Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8A7E19F4616DCCE6B7D7AE1FB425E1BA4D172100.cer
File: 8A7E19F4616DCCE6B7D7AE1FB425E1BA4D172100.cer (raw, json)
Hash identifier: XdnAG++gyxUhnn6gSC934FM/gppHxuPsiONNseaBWxw=
Subject key identifier: 8A:7E:19:F4:61:6D:CC:E6:B7:D7:AE:1F:B4:25:E1:BA:4D:17:21:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 743390523C95CEE61CC0ADF85CFB0F4AF8A533B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/8A7E19F4616DCCE6B7D7AE1FB425E1BA4D172100.mft
caRepository: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 01 Aug 2024 11:42:26 +0000
Certificate not after: Thu 31 Jul 2025 11:47:26 +0000
Subordinate resources: AS: 263442
IP: 177.10.92.0/22
IP: 177.91.144.0/20
IP: 2804:11d4::/32
Validation: Failed, certificate revoked on Fri 02 Aug 2024 17:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:33:90:52:3c:95:ce:e6:1c:c0:ad:f8:5c:fb:0f:4a:f8:a5:33:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 1 11:42:26 2024 GMT
Not After : Jul 31 11:47:26 2025 GMT
Subject: CN=8A7E19F4616DCCE6B7D7AE1FB425E1BA4D172100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:02:79:de:4f:f2:10:bd:dc:e8:c8:a7:27:0d:
58:70:1e:3c:57:bb:36:b9:65:b6:0b:d2:b3:89:9f:
49:8b:81:53:96:67:cc:82:a3:57:47:78:c2:dd:ec:
f9:4f:6e:20:02:6b:01:8c:ee:2f:37:b3:ef:93:74:
ba:9d:ce:36:0c:e1:ed:48:6e:de:2b:fc:7e:33:5a:
d8:e1:45:df:35:52:91:70:d0:e4:5b:cb:5f:80:13:
da:00:7e:c3:f1:c2:3d:44:ef:70:84:fd:85:19:50:
76:d3:08:95:06:4c:20:9b:95:99:bd:34:50:4b:00:
5b:e9:d9:40:7d:a0:10:b6:05:6d:71:62:3a:62:bb:
9f:4f:05:f0:ac:d7:68:f3:dc:47:59:cd:73:5a:dd:
ae:9f:b7:f8:c4:e3:e7:6d:e3:cb:8e:bd:ae:bd:10:
d7:2a:72:8d:56:ce:39:af:af:bd:e9:f2:1c:75:8d:
87:95:0c:45:83:f4:e0:ef:cd:71:ca:74:f8:4f:0f:
a0:34:de:40:57:6e:17:05:96:36:49:63:ad:f2:53:
40:1e:79:95:a9:3b:c1:44:1b:fa:f8:54:f1:97:0f:
9b:9d:2f:94:4b:0c:eb:bd:8d:8e:bb:2c:3e:ee:e4:
40:0a:26:c2:8f:50:b1:ae:dd:bf:73:10:4e:a7:c8:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8A:7E:19:F4:61:6D:CC:E6:B7:D7:AE:1F:B4:25:E1:BA:4D:17:21:00
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/8A7E19F4616DCCE6B7D7AE1FB425E1BA4D172100.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.10.92.0/22
177.91.144.0/20
IPv6:
2804:11d4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263442
Signature Algorithm: sha256WithRSAEncryption
bc:6e:7a:fc:22:ab:c5:2d:cc:6d:81:15:f9:ec:8f:0f:3b:bc:
0e:fe:dd:00:e5:94:84:8f:f0:af:68:81:bc:1d:9f:94:b5:60:
45:cc:59:3f:0b:f0:50:2c:ee:e3:93:70:ba:72:94:59:18:79:
0b:77:ad:c7:d7:8f:cd:24:a3:d8:b4:d8:97:10:4f:65:e8:d4:
bb:4e:af:07:72:34:b8:46:48:de:c6:7f:e1:74:3a:71:b1:02:
f8:4e:c9:24:e7:28:59:a4:3c:cb:44:c5:58:c2:82:b5:8a:55:
0e:b7:88:46:53:5d:8c:79:ad:43:db:a0:11:3f:50:05:f0:53:
a1:01:ee:44:46:6f:b8:80:f7:6a:29:2e:4c:d8:e0:6c:92:8c:
10:3e:b2:a3:0d:8c:cc:20:cb:46:1c:cf:04:64:e2:55:a1:f4:
7c:84:87:ab:b8:eb:d1:15:dd:c4:74:96:45:80:88:ef:25:6a:
a4:8a:5b:38:2b:bf:85:ba:b2:cf:a7:66:40:c0:ab:c1:71:47:
a5:14:15:82:48:61:4f:eb:5d:79:0e:11:ed:6f:cb:66:93:32:
75:82:87:d9:1b:87:d1:e4:a2:eb:e8:b1:e8:47:a7:af:d3:af:
73:56:51:26:95:2e:26:12:11:27:93:b2:bf:b4:b4:ca:a8:00:
15:60:46:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 19:17:33 2024 by rpki-client on console-fra.rpki-client.org