Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
File: 8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer (raw, json)
Hash identifier: IFZZQwl1jVXVwDagjN3gTeCJc+FqBw+Xb0xwgpMifkM=
Subject key identifier: 8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0508002944BD41F327F80109955B42A8F9112477
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.mft
caRepository: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 17 Apr 2024 11:31:57 +0000
Certificate not after: Wed 16 Apr 2025 11:36:57 +0000
Subordinate resources: AS: 273431
IP: 186.227.76.0/22
IP: 191.7.0.0/23
IP: 2804:8e84::/32
Validation: Failed, certificate revoked on Fri 05 Jul 2024 19:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:08:00:29:44:bd:41:f3:27:f8:01:09:95:5b:42:a8:f9:11:24:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 17 11:31:57 2024 GMT
Not After : Apr 16 11:36:57 2025 GMT
Subject: CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:8b:58:8d:3e:5f:54:b2:eb:93:1d:f9:86:
5e:47:85:67:09:63:3d:e8:72:7f:ef:4f:4b:d1:a8:
69:40:ac:de:ec:0e:a6:3c:fe:5c:13:eb:52:61:a5:
c0:1b:ad:2c:dd:af:92:f8:49:68:21:19:42:4c:51:
4a:4c:8b:e9:f2:05:72:fe:0b:02:be:cf:20:32:c9:
13:af:54:2c:50:dd:67:15:93:ed:76:7c:02:12:43:
6d:7e:95:61:79:15:02:d4:d9:19:1d:f5:ed:35:47:
18:fd:0c:10:48:ec:aa:bd:74:67:57:97:f7:ab:6e:
40:ee:f3:38:03:35:5e:b3:44:3a:a8:5e:05:74:89:
40:d3:be:06:a9:39:40:78:4b:c8:f0:e6:35:10:ca:
df:49:b5:8c:67:5b:14:1d:01:6f:a7:82:60:fc:2f:
c4:90:d5:f0:14:1f:e6:89:1d:c0:d8:75:f6:33:ca:
43:ef:7d:26:e0:dd:a4:62:db:0a:a0:75:8f:28:e0:
75:0a:63:cb:7f:40:4e:fe:cd:07:97:a2:5e:6d:66:
df:6c:70:0d:e6:86:26:8c:c5:80:1a:0a:fc:a4:50:
6a:ea:d6:28:a8:76:f4:f0:2d:79:00:6b:e4:30:33:
c4:81:47:cc:2f:16:f6:bd:96:1b:7e:d7:63:52:44:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.227.76.0/22
191.7.0.0/23
IPv6:
2804:8e84::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273431
Signature Algorithm: sha256WithRSAEncryption
b5:6a:a1:e1:a4:77:4f:65:82:34:c0:6a:98:39:e6:ec:21:0e:
24:e3:76:b4:8f:e6:cd:51:11:86:28:5b:98:41:6e:16:8a:c1:
85:73:32:24:55:7f:6a:8a:db:dc:47:5f:6a:d7:a9:d7:49:1f:
4a:bf:1a:2d:d5:a1:b9:f1:54:f8:1b:5f:04:0d:51:63:5d:0b:
5b:f2:47:0f:8f:c0:56:f5:5a:32:29:20:a3:2e:0f:df:1b:d1:
98:7f:82:24:30:c5:4c:02:78:ff:a3:38:d3:fe:52:ee:08:c3:
7a:b8:09:b5:6e:50:0f:74:71:3c:73:c0:ca:8d:8b:bb:1f:2b:
09:38:be:df:67:96:17:02:0c:00:ee:99:07:b8:5c:e5:a0:5d:
eb:23:1e:ac:d4:03:72:81:87:58:3a:2f:a4:24:bd:65:0a:9a:
a0:b6:28:58:b9:cb:ad:5d:25:b8:14:5a:03:fe:f9:17:bf:ee:
ba:6d:ca:f2:fd:91:c6:f4:c9:cc:2a:d7:09:60:2b:f4:4a:b2:
25:09:df:0b:3c:f7:2d:ad:56:90:4a:3c:8d:5c:34:da:10:b6:
ac:ef:43:ae:07:c2:0b:73:ac:b3:d5:11:b2:8e:8e:79:e1:5f:
b9:37:95:a9:d9:2a:66:e2:17:c8:64:06:a8:b9:36:2a:27:7d:
45:f5:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 20:35:13 2024 by rpki-client on console-fra.rpki-client.org