Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer
File: 8881C2C20AAAF7924613B94374865D8C137EAD42.cer (raw, json)
Hash identifier: DUtW7stvzLYndwTzsaEzBuBS8t2MfpLeSPTKKYiLJfQ=
Subject key identifier: 88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1F31BDF8C5D001938E7CE6AD575F7ED1CEF736D1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/8881C2C20AAAF7924613B94374865D8C137EAD42.mft
caRepository: rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 07:51:15 +0000
Certificate not after: Thu 03 Apr 2025 07:56:15 +0000
Subordinate resources: AS: 268729
IP: 45.171.248.0/22
IP: 2804:59d8::/32
Validation: Failed, certificate revoked on Wed 17 Jul 2024 05:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:31:bd:f8:c5:d0:01:93:8e:7c:e6:ad:57:5f:7e:d1:ce:f7:36:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 07:51:15 2024 GMT
Not After : Apr 3 07:56:15 2025 GMT
Subject: CN=8881C2C20AAAF7924613B94374865D8C137EAD42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:80:de:5b:63:c6:6d:1b:a1:ac:a7:1d:55:
eb:0b:3e:6d:4c:28:d9:58:7d:5b:5f:e9:ff:14:bd:
d3:bd:c0:23:65:35:e9:d7:f3:3c:ae:d0:8e:9e:4b:
db:0c:1b:54:c3:16:16:29:94:00:77:39:04:37:f1:
b6:5a:08:cf:69:25:73:38:94:89:52:c6:54:1b:e0:
8c:1f:3d:5a:38:3a:e0:0b:c4:ec:3d:19:14:00:f9:
13:31:12:c1:ac:42:88:1d:39:4c:c8:77:c7:dc:ab:
5a:1d:2e:85:66:a8:4d:38:c8:29:24:57:bc:18:df:
1a:c8:ba:d0:d8:33:3a:1a:40:c6:20:93:ff:5a:15:
8d:5b:47:10:e2:e9:23:0d:a8:74:e1:9c:ef:79:59:
c3:a4:d2:50:2f:a8:dc:f9:2f:ab:e4:c2:e5:a4:14:
9e:30:ba:96:cd:b5:e8:11:e9:0d:ba:1b:a8:c7:94:
03:8e:73:26:9e:de:a6:60:0d:3b:b5:dd:d0:c2:df:
05:b9:70:c4:03:0a:80:9c:56:e4:f9:09:38:67:b8:
cf:a9:37:ee:24:7e:56:bd:66:f9:75:d0:91:d8:11:
25:7b:d6:89:cd:07:05:a3:e9:72:0f:91:90:be:dc:
0d:b3:c3:88:c0:4c:d1:8f:b3:be:2f:30:e9:c2:a5:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/8881C2C20AAAF7924613B94374865D8C137EAD42.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.248.0/22
IPv6:
2804:59d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268729
Signature Algorithm: sha256WithRSAEncryption
47:b3:86:8b:40:0d:5a:eb:d9:d8:89:19:09:d6:00:76:4a:d0:
85:9c:13:9f:72:e7:4d:b3:0c:dd:4d:b6:0a:ad:55:df:2f:a1:
2f:14:19:df:8a:be:c8:e3:f4:cd:e4:6a:96:b8:c9:10:35:90:
e9:36:03:ec:cb:3d:2e:71:90:8d:86:92:76:d4:ac:88:a7:7e:
26:76:c3:6d:a1:55:17:d7:e3:f9:e7:5d:67:95:55:4c:8b:dc:
15:31:73:70:9f:cf:01:e6:03:58:b7:b1:e8:0a:45:45:2e:fb:
1e:5a:d7:2e:b9:80:4a:51:4c:bb:db:2b:89:aa:01:9a:9a:a3:
bf:a2:5c:13:38:34:c8:6d:63:ee:5d:63:8d:75:35:bd:ce:a0:
22:fa:c4:d3:ac:f1:32:ef:c6:f6:2f:f8:24:7f:d4:1b:73:61:
bf:41:b9:70:2f:f8:80:81:18:6a:25:53:ce:34:ca:c8:bc:83:
3e:7e:3b:72:8a:d8:c4:08:d2:2c:b2:30:cb:ad:9d:31:dd:d6:
73:e8:7c:a2:17:ba:5b:23:91:b7:eb:59:1f:b2:45:3c:8f:ce:
d3:d3:46:04:a9:4c:35:e9:34:e9:74:45:7a:ac:49:fb:b7:2f:
d5:ff:04:58:4f:eb:12:e9:e2:bc:27:4b:74:f0:84:20:53:e8:
ed:64:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 09:20:39 2024 by rpki-client on console-ams.rpki-client.org