Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.cer
File: 8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.cer (raw, json)
Hash identifier: Bq4cS6YzvPbN+lFwPJqVwY+dKO3zVLpQkso+8HBBil0=
Subject key identifier: 8D:DB:FF:58:C2:53:E3:91:0A:8A:F8:D2:0D:2B:93:EF:9D:0E:75:4F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7E24AA1EBD67CDDDD43207505C07E82D38C1BE70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.mft
caRepository: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 22 Oct 2024 11:00:06 +0000
Certificate not after: Tue 21 Oct 2025 11:05:06 +0000
Subordinate resources: AS: 263252
IP: 168.197.228.0/22
IP: 189.201.232.0/21
IP: 2804:17cc::/32
Validation: Failed, certificate revoked on Tue 05 Nov 2024 13:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:24:aa:1e:bd:67:cd:dd:d4:32:07:50:5c:07:e8:2d:38:c1:be:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 22 11:00:06 2024 GMT
Not After : Oct 21 11:05:06 2025 GMT
Subject: CN=8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:bb:57:c6:63:e2:d5:da:77:a2:74:45:12:
d2:cb:be:93:b0:78:5d:0a:03:91:d9:f7:31:12:ec:
84:ce:64:55:57:62:72:4f:69:ec:04:3a:b4:0c:be:
01:d3:fe:94:9d:6c:58:09:48:f7:5a:fe:13:4e:cc:
5d:29:ac:d1:2c:e4:76:1a:1b:9a:65:ab:08:2c:c0:
64:e9:76:b4:a2:6e:9c:f8:62:8f:b4:86:84:17:f2:
da:e2:73:95:56:6b:7c:de:d8:30:39:d3:37:dd:e6:
0e:de:59:dd:19:57:08:26:57:80:45:d2:f8:4f:56:
d8:61:a0:7b:b7:4b:67:06:d6:7d:ef:17:1c:21:ad:
28:23:4f:40:8b:5b:b9:c7:de:17:ee:fe:d2:7e:42:
b7:49:40:2f:5a:3c:bd:4f:1d:75:50:52:62:19:74:
f6:a3:2a:d9:9c:8b:71:d9:f8:6a:db:4f:e8:7b:aa:
1b:f5:70:e4:bb:5f:9a:2e:91:55:09:76:7d:33:f8:
e7:8a:38:64:56:4b:70:50:2c:3d:88:76:66:ca:96:
28:94:27:93:9e:a1:af:31:1f:60:98:e7:f7:a6:22:
88:3f:f9:35:b4:b9:f3:26:e7:ca:70:b3:fb:3c:87:
7f:80:ca:01:d4:62:25:00:70:16:cc:a6:3e:10:13:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8D:DB:FF:58:C2:53:E3:91:0A:8A:F8:D2:0D:2B:93:EF:9D:0E:75:4F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.228.0/22
189.201.232.0/21
IPv6:
2804:17cc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263252
Signature Algorithm: sha256WithRSAEncryption
cf:83:2f:38:d4:14:57:a5:82:b7:c7:2f:8a:02:5d:a4:61:90:
9a:d5:f3:83:73:42:aa:51:4a:f0:af:15:08:5c:a5:a7:3c:c7:
b1:25:86:99:1c:44:84:99:1b:ea:11:51:c6:99:49:3f:ab:36:
b6:9a:b6:51:0c:b5:3d:78:81:fe:6d:f4:2b:fb:bc:a2:a8:d0:
28:20:c2:cb:2f:5e:20:69:92:aa:13:02:60:79:9c:ce:47:46:
d6:0a:b1:4e:78:13:e7:27:04:1f:2b:f7:9b:ac:d4:8f:14:94:
44:24:cf:e4:60:e4:39:e2:7b:4c:f5:9e:f8:25:61:13:fa:66:
88:08:6e:34:fa:d5:52:aa:2c:9e:6f:b4:59:06:02:e6:c7:ac:
26:be:fa:6d:93:72:09:08:42:89:f2:ae:78:98:85:25:af:d1:
7c:e7:b3:ec:b8:c7:fc:60:e0:de:da:8f:0f:54:cd:21:64:a7:
6c:fb:39:a1:59:8f:42:64:95:fe:c9:1e:cb:55:05:c4:31:89:
7b:bd:7c:ce:5f:98:18:43:c7:63:65:d5:b1:e7:94:7f:40:fd:
fb:37:c0:b3:48:fc:39:ff:5d:7b:12:b2:14:7d:cb:d0:9a:90:
79:52:b1:76:fb:5b:7e:3d:fe:b5:c0:4a:d9:e1:fa:90:c7:dc:
c9:ef:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:33 2024 by rpki-client on console-fra.rpki-client.org