Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8BA2AF2D0D52ED0975B013A8619531175EA4B275.cer
File: 8BA2AF2D0D52ED0975B013A8619531175EA4B275.cer (raw, json)
Hash identifier: g5rgwo1thI1aivZzvX7H5fgb5ivRVG5YKBZWHmc/MZ0=
Subject key identifier: 8B:A2:AF:2D:0D:52:ED:09:75:B0:13:A8:61:95:31:17:5E:A4:B2:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 23B93BB447B87DF5FCB10EB5D3CAD4B4B614B376
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/8BA2AF2D0D52ED0975B013A8619531175EA4B275.mft
caRepository: rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 23:19:49 +0000
Certificate not after: Wed 02 Apr 2025 23:24:49 +0000
Subordinate resources: AS: 264511
IP: 132.255.192.0/22
IP: 2804:20bc::/32
Validation: Failed, certificate revoked on Sun 12 May 2024 22:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b9:3b:b4:47:b8:7d:f5:fc:b1:0e:b5:d3:ca:d4:b4:b6:14:b3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 23:19:49 2024 GMT
Not After : Apr 2 23:24:49 2025 GMT
Subject: CN=8BA2AF2D0D52ED0975B013A8619531175EA4B275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:fe:51:c8:a0:57:9a:30:b0:f7:d0:24:c8:
eb:18:4b:1e:01:07:f8:74:89:08:92:28:ab:ca:a1:
bc:57:01:95:4c:5b:3b:c1:f6:0d:19:44:f5:2d:78:
ad:3c:0f:0c:1b:61:ea:46:dc:7e:3a:b6:9f:e8:26:
ba:ce:cb:48:f2:e3:d1:96:27:12:1b:ab:5b:97:c7:
99:b0:b5:6a:fd:22:21:08:8f:0a:33:65:b9:25:4d:
cf:46:cc:86:5a:16:40:90:76:e4:54:26:f3:da:80:
1f:c8:d6:40:21:f6:88:35:34:a3:ab:8b:a1:b2:f1:
57:59:b5:a1:3a:0d:dc:5e:3f:73:61:83:cc:04:65:
37:38:ad:9a:e5:25:28:28:1f:e6:9b:ed:e3:af:21:
e2:b5:65:3d:72:3d:81:ae:ba:3a:5a:28:5d:4d:86:
38:7f:9a:84:be:e7:81:60:c1:14:f6:9e:51:d1:e5:
5c:ea:4e:fc:0c:6a:07:94:16:cd:f7:07:2b:a6:e9:
38:e4:47:ad:03:ce:2a:a4:ec:08:dd:fb:86:4c:30:
74:99:d3:77:37:f7:98:7f:ad:6a:67:3b:27:20:1b:
d6:bd:77:f1:bc:3e:ca:c2:3e:ee:dd:64:08:90:db:
9f:28:21:bc:eb:91:d5:1e:ad:f0:b3:75:84:66:30:
94:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8B:A2:AF:2D:0D:52:ED:09:75:B0:13:A8:61:95:31:17:5E:A4:B2:75
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/8BA2AF2D0D52ED0975B013A8619531175EA4B275.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.192.0/22
IPv6:
2804:20bc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264511
Signature Algorithm: sha256WithRSAEncryption
a4:e9:3d:7f:de:ea:91:4a:80:4c:bc:05:10:1c:dd:6a:71:37:
d4:7f:92:8a:93:72:a0:40:05:58:89:ae:76:e5:8d:ea:cf:f5:
80:79:58:f7:e7:3a:d4:55:69:02:8f:e5:e9:7e:a9:24:f3:9b:
76:df:76:7e:2e:2d:d1:7c:7e:05:d7:98:17:c3:d7:61:b1:87:
cb:82:c1:ae:a1:93:7e:9f:8b:4e:57:f0:61:3a:f9:7c:20:fc:
a4:bd:b0:77:eb:d0:0b:d1:33:52:01:9e:92:91:f8:07:4e:ef:
ad:e9:50:9a:c7:f5:d3:62:03:0c:82:bc:3c:b2:da:8c:3b:e5:
ce:ea:82:a3:cc:ce:f0:73:30:77:f7:67:9c:50:ea:d5:19:0f:
9a:56:c2:05:03:0b:d9:d0:1d:e4:12:7a:03:9f:c5:a2:a5:13:
29:06:34:85:e7:ee:19:ed:5b:76:b5:6f:78:49:08:9e:c4:cb:
ee:17:f7:f9:2c:18:5b:4f:74:d2:05:c5:d0:3d:ae:3c:f9:0f:
de:9e:4e:c3:60:b8:ac:27:9c:8a:24:e9:1d:6b:9c:09:1a:45:
e3:ca:90:a7:4a:1a:7d:9e:ba:03:f6:fc:88:3f:7c:97:da:55:
19:82:0b:b8:c8:d4:9f:4d:fe:aa:82:bc:8c:77:77:bf:c3:c7:
46:85:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org