Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer
File: 8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer (raw, json)
Hash identifier: 7KzFAaxjusa3tW9HcfH1dQXkZWmMUIlcLyEaOCTtLt8=
Subject key identifier: 8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 18EF4C4051B6A5E5376313A0972E084D1D4D16B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.mft
caRepository: rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 23 Sep 2024 13:27:26 +0000
Certificate not after: Mon 22 Sep 2025 13:32:26 +0000
Subordinate resources: AS: 268663
IP: 45.165.12.0/22
IP: 2804:54a8::/32
Validation: Failed, certificate revoked on Thu 24 Oct 2024 17:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ef:4c:40:51:b6:a5:e5:37:63:13:a0:97:2e:08:4d:1d:4d:16:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 23 13:27:26 2024 GMT
Not After : Sep 22 13:32:26 2025 GMT
Subject: CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:a5:4c:67:07:a5:3c:b5:bf:ff:ee:4b:46:
bd:6b:98:64:75:1b:9f:a5:8a:bb:d9:af:c8:bc:47:
73:c9:5d:07:ec:03:70:ab:ad:5d:d5:7e:26:85:b4:
d4:e5:e3:e4:e4:b2:e1:20:5f:b6:76:f2:05:e0:2c:
e4:5c:03:10:2a:d0:9b:ee:52:bf:9f:46:9c:fc:b8:
55:1e:06:e2:3f:54:33:cb:30:74:4a:c5:ff:20:30:
1e:ea:36:af:88:b3:b1:c7:46:de:5b:6d:2c:d6:ad:
d4:61:fc:e3:26:36:1d:70:2e:af:eb:b9:2f:59:9c:
51:21:c3:9f:5c:ee:a5:e1:87:bf:25:d3:a7:2d:df:
c6:a3:73:4e:0c:d5:ac:3c:f2:ec:27:f1:76:20:04:
56:9c:f1:bf:65:42:ee:fe:be:61:c1:19:d9:6e:36:
38:72:84:53:10:3a:93:54:72:8a:79:65:dd:79:1e:
b6:b1:f3:59:95:ab:4c:9d:1d:32:92:d1:d7:3f:36:
6c:b9:8c:ba:4c:ab:b9:bc:fc:03:ad:7d:c2:4b:74:
4e:47:2d:f7:5b:8c:50:70:5d:c7:e3:17:6c:be:88:
b9:39:52:96:6b:1b:dd:5c:ab:ca:b7:81:27:83:b8:
6f:5f:96:0d:e4:ed:07:9a:b4:f9:90:92:20:8c:e1:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.12.0/22
IPv6:
2804:54a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268663
Signature Algorithm: sha256WithRSAEncryption
75:7b:48:37:b8:81:71:29:3a:41:52:33:59:18:94:af:cb:3f:
55:e3:17:79:61:77:d0:f1:98:68:7f:19:13:0f:91:25:2a:7f:
9b:a6:38:d5:51:81:f9:7d:6d:7d:e4:66:9f:23:a5:81:fe:1e:
1f:01:89:aa:77:09:5d:a7:ee:77:4c:4e:18:44:c6:1f:b3:3a:
af:aa:72:e7:49:7d:72:ed:40:27:ea:e7:87:33:39:89:16:ba:
1c:7c:67:42:fd:44:bd:f8:cf:d5:1a:02:d0:8a:f8:57:ea:31:
d0:d3:ea:6a:ce:d1:5e:a0:7b:d0:62:05:d7:55:39:5d:6a:7e:
ab:fd:e1:c4:91:f1:5e:42:93:47:74:da:39:7e:ba:05:72:60:
5b:53:a4:93:a8:7c:46:a7:ae:53:50:96:14:aa:ea:a7:14:88:
47:21:4f:dc:c9:53:d0:06:3b:5b:6e:5d:6e:13:dd:1e:1e:e9:
f0:d8:50:c7:2b:fe:85:64:73:37:2c:b6:ed:00:8c:53:42:7f:
cf:e2:4d:54:e2:fa:2b:97:19:24:d6:3a:7e:6c:f8:0b:33:dd:
f7:fb:ee:42:bd:53:84:fa:ec:70:57:58:72:ba:5c:1f:29:e5:
d7:2a:0f:6e:e6:8d:68:85:12:e1:77:0a:28:25:42:16:c2:00:
9b:88:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 22:21:53 2024 by rpki-client on console-ams.rpki-client.org