Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.cer
File: 9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.cer (raw, json)
Hash identifier: UtDKMna6tvcmpNS9CEMJHyx8cItwx9w5W+xHewPlrJs=
Subject key identifier: 96:04:EE:46:3B:8B:37:33:EC:18:A5:EC:DC:F5:D7:CB:F3:03:7F:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 037BF03625E1A92D70456C2098F5293C737E0CBD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.mft
caRepository: rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 19:11:46 +0000
Certificate not after: Wed 02 Apr 2025 19:16:46 +0000
Subordinate resources: AS: 262368
IP: 177.128.96.0/21
IP: 2804:85c::/32
Validation: Failed, certificate revoked on Sat 19 Oct 2024 21:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7b:f0:36:25:e1:a9:2d:70:45:6c:20:98:f5:29:3c:73:7e:0c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 19:11:46 2024 GMT
Not After : Apr 2 19:16:46 2025 GMT
Subject: CN=9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:06:02:9f:bf:13:1e:d8:b1:fa:ea:3d:06:
ef:50:4d:1f:7e:bb:00:09:5d:14:6e:6b:2a:4a:3c:
c1:26:c0:99:00:53:5c:8c:ec:cf:9f:e1:f8:f2:23:
bc:77:2d:de:b7:95:84:17:9d:5b:11:69:97:17:21:
d0:f9:c3:3e:2e:b4:ec:13:b4:6b:74:1e:5f:26:62:
34:eb:71:db:22:4c:d1:da:3d:51:26:1f:b2:41:94:
c8:b6:65:d5:4b:b4:a4:e6:6d:3e:5e:75:e5:02:97:
67:40:a7:61:f4:10:3a:0b:a7:fe:22:00:17:67:7f:
27:75:0b:af:51:39:b0:17:82:47:08:9a:df:e5:83:
99:36:c4:c5:6e:e5:db:60:f7:27:1c:17:f6:6a:94:
76:6f:a9:e4:0b:9a:1c:81:e8:4a:58:20:35:76:cf:
be:34:ce:19:63:f5:3b:d2:03:0b:bb:cd:f9:03:69:
0f:9f:a9:da:54:48:67:7f:f0:a7:6a:ad:51:7a:3a:
a5:02:94:20:70:24:93:d0:59:d7:95:03:91:5a:22:
16:5e:ae:09:0c:34:61:ff:d3:d9:aa:c0:23:f6:30:
e8:ac:44:f2:85:57:9b:4e:3c:b4:af:78:20:47:0c:
46:eb:6a:36:17:0d:6e:43:be:ce:d7:6e:64:3b:80:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:04:EE:46:3B:8B:37:33:EC:18:A5:EC:DC:F5:D7:CB:F3:03:7F:FE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.96.0/21
IPv6:
2804:85c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262368
Signature Algorithm: sha256WithRSAEncryption
4d:74:dc:db:8f:76:6d:98:a3:1e:b2:7b:9c:3f:8e:7e:6c:6d:
f8:34:e2:7f:ea:f2:35:c6:71:3b:83:6d:1a:f1:1e:26:49:3e:
7c:71:d1:f8:de:37:a4:b2:e1:d9:89:0c:fb:f6:17:da:70:78:
7a:fe:49:b8:b8:be:e8:df:c0:c7:c9:d4:19:64:79:20:37:2b:
d7:48:9c:74:58:93:26:c4:bc:19:bc:ac:67:8b:ab:d6:05:f7:
ad:6d:f3:2b:df:24:77:ff:6f:13:e9:cb:80:b9:8c:bc:f0:2a:
5e:db:23:fb:d1:ae:a5:24:85:1c:7f:1d:a5:ba:a9:fe:a7:a5:
f1:5b:02:2c:9e:2f:c2:0b:a5:ee:54:fc:90:ec:c5:a0:ad:39:
26:3b:b3:2b:de:c6:a6:db:61:61:5c:a8:e0:0b:c8:d5:e2:d5:
1b:10:c4:df:74:6f:fc:c9:6b:b1:7f:ca:06:d8:a1:f9:1a:8f:
3a:f3:5c:e3:39:ca:4e:5c:4d:ce:90:25:be:f0:63:ae:61:fb:
87:f4:8c:32:12:ef:0f:d1:e9:bd:61:40:6f:c3:7b:8c:17:3d:
55:da:24:ce:15:dd:6e:62:4d:97:fe:05:91:f8:4a:2f:a2:5a:
74:8a:79:aa:19:73:dd:03:27:32:80:9b:e7:31:fe:29:c3:92:
e6:48:38:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 23:22:43 2024 by rpki-client on console-ams.rpki-client.org