Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.cer
File: 897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.cer (raw, json)
Hash identifier: 30zf5RpmP0FRVz2fE5ePKljJGCLjl5G66Le+DTbL6Io=
Subject key identifier: 89:7E:CA:82:75:DA:E7:F1:0E:15:E0:E1:F8:9E:32:34:CA:A5:C6:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1744C3CD8D13F8B23F76BE50B9B6C5E246B9284B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.mft
caRepository: rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 08 Aug 2024 13:05:02 +0000
Certificate not after: Thu 07 Aug 2025 13:10:02 +0000
Subordinate resources: AS: 268924
IP: 45.176.0.0/22
IP: 2804:5cb0::/32
Validation: Failed, certificate revoked on Wed 06 Nov 2024 08:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:44:c3:cd:8d:13:f8:b2:3f:76:be:50:b9:b6:c5:e2:46:b9:28:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 8 13:05:02 2024 GMT
Not After : Aug 7 13:10:02 2025 GMT
Subject: CN=897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:55:f3:6f:f1:2e:ce:c5:d7:6a:2e:47:30:
89:63:de:88:8b:33:c8:e6:9f:b0:bc:b9:77:44:66:
c9:f3:97:9b:92:ba:60:80:79:15:e3:ff:ec:77:0d:
52:26:1b:21:52:64:5f:15:2a:01:ab:e9:52:a0:c5:
80:e6:2f:ad:18:f2:b1:1f:3e:1c:88:ac:c0:35:ed:
02:6e:82:39:d0:0c:0b:04:22:26:48:18:8e:c5:30:
eb:8b:cd:5a:5e:28:0b:e5:bb:82:91:5d:23:1b:10:
e7:a4:ff:68:43:66:52:f3:48:82:a1:6b:7c:b8:10:
e0:82:64:d6:6e:57:72:20:e1:72:d6:15:97:73:59:
b5:93:d9:2e:a4:81:3e:6c:38:15:11:03:8b:7f:fe:
12:c6:90:17:88:4d:1e:5e:fa:2c:5d:6b:e0:f0:e9:
85:7a:e2:a3:0e:bb:91:48:a5:54:af:32:32:19:43:
ec:c2:7d:e1:af:52:fc:ed:18:28:5b:f5:20:84:ac:
75:38:fb:31:a4:4c:14:5f:a8:6c:b4:6f:a8:94:6f:
a9:dc:8d:89:26:d1:63:9a:35:7d:3a:30:38:62:01:
b7:44:06:f2:a8:4b:8c:f9:fa:e2:72:74:da:1a:c3:
fd:3b:49:f9:01:40:f6:fd:12:fb:83:1c:91:72:ca:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
89:7E:CA:82:75:DA:E7:F1:0E:15:E0:E1:F8:9E:32:34:CA:A5:C6:E1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.0.0/22
IPv6:
2804:5cb0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268924
Signature Algorithm: sha256WithRSAEncryption
64:33:68:17:94:33:80:26:c5:33:46:2e:99:10:2e:c6:c5:e4:
d4:3b:d3:a8:0b:f0:2b:35:bd:03:59:0b:99:dc:c4:33:d7:da:
6f:f4:e5:ab:1d:63:30:84:13:c9:4a:a7:03:2b:e0:cd:14:9e:
5a:fa:d4:bb:83:3a:97:69:b8:18:bf:ab:21:23:03:38:ce:3d:
2f:9c:bd:0d:e6:5b:2b:a7:48:b0:50:3b:fe:b3:c1:5a:08:1f:
a6:77:de:a2:0b:63:ab:28:86:50:bd:dc:8f:3e:45:59:71:5a:
d0:0c:0b:fb:8d:7e:f1:11:c6:7f:81:c5:8f:69:ec:e8:d9:29:
a2:a6:16:6c:37:ef:89:69:55:66:55:bf:77:a0:e3:37:69:ac:
ad:86:e4:ae:e0:fc:55:0e:72:fb:9c:d7:ec:14:a5:bd:96:93:
18:f7:85:af:4c:b8:77:54:0a:55:6c:39:8f:b3:8d:04:16:e2:
ac:8b:d6:7f:3f:8f:a7:28:70:b0:98:d8:cb:5b:a2:73:02:ea:
37:f8:1a:04:f0:9d:98:6a:8d:6b:f9:9d:3e:39:73:7f:37:c5:
a8:fd:b2:99:c0:a7:c6:72:57:f8:59:4d:0c:48:f7:26:d0:3c:
c3:e6:1c:de:20:a7:7f:d0:50:c8:38:65:83:e5:84:27:b4:ff:
aa:f5:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 10:44:27 2024 by rpki-client on console-ams.rpki-client.org