Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B4C5E90E0F22697DDBD9AE097C5654B92C7FCC7.cer
File: 9B4C5E90E0F22697DDBD9AE097C5654B92C7FCC7.cer (raw, json)
Hash identifier: ynuUzvV156QwBqkGOnGNtqAUb/80SBkGl9SFVuqtWJ0=
Subject key identifier: 9B:4C:5E:90:E0:F2:26:97:DD:BD:9A:E0:97:C5:65:4B:92:C7:FC:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0F94897CD8B002C676C691725B3C16C0B19D794F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/9B4C5E90E0F22697DDBD9AE097C5654B92C7FCC7.mft
caRepository: rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 20 Aug 2024 12:57:43 +0000
Certificate not after: Tue 19 Aug 2025 13:02:43 +0000
Subordinate resources: AS: 268818
IP: 45.173.176.0/22
IP: 2804:5b18::/32
Validation: Failed, certificate revoked on Fri 06 Sep 2024 09:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:94:89:7c:d8:b0:02:c6:76:c6:91:72:5b:3c:16:c0:b1:9d:79:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 20 12:57:43 2024 GMT
Not After : Aug 19 13:02:43 2025 GMT
Subject: CN=9B4C5E90E0F22697DDBD9AE097C5654B92C7FCC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:60:8e:cd:fa:0d:b5:94:67:cd:8d:12:a6:
8c:65:cf:b1:b6:2c:2a:74:a7:3c:3d:0b:67:70:d0:
23:25:7a:fc:73:f9:24:5c:a5:26:e6:04:cf:a0:54:
1f:b0:fe:e2:a2:35:f0:0b:1d:95:11:32:2f:7f:59:
67:ad:ec:73:9a:5e:f3:e0:3c:8a:45:0b:35:26:cc:
4f:b4:70:3b:19:02:3d:de:91:0a:6e:24:32:11:0e:
95:b1:df:da:38:47:af:85:5b:b0:4b:f3:3a:d4:e7:
97:55:52:75:f7:68:be:85:26:39:c5:2d:00:04:e6:
6f:19:e8:90:63:6e:14:88:e4:f8:6b:9e:04:66:6b:
10:4b:d9:60:1f:14:ba:86:73:10:a0:85:99:3b:83:
30:9c:be:60:02:96:ba:b6:92:1a:53:1b:55:b3:bb:
fe:0e:c2:a7:6a:43:4b:82:5d:bd:8a:b0:c4:30:c8:
74:ed:6c:fa:ed:9b:4f:91:3b:bc:60:e0:0a:10:0e:
61:1b:61:52:18:15:27:a0:61:7b:08:a9:c4:c8:06:
d2:57:d3:a8:ad:b5:0c:88:04:d9:ad:16:d9:5e:14:
8d:f6:56:8a:19:be:c6:6c:a9:db:c6:4c:c4:f0:13:
e4:e3:cb:1b:7a:a5:22:c7:1b:73:d8:21:a1:06:53:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9B:4C:5E:90:E0:F2:26:97:DD:BD:9A:E0:97:C5:65:4B:92:C7:FC:C7
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/9B4C5E90E0F22697DDBD9AE097C5654B92C7FCC7.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.176.0/22
IPv6:
2804:5b18::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268818
Signature Algorithm: sha256WithRSAEncryption
04:08:e5:92:f7:bf:2d:d0:b3:57:0c:68:b9:91:0d:ec:9d:bf:
f2:19:2a:c2:10:5b:20:ad:2e:c9:35:09:ac:e3:d4:8f:2f:c9:
8a:a1:c5:1f:96:e6:3a:e4:86:4e:70:85:1b:ec:f6:f0:4c:c1:
8e:f9:ed:f0:f6:bb:f1:0c:25:a5:03:92:90:8f:40:d3:f1:53:
52:17:be:17:ad:e6:86:b4:62:30:41:9b:bc:93:83:90:c3:8e:
d6:71:0d:5f:29:e8:0c:cb:f1:f8:a5:aa:2c:a7:31:36:18:c9:
7f:d5:20:70:5c:c3:59:94:73:e7:c3:39:f5:06:7e:2d:ac:43:
b0:d6:fd:c3:d9:a5:bd:40:ff:1d:a0:d1:62:4b:43:0c:a6:c3:
ec:7f:3f:4d:e5:ab:55:52:1d:f3:4a:01:c5:86:88:6b:54:ea:
b4:f3:3a:a1:f2:11:29:6b:d7:92:50:27:a9:99:87:14:34:4c:
50:ed:f6:f8:df:33:ba:9f:e2:d8:26:71:c3:e2:63:48:d5:9d:
ad:8a:4e:11:b0:ac:f5:33:27:58:c5:99:85:70:89:a6:68:ec:
b4:b6:da:87:25:ae:b5:14:cd:5f:bc:d0:92:ae:61:91:7b:9f:
79:79:74:13:f6:f9:23:1e:1b:1c:9f:4b:b9:07:03:43:17:00:
7a:71:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 12:37:50 2024 by rpki-client on console-ams.rpki-client.org