Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9599D6E8C704E2A5F423FC8C639E17E2E032C535.cer
File: 9599D6E8C704E2A5F423FC8C639E17E2E032C535.cer (raw, json)
Hash identifier: zXYSKp7Ss2UWffADeFUOxLSA4LnhDFE8BrmF+9tIf7k=
Subject key identifier: 95:99:D6:E8:C7:04:E2:A5:F4:23:FC:8C:63:9E:17:E2:E0:32:C5:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2927BADDF0F851D85B8461FCA9E01B0BEE4FDE7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/9599D6E8C704E2A5F423FC8C639E17E2E032C535.mft
caRepository: rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 05 Apr 2024 21:39:27 +0000
Certificate not after: Fri 04 Apr 2025 21:44:27 +0000
Subordinate resources: AS: 269474
IP: 45.187.172.0/22
IP: 2804:6530::/32
Validation: Failed, certificate revoked on Sat 12 Oct 2024 08:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:27:ba:dd:f0:f8:51:d8:5b:84:61:fc:a9:e0:1b:0b:ee:4f:de:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 5 21:39:27 2024 GMT
Not After : Apr 4 21:44:27 2025 GMT
Subject: CN=9599D6E8C704E2A5F423FC8C639E17E2E032C535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c4:c2:c4:7d:db:c9:9d:b3:fb:6f:db:cf:41:
36:c9:e0:89:4d:33:f5:84:28:1a:1e:22:12:0d:a7:
92:a3:a7:be:c2:aa:91:c8:ef:cc:85:e4:98:c3:d2:
f8:e3:f2:65:cb:1a:6d:b1:20:4c:ad:bb:44:97:18:
14:38:60:5f:fa:f9:21:b9:c3:c9:9c:b4:a4:ec:b0:
72:bb:fc:48:13:e4:44:d0:7b:04:66:30:30:5f:aa:
65:ce:80:aa:8f:25:a0:67:4b:d3:9a:ff:6e:2e:bc:
1b:8e:d3:4f:99:c8:5d:12:7c:87:25:04:ea:06:b3:
c3:80:4c:da:d6:a3:18:a3:fc:89:ae:a0:dc:6e:f2:
4d:7f:7d:39:b4:9f:e2:fd:08:94:5a:be:ec:a9:18:
35:e6:e4:80:58:7c:e3:96:4c:a7:bc:73:e5:df:4e:
25:db:b8:cb:fc:98:42:6a:be:d8:5b:61:38:83:52:
16:cf:8f:75:3f:08:84:97:46:cf:0b:fc:57:c3:bc:
c2:88:46:09:29:a8:0c:b6:33:c1:20:33:c1:20:60:
ec:bd:00:52:76:27:38:23:c3:d5:f3:45:52:0c:8e:
90:8d:f8:a4:75:6d:c2:24:fc:87:7a:03:5f:59:0d:
47:80:99:e5:d8:19:b6:4b:a7:84:6a:58:ce:33:d7:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
95:99:D6:E8:C7:04:E2:A5:F4:23:FC:8C:63:9E:17:E2:E0:32:C5:35
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/9599D6E8C704E2A5F423FC8C639E17E2E032C535.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.172.0/22
IPv6:
2804:6530::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269474
Signature Algorithm: sha256WithRSAEncryption
10:23:da:d4:e7:85:f5:c8:00:8a:7a:40:5a:18:3c:e7:f0:a1:
b3:0d:91:3f:97:e4:3d:c8:16:ed:d8:7f:28:bc:16:5b:5f:cc:
9e:91:c1:41:1a:96:3d:f6:d4:4a:54:d8:54:e2:f3:9a:c3:ae:
22:29:1f:78:a5:ee:d0:ba:f2:76:73:9e:d3:e7:99:27:b0:23:
83:30:7e:5c:49:b5:62:ed:e3:16:08:c3:e0:90:e9:6a:32:0f:
9e:45:22:1b:09:69:96:ef:53:14:fc:3f:9d:5c:4c:84:d3:6c:
3a:a5:75:d4:a7:0a:bb:bf:51:24:f8:47:e5:9c:6e:a2:b2:8a:
7f:57:ae:78:51:53:d6:83:ac:08:8a:72:69:8f:75:9d:ae:59:
0a:fe:4d:2a:03:99:f8:dc:70:b3:c8:8a:51:51:3c:56:a2:d0:
eb:ea:d7:88:c1:78:c1:1e:e8:b6:08:18:7a:57:06:91:bf:2e:
00:71:1c:ee:c7:30:4f:6d:ef:ff:37:ce:e7:63:e9:5a:bf:6e:
db:cd:bd:c0:68:17:a8:ba:44:73:89:4c:b6:15:37:6b:9c:9d:
91:b9:3e:46:64:6e:ab:de:f7:e7:45:8a:a3:34:e4:b7:90:a5:
a5:20:87:34:2a:fb:23:48:dc:2f:1f:eb:68:b9:60:4e:f2:51:
38:e3:93:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 10:37:08 2024 by rpki-client on console-fra.rpki-client.org