Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8932ACC1911E393FFC9CEB81881A0D18DE307D35.cer
File: 8932ACC1911E393FFC9CEB81881A0D18DE307D35.cer (raw, json)
Hash identifier: 71SucYgpnZDfwX6WpKPPMEFfDI66KvC9aV8P30lHNBQ=
Subject key identifier: 89:32:AC:C1:91:1E:39:3F:FC:9C:EB:81:88:1A:0D:18:DE:30:7D:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5F42B74D7B40FEC9FF94A849BCCCCE2007F8D469
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/8932ACC1911E393FFC9CEB81881A0D18DE307D35.mft
caRepository: rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 22 May 2024 11:20:19 +0000
Certificate not after: Wed 21 May 2025 11:25:19 +0000
Subordinate resources: AS: 28205
IP: 187.85.224.0/19
IP: 189.91.128.0/20
Validation: Failed, certificate revoked on Tue 04 Jun 2024 04:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:42:b7:4d:7b:40:fe:c9:ff:94:a8:49:bc:cc:ce:20:07:f8:d4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 22 11:20:19 2024 GMT
Not After : May 21 11:25:19 2025 GMT
Subject: CN=8932ACC1911E393FFC9CEB81881A0D18DE307D35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:e4:f6:80:be:66:2d:9b:b4:50:4b:27:25:
f0:e6:ee:cd:d3:f7:a5:fe:46:92:c2:bd:84:e1:0d:
30:a6:44:7f:e1:88:4a:7e:0b:0b:10:14:8b:4f:ee:
31:dd:95:33:5f:7d:20:04:2e:35:54:75:24:7a:a3:
0f:14:36:d2:bf:40:59:db:b4:97:4c:5d:73:50:1b:
bc:d8:7f:5d:6a:c8:41:cc:4d:a9:c0:16:bf:1e:65:
24:b4:d9:f5:3d:92:4c:88:6a:57:7d:03:1f:9f:d0:
76:d8:5a:a9:3a:0b:c3:ab:e2:e3:a5:90:f8:2a:c2:
5a:de:14:bc:44:be:83:4f:39:05:f4:c6:ff:ac:8b:
34:6d:af:13:08:91:20:be:20:82:f4:5e:9e:fe:83:
98:69:8a:ff:a1:a2:d5:50:00:41:0b:0c:a1:a7:6c:
9b:dc:37:b3:75:f8:6e:68:0b:61:59:40:16:00:c4:
51:67:71:0e:b9:87:b9:a3:0a:fa:f2:58:8d:3c:15:
33:f3:83:a4:fc:c5:63:43:74:60:40:e5:66:1c:aa:
b0:77:af:0f:27:98:ad:13:61:49:5b:91:7e:20:c0:
d0:ed:c7:38:40:6a:24:01:b8:7a:27:c3:f1:9b:43:
bf:20:91:84:9a:b3:21:30:c2:13:c4:30:8d:ea:4f:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
89:32:AC:C1:91:1E:39:3F:FC:9C:EB:81:88:1A:0D:18:DE:30:7D:35
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/8932ACC1911E393FFC9CEB81881A0D18DE307D35.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.85.224.0/19
189.91.128.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28205
Signature Algorithm: sha256WithRSAEncryption
40:5e:31:bf:9f:da:d3:19:19:d4:32:ff:d9:b7:f1:4e:18:ef:
60:a9:96:d2:0a:50:bc:12:7d:c7:c8:b5:6f:1e:35:b8:44:85:
81:1d:11:3d:1f:b7:0d:54:9c:20:ea:50:e4:4e:32:09:39:e1:
a3:ba:b6:67:d9:34:65:18:b9:fc:bc:42:27:38:f2:4d:39:d2:
fb:ca:6e:7b:2d:f6:d0:10:ab:07:c5:38:2b:23:32:14:33:75:
c3:d3:54:7f:12:9b:95:ad:39:f4:33:73:bf:d1:11:cf:5c:1e:
44:ea:73:a0:d8:bf:95:51:2c:01:93:30:a1:49:91:d6:b6:df:
84:df:16:8c:36:9b:7b:fb:b5:64:ee:8e:58:86:cd:58:e7:f5:
6f:5c:b5:f6:8c:53:c7:fa:93:40:e3:35:8c:23:78:ad:19:9d:
4d:eb:b0:69:30:77:03:ea:9c:49:1a:27:fb:f1:9e:43:ce:c2:
3a:75:31:b0:c7:a5:5a:f3:75:cb:7c:91:f0:ae:b9:9e:00:79:
46:fc:03:e0:be:3b:4d:30:d1:88:86:22:d9:57:d9:e1:04:09:
56:f4:3d:83:bf:f6:a5:81:89:83:fc:89:84:a0:a0:7f:bd:f5:
0b:e2:15:fa:62:1b:c4:4e:71:32:3d:06:63:9c:e4:60:d4:bc:
f8:33:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org