Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.cer
File: 96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.cer (raw, json)
Hash identifier: peAfi9QyKypGtAtxXK3ubiXCYkFgmQVbfpHXaRUg9+8=
Subject key identifier: 96:B8:FD:8F:C2:71:B3:CB:BC:CA:36:DE:D3:B1:3B:3A:7E:6F:3B:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7C9B3ADA05A42ED9C3A9EC4C47D9707B05BC9325
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.mft
caRepository: rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Jul 2024 16:43:32 +0000
Certificate not after: Thu 03 Jul 2025 16:48:32 +0000
Subordinate resources: AS: 264437
IP: 131.221.168.0/22
IP: 2804:1e94::/32
Validation: Failed, certificate revoked on Sat 13 Jul 2024 02:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:9b:3a:da:05:a4:2e:d9:c3:a9:ec:4c:47:d9:70:7b:05:bc:93:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 4 16:43:32 2024 GMT
Not After : Jul 3 16:48:32 2025 GMT
Subject: CN=96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a6:7e:c0:46:c7:68:3c:d8:73:08:ff:83:13:
35:6a:b7:e7:dc:81:91:05:a1:4a:82:b2:6f:40:bc:
bb:55:de:59:82:78:6f:25:7c:2b:5d:00:a4:3f:a0:
b4:d0:29:61:ed:05:6d:2a:06:30:27:5e:9c:90:c5:
74:6d:f2:f3:a7:7e:10:9b:ad:c9:63:1a:dc:fd:52:
4e:c0:2c:d6:65:25:7a:92:a8:ff:25:4a:0f:40:ab:
77:15:8d:d1:5d:e4:4e:f8:a2:00:94:01:c0:e8:a6:
e6:2a:5a:c9:a7:69:cd:57:58:f9:03:2d:aa:76:f4:
86:b5:96:8d:b7:80:4e:1c:2d:28:d1:bb:71:44:71:
8d:36:33:ce:ec:d9:47:fb:b4:60:f0:f8:a6:4c:27:
54:68:1f:40:3f:ab:35:ea:44:55:6c:bc:c8:15:a1:
49:73:b5:92:4b:78:da:f3:9b:7d:e9:4e:e2:f1:59:
f5:9d:74:0d:63:65:93:c3:3c:29:bc:5e:0f:5d:b7:
b6:fb:a0:f5:36:10:af:5a:45:11:a9:6e:51:42:a3:
5c:63:8a:bd:33:38:e7:83:ad:6d:5f:5a:14:89:3a:
ff:09:5b:fa:3b:62:da:d3:55:9e:8f:f4:87:49:1c:
fc:36:74:f1:06:a3:2a:a5:d3:c5:61:59:c9:21:6e:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:B8:FD:8F:C2:71:B3:CB:BC:CA:36:DE:D3:B1:3B:3A:7E:6F:3B:00
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.168.0/22
IPv6:
2804:1e94::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264437
Signature Algorithm: sha256WithRSAEncryption
04:3c:e0:03:40:b0:08:67:a2:c4:29:53:a2:d7:24:c0:94:c2:
91:f9:b6:a4:48:f2:1e:9a:89:1b:c2:ce:fd:31:4b:af:6b:d4:
f9:6f:ed:b0:d4:15:b5:49:5a:7e:2d:e9:ee:9c:bd:5f:37:3b:
ba:06:ce:92:2e:81:c0:d0:b8:14:d8:3c:fc:61:a7:d2:e6:be:
34:f5:e8:75:72:d0:a7:38:86:4f:d7:7a:17:d1:39:e8:59:74:
10:df:6e:ae:f8:eb:20:3d:ee:a8:a8:cc:44:67:f8:2f:a3:23:
9c:5e:3c:7f:bb:ca:bf:72:bb:6a:00:10:4e:58:a9:08:31:0a:
27:e0:02:f6:18:a1:6a:a9:01:85:b2:2b:f8:cc:78:ee:a7:20:
94:84:79:b1:a9:88:42:f3:93:43:5c:ae:8b:22:0c:6d:7b:93:
1e:22:97:d5:58:6f:da:b5:9d:51:6e:03:bc:b6:42:af:f1:6a:
fc:f1:fe:7e:06:f4:46:ba:8b:07:15:6c:90:ea:90:37:81:4e:
c6:ac:a0:fd:12:2a:a7:a0:d0:b8:6f:e4:c2:9a:30:b4:79:9b:
9a:6e:3f:7c:8e:67:eb:b0:df:72:83:f3:55:96:3c:18:a0:50:
4e:b5:e4:49:30:79:ac:e0:0d:79:d3:2d:c5:33:75:c3:69:a8:
5e:7b:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 04:42:33 2024 by rpki-client on console-fra.rpki-client.org