Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9AFA343E3D746C1773F05B9D38AFBFFDAC110C88.cer
File: 9AFA343E3D746C1773F05B9D38AFBFFDAC110C88.cer (raw, json)
Hash identifier: GuT47BvULPMyKTa2ULAerWbT/CJ4oYhFeY5vy2tVUzc=
Subject key identifier: 9A:FA:34:3E:3D:74:6C:17:73:F0:5B:9D:38:AF:BF:FD:AC:11:0C:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 49AC99F27B1629B644556CAAC075D26BE47D0F87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/1/9AFA343E3D746C1773F05B9D38AFBFFDAC110C88.mft
caRepository: rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:54:33 +0000
Certificate not after: Wed 02 Apr 2025 18:59:33 +0000
Subordinate resources: AS: 264259
IP: 138.118.40.0/22
IP: 2804:2514::/32
Validation: Failed, certificate revoked on Mon 22 Apr 2024 21:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ac:99:f2:7b:16:29:b6:44:55:6c:aa:c0:75:d2:6b:e4:7d:0f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:54:33 2024 GMT
Not After : Apr 2 18:59:33 2025 GMT
Subject: CN=9AFA343E3D746C1773F05B9D38AFBFFDAC110C88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:75:6e:46:14:5c:2e:ab:cc:8d:82:cd:27:
94:fe:51:9b:c1:6d:bf:0d:c8:42:0c:78:60:8e:8b:
63:fb:06:25:21:b4:4a:2f:f0:86:e0:a5:53:f5:f3:
4b:98:0d:8d:8e:ad:b6:1e:82:27:81:07:ef:8f:7e:
7a:7c:28:6f:09:b3:81:45:f7:25:98:b6:3c:41:aa:
4e:e5:fb:64:56:91:25:3d:d0:42:80:e8:8f:06:4f:
c0:cf:4c:4b:09:43:da:7e:b5:21:46:69:e7:29:94:
46:9d:21:e7:6f:f1:b1:0a:6d:9e:83:e0:48:4d:d1:
b2:12:93:37:74:4d:48:eb:bc:f7:b7:d4:77:fc:5d:
b6:c7:78:bf:ae:0b:a9:08:8f:dd:cd:03:ac:cb:e3:
c4:f2:1d:63:5e:53:69:2e:4c:69:9d:68:fb:f8:11:
4b:44:e2:e6:12:c2:56:21:0c:5b:cd:8b:5d:c6:d0:
a5:f0:13:d7:cf:74:fb:8a:eb:4d:67:09:b0:d0:73:
76:fa:58:5b:e2:75:d8:af:78:0f:f4:ad:78:f0:b1:
e0:7d:fb:ae:26:bc:7c:c7:8b:a6:0d:19:94:4f:b5:
81:3d:be:ed:7b:37:ea:9a:80:16:b1:33:51:43:94:
66:1f:b5:fa:c1:37:6c:29:b8:8b:ad:ee:41:04:62:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:FA:34:3E:3D:74:6C:17:73:F0:5B:9D:38:AF:BF:FD:AC:11:0C:88
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/1/9AFA343E3D746C1773F05B9D38AFBFFDAC110C88.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.40.0/22
IPv6:
2804:2514::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264259
Signature Algorithm: sha256WithRSAEncryption
05:0f:bd:3b:8d:b0:28:96:d1:c3:88:76:49:8b:23:30:d3:ba:
e5:9e:12:f7:0d:55:80:59:32:b6:47:90:1a:85:da:c7:34:6e:
6f:f4:af:df:5c:ff:a3:a5:61:f2:ec:af:bd:32:db:f2:25:17:
96:39:d5:53:b9:ff:25:2c:4f:8b:f0:06:b6:3d:d6:31:04:e1:
9e:81:b7:8c:64:ca:36:50:e1:55:89:f4:ad:c6:41:c9:98:b2:
cc:e4:2e:f2:8f:4a:21:b4:f3:df:38:cc:83:99:38:c3:7c:af:
01:1b:ff:00:9c:a4:b8:f2:f8:87:11:3d:81:7e:a2:5a:86:a5:
85:b7:6a:5f:1b:1c:d2:4c:09:a9:dc:c0:29:3d:59:63:a4:c1:
21:09:ed:1d:9d:f4:66:25:09:dd:08:56:86:da:f2:a0:b0:ce:
05:74:3e:d9:c4:3a:a8:b8:0f:99:30:a7:a0:5c:d9:8a:46:b0:
ea:86:eb:b3:30:2e:04:de:c1:b7:a5:cd:f9:ec:ee:38:cd:c8:
ed:15:cf:ef:8e:7c:22:71:17:0a:50:d8:cf:72:4f:59:54:03:
5c:25:0a:95:1c:59:61:f7:36:8c:02:cb:83:a4:e0:af:7e:c3:
c1:6b:8b:87:50:c0:b2:18:f5:ea:2a:d1:ff:e1:68:74:29:0c:
ff:81:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org