Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer
File: 78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer (raw, json)
Hash identifier: KZNfIVK8rAgAirP0aKD+m4XDCPy+uEQzAkPOpX8kPNA=
Subject key identifier: 78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3BF741DB3E4C493E329BF2093846107594042518
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/78E0E3DA12B6955DA5A7545389B2671B15D7C570.mft
caRepository: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 29 Apr 2024 17:57:44 +0000
Certificate not after: Mon 28 Apr 2025 18:02:44 +0000
Subordinate resources: AS: 270305
IP: 201.216.120.0/22
IP: 2804:6a00::/32
Validation: Failed, certificate revoked on Fri 23 Aug 2024 17:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f7:41:db:3e:4c:49:3e:32:9b:f2:09:38:46:10:75:94:04:25:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 29 17:57:44 2024 GMT
Not After : Apr 28 18:02:44 2025 GMT
Subject: CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:34:37:b5:45:e8:de:e8:6a:50:1b:9c:0d:
4d:9a:4a:28:2b:b3:1d:d6:b6:ea:75:a2:87:d6:80:
7d:e6:4a:f6:d8:a3:ff:c9:ae:7b:61:25:b2:3b:7a:
25:aa:5c:8d:04:1d:0c:ec:79:5c:bb:e3:1b:a5:15:
c8:7e:68:59:1b:ed:bc:37:01:d1:9f:21:f7:c2:81:
2b:61:33:a5:63:d4:94:83:c7:64:6e:68:c9:03:96:
c3:ed:75:e7:39:fc:98:76:9b:c4:c6:a4:14:fc:d4:
9d:3e:2a:f5:30:14:fa:5d:34:00:dc:ca:04:09:6a:
76:49:1f:3a:96:b4:57:b4:47:68:4a:e8:bd:15:ff:
54:0f:d1:6e:7e:b1:60:6e:7f:85:f7:e6:30:f1:79:
25:9f:8a:24:7f:d4:9d:ee:b5:c1:58:56:d0:f0:cc:
4e:07:6e:b7:56:17:ad:3b:7a:c1:5f:3a:05:32:d1:
8d:74:82:76:ae:e1:1f:b1:4e:cd:49:e2:88:a4:ff:
54:98:88:72:c6:38:6f:57:67:b9:6e:5b:ea:90:c6:
cf:5d:0c:07:11:51:ca:08:1b:5b:10:e2:01:a7:9c:
f4:ff:84:0c:e0:79:41:4e:1e:32:2b:c9:33:c5:dc:
c1:70:97:34:98:de:e0:d0:12:4b:c6:53:7c:06:c5:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/78E0E3DA12B6955DA5A7545389B2671B15D7C570.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.120.0/22
IPv6:
2804:6a00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270305
Signature Algorithm: sha256WithRSAEncryption
da:31:13:5b:a2:33:ea:9a:9b:fd:68:8a:7a:70:e7:52:ac:a9:
6e:9a:6d:79:3d:49:88:9c:cf:3b:14:ab:ed:bb:64:04:32:87:
56:e0:2f:bc:01:82:c5:f5:58:07:87:a7:19:18:f6:05:eb:6b:
ab:ea:85:7d:07:d0:ca:75:10:ae:fb:b4:2b:41:ab:1c:db:62:
33:1b:b2:c3:5d:fa:d2:a1:99:95:8c:7e:ba:ab:db:2b:87:9a:
8d:e0:ed:a6:03:ce:83:44:c1:23:fb:5d:2f:26:23:58:cf:93:
14:b8:8a:cb:6c:ed:89:1e:71:19:13:de:f9:14:4d:a9:66:67:
f0:c7:b9:43:48:90:ec:d7:7b:ac:78:23:5f:78:81:b0:4e:2e:
4a:da:96:70:e3:a2:5d:0e:37:be:bf:c2:36:aa:5d:62:26:e7:
39:1f:58:1b:86:aa:45:00:1b:12:37:b7:53:a5:2e:20:f2:83:
6c:6e:0f:1e:8d:8e:bc:60:d7:ef:0f:97:9b:c4:c4:ad:dc:94:
bb:4c:bc:ed:e0:28:63:2a:e7:cf:90:82:1f:f7:3d:24:25:11:
c4:d5:19:8a:1d:82:79:c6:28:ae:39:93:b1:5e:5b:a8:21:73:
2f:7d:a6:a0:8c:e3:f2:36:d5:b3:2d:56:e6:51:c5:99:b8:a1:
51:df:d9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 19:24:21 2024 by rpki-client on console-fra.rpki-client.org