Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95D85AE78879E9C1F337A939AFF0652A7EF31796.cer
File: 95D85AE78879E9C1F337A939AFF0652A7EF31796.cer (raw, json)
Hash identifier: SI0DYtEVqu9QvEX2PLXYpcH6v35pKv6armrFS227M+8=
Subject key identifier: 95:D8:5A:E7:88:79:E9:C1:F3:37:A9:39:AF:F0:65:2A:7E:F3:17:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3D08847E64E6D98D902AF618ED852F735A77370E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/95D85AE78879E9C1F337A939AFF0652A7EF31796.mft
caRepository: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 23 Jul 2024 19:18:03 +0000
Certificate not after: Tue 22 Jul 2025 19:23:03 +0000
Subordinate resources: AS: 266304
IP: 170.79.200.0/22
IP: 2804:35c0::/32
Validation: Failed, certificate revoked on Mon 21 Oct 2024 06:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:08:84:7e:64:e6:d9:8d:90:2a:f6:18:ed:85:2f:73:5a:77:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 23 19:18:03 2024 GMT
Not After : Jul 22 19:23:03 2025 GMT
Subject: CN=95D85AE78879E9C1F337A939AFF0652A7EF31796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:b9:57:79:e0:a7:9a:2c:96:29:b0:f3:3f:
40:13:70:07:c0:91:d6:6d:68:cd:2d:76:c2:50:4f:
ea:c5:5e:25:8d:f6:d2:83:64:49:a7:d8:a0:c5:e3:
bc:5a:49:a2:8f:48:31:56:b3:5f:4f:86:74:22:e7:
5d:54:25:75:a1:f9:9e:57:7e:65:cf:87:43:c6:6b:
82:1a:9d:c0:95:ad:74:cd:3f:8f:62:da:36:60:07:
2c:a0:71:7c:90:6e:1b:79:2a:f6:e6:45:90:cb:89:
14:3f:5b:77:f7:84:98:6f:cf:fc:ac:9d:5f:52:b4:
59:14:b3:0d:b1:f5:85:9f:81:ee:13:30:10:3b:83:
7c:59:29:fb:8d:77:c6:d8:b1:44:9a:60:10:e2:40:
4c:ce:79:6d:40:fc:d1:d0:7b:99:19:69:39:5d:a4:
a2:6c:82:75:a9:fd:0d:2a:ca:bb:6d:70:ec:b4:a2:
72:d2:66:17:c7:23:50:26:96:1c:09:aa:07:85:7d:
8a:69:7e:d0:27:63:f7:df:0b:34:0a:de:5d:a4:6d:
94:25:f2:34:42:a8:e6:2e:86:c5:2c:c0:12:16:e6:
3a:db:5f:9f:be:32:9a:a8:34:ad:a0:b4:b0:6e:86:
bc:ef:2a:d2:5d:c8:bf:d9:89:e1:e7:b3:ae:c9:f8:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
95:D8:5A:E7:88:79:E9:C1:F3:37:A9:39:AF:F0:65:2A:7E:F3:17:96
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/95D85AE78879E9C1F337A939AFF0652A7EF31796.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.200.0/22
IPv6:
2804:35c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266304
Signature Algorithm: sha256WithRSAEncryption
c0:f9:ce:29:a5:4a:78:ab:b8:ab:ad:dd:f6:6d:c6:a9:fc:f7:
da:fd:00:27:f9:74:6a:14:36:e5:4b:11:be:9c:da:f8:13:07:
9c:bc:34:7e:f1:1f:e1:64:69:b0:d7:02:2c:ab:ee:87:73:a5:
9b:c7:1f:55:0f:3c:fe:1a:67:37:65:ce:61:a2:a7:4d:de:b0:
7c:99:7f:e3:5b:20:25:c5:c0:e1:1a:ff:50:77:63:7e:fa:7d:
dd:5b:86:3e:72:31:b0:c3:72:51:6c:fc:8f:67:99:6b:82:e1:
5a:e5:cb:94:62:fb:3e:56:98:9f:56:73:47:f2:b6:e8:b8:e8:
fd:a8:5a:cb:2a:19:2f:a6:30:65:08:bc:9a:9a:de:1e:b8:39:
91:53:05:22:f1:e5:48:f3:0a:d7:a6:5e:80:c3:45:80:eb:b6:
fa:65:33:20:eb:ed:67:1b:b6:a5:55:81:43:29:0f:0b:cc:79:
28:9e:56:5a:d6:3c:be:4d:8b:dc:3c:4c:3d:8e:fe:1e:3c:8c:
db:1e:42:b1:c9:ac:12:72:1b:72:10:32:7a:e8:75:f9:ef:4d:
ef:56:66:c3:f4:68:93:30:b1:09:22:be:cd:9f:96:43:f3:9b:
d7:d8:fd:89:cc:95:4c:18:75:fb:9f:45:93:98:17:32:27:fd:
e6:43:05:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 08:35:25 2024 by rpki-client on console-ams.rpki-client.org