Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer
File: 9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer (raw, json)
Hash identifier: JfrbORagAp0sGJYs5WHnE1fZKqw8jM/NDJfzfYMZCTQ=
Subject key identifier: 93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 696D35B376D3D788526C22F4CA80C2E8612D7634
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.mft
caRepository: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 10 Sep 2024 18:07:50 +0000
Certificate not after: Tue 09 Sep 2025 18:12:50 +0000
Subordinate resources: AS: 262725
IP: 186.192.0.0/20
IP: 186.235.64.0/20
IP: 2804:3360::/32
Validation: Failed, certificate revoked on Tue 01 Oct 2024 19:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6d:35:b3:76:d3:d7:88:52:6c:22:f4:ca:80:c2:e8:61:2d:76:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 10 18:07:50 2024 GMT
Not After : Sep 9 18:12:50 2025 GMT
Subject: CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:24:da:bd:6f:4f:41:af:c1:e3:06:27:36:
5a:4c:52:0c:44:df:05:16:0a:33:e6:8a:bf:23:64:
e0:57:0e:37:53:f6:21:98:68:c8:d3:4e:84:93:bf:
03:14:58:d1:ee:f3:53:e0:63:74:66:d6:ba:ba:89:
5d:fb:a0:d9:26:86:dc:09:38:52:a3:03:02:18:dd:
15:e9:99:a8:a1:52:90:ab:ec:4e:14:b2:90:1d:0f:
f8:e3:c1:8c:e7:2b:79:d2:6c:5a:28:17:ec:05:bc:
84:b3:1a:0e:37:89:66:a2:bb:46:f1:33:d0:c8:dc:
88:43:c1:41:29:d0:67:ee:2c:51:d3:b2:f3:e3:f0:
04:bb:31:4c:7d:e9:51:6d:a7:59:fc:68:b2:ea:1c:
28:c8:38:52:45:21:f9:fb:db:85:20:a7:4a:12:f0:
8f:d1:92:d8:37:21:7e:ef:f1:14:a2:c5:88:e8:9c:
92:28:d2:d4:75:f0:5d:39:e2:a2:5d:fa:2c:25:6a:
4d:10:26:8d:02:cb:c9:c6:93:00:7a:8e:b3:93:6b:
8a:46:95:37:47:50:8e:1b:8d:bf:d9:4b:56:2a:d9:
36:2b:43:34:34:c8:cf:c7:56:3d:7d:3f:a8:e9:22:
02:bc:5a:bc:d5:2c:dc:66:2c:83:ca:ac:4d:3c:fe:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.192.0.0/20
186.235.64.0/20
IPv6:
2804:3360::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262725
Signature Algorithm: sha256WithRSAEncryption
00:4f:b5:fd:08:08:4d:6b:ab:57:38:b3:fd:ac:f9:04:32:d3:
b6:4d:f5:8c:45:5c:44:25:7d:8c:28:42:66:1e:2c:46:40:81:
6e:30:3d:3f:43:12:69:1b:a8:33:a2:aa:ac:60:44:5c:18:b3:
f6:39:d2:ce:71:6f:4a:34:2b:bb:85:b4:d8:32:b4:0d:4a:bd:
ab:0f:4f:a6:34:a2:31:82:fe:f1:7a:4d:98:4b:24:57:75:12:
35:ea:a9:1a:28:63:5b:5c:12:96:ba:1d:97:68:16:41:48:38:
67:58:d1:f8:9f:08:5d:56:ee:12:e6:90:28:55:ee:89:6d:27:
f8:a1:d1:a4:d9:70:81:00:77:91:16:03:98:72:bf:ae:db:df:
37:ae:22:da:f4:38:a4:a5:c2:e8:74:ff:c4:78:0a:ef:5b:5d:
61:9d:d8:f2:69:ca:80:4c:b6:db:23:8f:cf:ce:1f:f1:a7:ac:
e7:30:72:22:9d:13:b5:6a:3e:d0:36:b8:d9:85:7d:76:5b:a0:
37:58:28:f0:60:3c:68:f4:eb:c6:b4:bf:88:71:1f:3d:c5:2c:
06:6f:74:8b:1f:18:31:95:56:d9:30:f8:15:69:30:20:db:f7:
6f:d6:b0:dd:03:42:66:ef:ec:2a:bc:5d:ee:20:17:47:f9:6c:
c3:38:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 22:05:17 2024 by rpki-client on console-ams.rpki-client.org