Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/965C3F6319859C81532121D28A8D0F5563BB2986.cer
File: 965C3F6319859C81532121D28A8D0F5563BB2986.cer (raw, json)
Hash identifier: zHC0BXOGMD94mWoiMmX6evk/wV5fpG8JNbSOpRgyYxU=
Subject key identifier: 96:5C:3F:63:19:85:9C:81:53:21:21:D2:8A:8D:0F:55:63:BB:29:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 174219F30BE683C31CD489EC4F6F6BBF90E2BDEC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/965C3F6319859C81532121D28A8D0F5563BB2986.mft
caRepository: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 22:14:00 +0000
Certificate not after: Wed 02 Apr 2025 22:19:00 +0000
Subordinate resources: AS: 264091
IP: 143.208.128.0/22
IP: 2804:2abc::/32
Validation: Failed, certificate revoked on Thu 16 May 2024 00:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:42:19:f3:0b:e6:83:c3:1c:d4:89:ec:4f:6f:6b:bf:90:e2:bd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 22:14:00 2024 GMT
Not After : Apr 2 22:19:00 2025 GMT
Subject: CN=965C3F6319859C81532121D28A8D0F5563BB2986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:40:5d:6a:60:06:aa:72:2e:f3:76:c6:3e:
08:9b:00:6a:13:20:3b:69:4f:95:0b:c7:ed:82:5a:
8a:e7:a2:2d:02:f2:cb:1e:5e:f2:91:db:34:85:4a:
24:0c:89:5f:5d:9c:89:8a:48:8e:c7:e3:80:0e:29:
08:90:3b:8d:82:d4:69:ea:db:05:db:ec:f3:9b:3a:
60:bc:2c:a1:f1:07:43:0d:e8:fb:c2:b0:a9:c8:46:
7f:35:ae:0a:d7:f9:14:74:dc:25:8a:4d:07:45:97:
eb:5f:ec:3a:eb:1a:23:62:c3:1c:95:0f:bc:7c:82:
70:54:af:9a:80:0c:ea:b4:e6:eb:b8:c8:92:c1:6f:
8b:5e:90:2d:a7:28:21:10:0d:a1:e7:8e:40:be:6e:
32:d4:82:5e:c9:2f:c1:de:fc:3e:cf:3c:2f:93:b0:
6d:ef:1c:f5:04:2a:ce:96:0f:a2:c0:cf:aa:f9:fd:
69:5f:41:cf:50:0f:f4:79:9d:fa:7e:40:4f:83:f3:
fe:d6:e7:22:b6:b3:eb:c4:c1:99:cf:eb:f0:e4:9b:
18:a4:cf:e6:1b:a2:bd:24:e7:dc:a7:87:8d:42:3d:
38:42:9b:9b:c5:6c:5f:e8:4f:35:f9:14:67:23:36:
ac:c9:28:f5:03:c0:b8:17:0f:9c:a2:db:5f:48:ee:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:5C:3F:63:19:85:9C:81:53:21:21:D2:8A:8D:0F:55:63:BB:29:86
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/965C3F6319859C81532121D28A8D0F5563BB2986.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.128.0/22
IPv6:
2804:2abc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264091
Signature Algorithm: sha256WithRSAEncryption
84:84:e4:ca:87:ed:82:7f:54:3d:52:1b:2d:89:dc:f7:d1:69:
f7:cb:ae:08:16:91:33:2f:69:5c:c1:4e:22:90:26:f6:f8:73:
83:ad:c8:e1:bf:e3:da:0b:91:fe:d6:30:d5:bc:8b:a0:6a:0b:
6c:09:53:e1:56:17:7e:7a:36:3e:21:a7:1b:01:fa:9c:b9:51:
3e:ed:da:9f:cb:4a:1c:7c:10:45:de:19:c3:2a:c2:d4:c5:26:
5c:d1:50:f1:4a:5f:73:89:1d:dc:38:bd:00:4e:6b:7a:8a:14:
49:25:48:4e:ca:61:1f:77:98:65:5b:56:fa:6c:bc:30:a4:e3:
2d:95:39:6c:92:e0:18:0a:1e:9e:91:8a:20:2f:e9:94:15:3a:
b9:7b:61:e9:37:b6:ef:4e:0f:7f:c6:8b:1a:6c:ef:63:d4:db:
dd:30:c5:3c:e7:4a:65:0e:8d:66:91:70:e2:cf:1f:c2:ba:91:
2f:49:b8:3c:51:93:f0:07:7a:b9:44:b6:d1:7d:82:93:53:46:
cf:38:87:80:04:b8:b1:84:8c:a2:cd:0c:41:b4:1f:bb:8f:2f:
bf:c2:4f:31:e8:b9:cf:d4:ae:67:b1:60:17:0b:92:06:57:4e:
df:e4:ae:2e:a3:8f:3f:69:a7:39:5f:90:ce:12:ae:68:d2:73:
be:78:8a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org