Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
File: 8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer (raw, json)
Hash identifier: ukuYjoxJEES44RBAOE+SJEEgedTkboPtHGWCPxtRfV0=
Subject key identifier: 8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0C32454A4C8BF6BF9EC5083DFCBA178E04F0E69A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.mft
caRepository: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 05 Apr 2024 00:22:23 +0000
Certificate not after: Fri 04 Apr 2025 00:27:23 +0000
Subordinate resources: AS: 265085
IP: 170.233.24.0/22
IP: 2804:3290::/32
Validation: Failed, certificate revoked on Thu 01 Aug 2024 00:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:32:45:4a:4c:8b:f6:bf:9e:c5:08:3d:fc:ba:17:8e:04:f0:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 5 00:22:23 2024 GMT
Not After : Apr 4 00:27:23 2025 GMT
Subject: CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4b:24:af:d5:7c:e6:51:c3:5e:19:70:3f:34:
52:9f:22:13:0c:f5:53:b7:e8:71:4f:d5:71:5e:bf:
0e:58:a4:aa:d9:37:62:38:45:a0:f3:7d:d0:2f:4a:
7f:d0:78:ae:70:0b:a4:01:de:a8:4e:9f:c8:22:84:
11:20:9c:af:49:a3:a2:ec:4c:5d:00:dd:63:29:3a:
68:0f:55:bb:85:4f:a5:62:21:6d:c9:17:59:b5:d7:
4f:55:2a:be:64:61:58:7f:0c:0f:87:29:f7:7e:01:
b2:74:40:6e:b6:a0:b4:3a:e3:cb:97:22:a3:1e:81:
58:b2:28:b9:7f:be:70:6b:3b:34:27:ff:4e:c7:ff:
51:b4:51:99:38:7e:81:f9:5e:bf:85:69:8f:3e:b6:
db:4f:3a:ff:c5:96:7d:c7:d7:35:bf:79:d7:15:c9:
6e:1d:10:17:2e:24:e7:62:e2:9c:b0:40:71:81:3e:
4d:58:cf:70:79:26:22:4a:ce:76:6d:01:48:6f:a0:
fd:5a:14:17:3c:f6:51:13:77:5a:4c:eb:98:e6:2c:
80:6c:3e:fb:dd:7e:7a:a1:7f:4c:67:dd:22:14:ea:
d8:d6:24:fc:9a:c9:1a:58:33:54:9b:24:8c:bc:71:
a2:31:d7:15:b6:92:0e:df:60:8e:1d:7e:99:f1:12:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.24.0/22
IPv6:
2804:3290::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265085
Signature Algorithm: sha256WithRSAEncryption
c5:1b:bb:0d:c6:e6:db:8e:62:e3:f6:f0:7a:07:f6:7d:3a:bd:
6c:3e:d4:ed:39:c7:2a:a3:8f:9e:cf:72:5e:0c:63:a9:f7:16:
ac:e0:7c:93:8e:a3:72:ac:5d:a7:e0:32:d3:ab:e5:5d:ce:4f:
25:cd:11:44:be:23:dd:06:23:c8:f8:0d:2b:4a:ad:89:3c:4f:
f8:cc:7f:75:ef:0f:da:f5:a7:b5:bf:aa:9c:65:75:02:eb:ee:
03:6c:07:ba:7a:79:42:62:67:42:e8:42:27:0f:38:2d:de:89:
4d:e4:d1:1e:d6:fa:cf:be:1a:37:b1:ca:7d:07:55:87:5b:53:
8e:ff:f2:b8:7f:c9:3f:4a:a6:92:f7:6f:50:1f:e9:fa:ea:04:
dd:80:44:5f:0a:ff:d7:c9:70:55:78:57:37:dd:26:d5:bf:94:
e0:d3:f7:37:c7:c0:39:97:f6:9a:6e:4a:03:a2:3c:6a:a7:b7:
4f:6b:c8:59:2e:3e:8f:d7:9c:c4:9d:8f:34:9e:c0:6b:dd:48:
01:e9:ef:9a:59:aa:18:00:fd:e2:9d:c8:06:2e:33:53:dd:fb:
4b:d5:41:d9:b2:c6:ed:72:59:88:5a:9e:95:cc:92:88:3a:b3:
04:60:c8:5f:25:9a:36:a2:b2:32:0d:db:a7:91:51:da:b9:eb:
3f:ba:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 04:13:05 2024 by rpki-client on console-fra.rpki-client.org