f3:e1:03:0d:a4:6a:be:1a:c9:89:df:b8:19:b5:
95:ca:4f:5f:9d:94:c2:4c:7a:e1:16:d1:0f:20:3e:bb:c9:3d:
b0:7f:9c:ef:b9:f8:3f:44:06:e0:37:bb:47:34:93:33:72:be:
96:b0:66:a7:53:82:a3:1c:4b:08:8a:ef:9a:b4:3b:98:0b:30:
37:7f:71:1a:be:bc:c6:a4:d0:4d:29:13:4c:20:b5:03:aa:21:
d5:19:e6:42:8f:11:f2:b9:96:2a:76:e3:70:ba:81:5d:f5:f5:
86:72:dc:7e:0f:87:d2:de:e5:b1:bd:38:31:65:c2:92:45:d4:
0c:5c:65:cc:46:5c:f4:94:1d:19:34:08:13:4e:51:20:10:e9:
39:28:e9:75:46:a5:eb:c7:47:66:45:53:37:ba:18:7d:77:93:
8a:eb:9f:57:50:ae:92:94:83:64:7d:b0:7a:e8:86:67:a3:52:
a9:a0:a3:dd:ba:5e:79:87:e5:3d:2b:be:0d:0c:77:b1:d1:0d:
4f:d8:78:10:86:67:9e:0d:08:a4:cb:0f:b3:f7:cd:90:f4:b0:
17:b7:22:25:cc:b7:77:bb:d6:6e:ad:e6:1f:9d:8c:9a:24:eb:
76:3d:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org