Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A8B69F55382B14B7CC60DC7ECFEFF3B10D930B3.cer
File: 9A8B69F55382B14B7CC60DC7ECFEFF3B10D930B3.cer (raw, json)
Hash identifier: 8W/bOcOPVKSwCDuuhQPIzPsVuQVnsardbxzxLl1kQXc=
Subject key identifier: 9A:8B:69:F5:53:82:B1:4B:7C:C6:0D:C7:EC:FE:FF:3B:10:D9:30:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7836DEAEAA334CEA13828A86430FD13C0C0AD144
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/9A8B69F55382B14B7CC60DC7ECFEFF3B10D930B3.mft
caRepository: rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 12 Jul 2024 17:32:39 +0000
Certificate not after: Fri 11 Jul 2025 17:37:39 +0000
Subordinate resources: AS: 265017
IP: 170.84.140.0/22
IP: 2804:3178::/32
Validation: Failed, certificate revoked on Tue 12 Nov 2024 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:36:de:ae:aa:33:4c:ea:13:82:8a:86:43:0f:d1:3c:0c:0a:d1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 12 17:32:39 2024 GMT
Not After : Jul 11 17:37:39 2025 GMT
Subject: CN=9A8B69F55382B14B7CC60DC7ECFEFF3B10D930B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:53:c4:6e:ea:44:69:bd:a5:f3:fa:2a:a3:
cf:01:5a:a2:51:82:b9:fb:81:d2:fa:79:7c:c6:8a:
91:e9:4e:a7:ee:0d:3a:23:6f:68:ee:1c:c1:98:e0:
1b:35:1d:5b:51:81:27:d0:b4:44:85:93:34:b9:f4:
ab:f9:e8:6e:f0:61:f3:28:49:1e:6b:5f:75:e2:57:
be:ce:15:29:ac:92:6e:0a:8e:60:7b:2f:ff:ad:36:
54:e5:63:77:91:39:92:6a:26:cd:b7:2a:8f:93:f0:
7a:1a:f2:db:87:f4:21:1a:3a:6a:d5:e6:f9:d5:6a:
77:70:52:9c:77:73:f3:1e:fd:de:51:4a:86:5d:25:
a5:a1:ec:ab:90:9e:63:14:51:35:5f:62:cc:dd:38:
9e:dc:6a:df:83:52:9c:70:4d:bc:c8:96:ff:f9:5d:
2f:8d:52:3c:fd:47:c4:7d:c9:93:80:57:f0:86:f3:
49:0f:1b:01:3a:ab:13:22:64:23:0f:8a:b6:01:b1:
30:4b:a0:77:b7:40:16:cf:73:aa:f2:b7:f2:a2:75:
3a:2d:06:f9:c6:c6:cc:9c:4b:82:fc:f3:8b:aa:91:
99:a3:02:d7:bf:b3:ad:ee:9b:fa:bc:d7:93:2a:e1:
ad:40:e2:ef:ec:90:85:0a:31:4e:40:eb:7e:82:d3:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:8B:69:F5:53:82:B1:4B:7C:C6:0D:C7:EC:FE:FF:3B:10:D9:30:B3
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/9A8B69F55382B14B7CC60DC7ECFEFF3B10D930B3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.140.0/22
IPv6:
2804:3178::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265017
Signature Algorithm: sha256WithRSAEncryption
1b:fe:ab:20:85:00:e2:d7:04:fa:78:40:97:a7:35:b9:d5:e4:
59:a5:3f:3d:e3:9a:58:4a:ce:dd:51:6c:f1:dd:b3:a9:59:36:
ef:dc:f4:f7:7d:18:46:d6:c1:69:25:b8:d5:91:4e:37:ea:90:
d4:a5:ea:34:ae:2d:58:f1:f1:36:7d:3c:9d:e1:e7:eb:c7:2d:
e1:67:f2:f3:d3:00:eb:57:59:4e:cf:f9:0b:e2:d3:2b:6f:7b:
52:38:39:d3:ca:99:31:8e:d4:04:d4:b7:d0:50:d5:32:70:20:
10:29:e4:fe:2d:67:6b:00:6f:77:75:0e:7d:97:5e:98:1a:b1:
16:59:5a:31:39:6b:b2:5a:c0:a5:31:6f:07:dc:6e:e0:3b:f3:
ad:32:26:1e:a9:d4:36:2a:e1:97:d1:03:90:2e:c0:7e:a3:93:
c7:a9:89:50:cc:d5:14:55:e1:a8:cd:9d:af:10:7c:75:ab:fa:
f6:04:17:9a:ac:71:f1:61:72:f8:b6:20:5d:7e:0e:96:7e:8e:
1c:4a:1b:88:b8:ba:5e:16:e9:41:d2:54:81:37:a8:d6:d4:f2:
66:1c:8d:a6:66:bd:c6:6a:79:34:01:27:2e:85:59:c9:75:61:
fc:d4:47:11:c5:f3:be:1a:c7:15:7b:e1:00:9e:5a:4b:af:54:
95:5b:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:19:59 2024 by rpki-client on console-ams.rpki-client.org