Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BF7B18E5CC2A8BDC7E57C5517B67E08FFD13055.cer
File: 9BF7B18E5CC2A8BDC7E57C5517B67E08FFD13055.cer (raw, json)
Hash identifier: CuQSZ6+xSfDVuvL19ScTSmlnPGNP0OAz6jMToAEoSV8=
Subject key identifier: 9B:F7:B1:8E:5C:C2:A8:BD:C7:E5:7C:55:17:B6:7E:08:FF:D1:30:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0D6A1E2490DDD5A78D9EFFACAE6DCDA970CA1436
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/9BF7B18E5CC2A8BDC7E57C5517B67E08FFD13055.mft
caRepository: rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 19 Jun 2024 13:41:16 +0000
Certificate not after: Wed 18 Jun 2025 13:46:16 +0000
Subordinate resources: AS: 266644
IP: 128.201.180.0/22
IP: 2804:3f2c::/32
Validation: Failed, certificate revoked on Wed 02 Oct 2024 11:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6a:1e:24:90:dd:d5:a7:8d:9e:ff:ac:ae:6d:cd:a9:70:ca:14:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 19 13:41:16 2024 GMT
Not After : Jun 18 13:46:16 2025 GMT
Subject: CN=9BF7B18E5CC2A8BDC7E57C5517B67E08FFD13055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:43:f0:19:83:35:d1:f6:b2:db:df:3a:68:
07:0b:e0:f2:f1:15:49:b5:ba:fe:35:c6:4a:c3:93:
fb:7b:88:3b:b1:ba:5f:24:cc:f7:6b:5b:53:81:46:
40:27:3c:dc:d1:68:7c:14:53:71:02:38:0a:d1:1a:
3b:4d:6b:b0:98:ff:1e:60:ca:46:12:6d:19:1e:26:
03:e3:5d:82:d8:da:5f:e8:8e:5e:1c:06:2e:16:5f:
f6:de:0a:7b:9c:08:25:88:ee:c6:b1:b2:ba:5d:73:
21:1d:72:77:aa:d8:25:86:b3:cc:13:64:b0:2c:45:
c9:9f:e4:3b:53:b2:10:a8:0d:b6:f5:89:28:dc:4c:
bd:3d:15:a9:33:98:2a:23:a1:59:cc:8d:d8:90:0f:
c8:c2:e7:fd:84:cc:95:31:e9:66:f8:77:4a:fa:2c:
ac:92:8f:94:54:87:54:dd:6a:02:94:bb:b8:e8:93:
0c:f3:83:e0:e8:dc:95:d9:36:b6:b6:4b:7d:6f:95:
95:e7:f8:07:d3:62:f1:16:98:a3:ec:a8:21:c3:23:
3d:55:db:9c:9b:18:f0:d4:84:77:c0:ef:65:dd:fa:
23:16:de:b7:9f:90:65:18:f8:8e:fe:90:54:69:82:
74:93:db:aa:48:84:05:2a:fb:21:51:c4:0a:da:c7:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9B:F7:B1:8E:5C:C2:A8:BD:C7:E5:7C:55:17:B6:7E:08:FF:D1:30:55
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/9BF7B18E5CC2A8BDC7E57C5517B67E08FFD13055.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.180.0/22
IPv6:
2804:3f2c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266644
Signature Algorithm: sha256WithRSAEncryption
56:cb:68:41:17:c6:7e:9f:cb:2d:91:da:98:76:bf:4e:f6:1c:
37:40:b7:9f:65:ef:5d:48:72:e7:ff:60:e7:1a:0b:a6:68:9f:
13:dc:f2:f3:09:95:cc:a1:ce:b8:14:b9:1a:90:92:bd:92:a0:
21:13:3b:de:7d:fd:69:a0:76:79:19:40:0e:3c:0e:05:26:44:
81:95:0a:52:ad:4f:1d:3a:82:8d:29:e6:59:39:b2:82:63:af:
f0:91:35:37:6e:e1:b6:b0:1d:ff:e5:df:20:bd:66:cc:cc:f7:
8f:21:54:4f:3f:4e:13:ed:8e:4a:76:0b:a3:74:83:c8:b3:b5:
0a:88:d9:d6:f9:eb:b6:ad:22:c3:0e:62:0e:57:fc:dd:88:9c:
7c:cd:29:11:90:c8:b9:bf:4b:a0:08:d1:a2:28:0c:29:59:76:
a3:f1:a5:02:74:d2:05:65:4e:42:82:6e:db:0a:a8:fc:16:ed:
05:65:6f:61:c9:96:c1:ac:31:17:f9:cd:6a:a6:9b:9e:aa:18:
e9:04:55:d8:25:72:a8:11:17:09:bc:49:84:82:23:18:93:22:
f5:26:91:de:c0:7a:18:2b:d8:78:d6:83:12:a4:5a:80:cc:18:
40:b0:f0:23:4b:ae:b0:70:47:e7:f3:6d:85:3a:3b:a3:44:df:
94:7d:2f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 15:13:48 2024 by rpki-client on console-fra.rpki-client.org