Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
File: 9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer (raw, json)
Hash identifier: fGZwDDNmqayxJLKjya0kFNgCaZesFCc+84mkQ0KUyCE=
Subject key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6A9D51C4EE5DAFDABBB5E3F9D30E9424F16C3CC5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.mft
caRepository: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 03 May 2024 20:02:39 +0000
Certificate not after: Fri 02 May 2025 20:07:39 +0000
Subordinate resources: AS: 28667
IP: 132.255.64.0/22
IP: 143.202.68.0/22
IP: 168.196.108.0/22
IP: 170.82.56.0/22
IP: 177.8.208.0/21
IP: 177.21.192.0/20
IP: 177.71.0.0/20
IP: 177.107.0.0/20
IP: 177.184.240.0/21
IP: 186.193.192.0/20
IP: 186.236.96.0/19
IP: 186.250.208.0/21
IP: 187.19.80.0/20
IP: 187.110.240.0/20
IP: 187.121.192.0/19
IP: 189.1.176.0/20
IP: 189.76.128.0/20
IP: 191.242.128.0/19
IP: 2804:4::/32
Validation: Failed, certificate revoked on Tue 04 Jun 2024 01:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9d:51:c4:ee:5d:af:da:bb:b5:e3:f9:d3:0e:94:24:f1:6c:3c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 3 20:02:39 2024 GMT
Not After : May 2 20:07:39 2025 GMT
Subject: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:44:72:1b:fc:ee:af:e6:bb:35:80:d6:38:
0e:4a:46:6c:26:aa:a6:f1:6a:94:57:19:2e:a5:95:
48:f7:99:36:9b:b2:f1:1d:df:01:a9:70:43:7a:90:
60:80:fe:b4:b5:ea:a3:48:f1:f4:7f:78:08:f3:c0:
9a:4a:66:6e:d2:d7:3b:50:cc:c9:6b:de:2a:29:28:
44:92:0a:37:27:5e:0c:83:c3:9d:76:b6:a4:ac:df:
05:b2:ea:e4:76:bd:bc:08:a1:f6:bd:75:61:37:bd:
3a:94:17:19:09:ee:1a:9e:8c:25:8b:5f:78:3e:8a:
15:42:24:ef:f2:4b:0a:b1:bb:77:91:23:10:25:85:
79:22:b5:94:4d:ed:bb:fd:63:27:98:de:a0:ff:df:
fb:61:65:92:42:92:93:b9:c1:57:ad:1f:88:c1:c8:
d5:8b:a4:e7:3e:4a:95:b0:a9:9f:38:c2:be:00:3d:
f4:f0:9f:df:97:a7:5d:54:ef:fb:42:cd:75:2f:15:
73:15:f0:da:32:02:0e:7d:c5:64:af:88:b8:13:88:
3a:7f:04:f6:e3:50:70:bb:59:e4:b7:b9:35:ca:da:
62:8b:7e:9c:b5:a1:6e:f9:52:b8:1b:5b:ef:cb:f3:
d1:b2:74:3c:c0:b9:36:b8:ed:8d:c7:f3:c8:91:81:
0d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.64.0/22
143.202.68.0/22
168.196.108.0/22
170.82.56.0/22
177.8.208.0/21
177.21.192.0/20
177.71.0.0/20
177.107.0.0/20
177.184.240.0/21
186.193.192.0/20
186.236.96.0/19
186.250.208.0/21
187.19.80.0/20
187.110.240.0/20
187.121.192.0/19
189.1.176.0/20
189.76.128.0/20
191.242.128.0/19
IPv6:
2804:4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28667
Signature Algorithm: sha256WithRSAEncryption
b3:70:9f:2d:0d:c3:ad:b7:af:21:74:bb:c9:c2:38:3d:26:3b:
93:21:6f:0a:70:12:73:0d:d6:50:0e:bb:b6:f6:36:e3:67:5d:
55:96:63:2f:3b:9d:95:b0:3a:df:fe:b1:17:1c:fe:72:ec:63:
ff:7a:9b:32:3b:6e:f0:32:f4:db:cf:f7:d1:63:f4:b6:0b:9a:
b3:f0:14:10:0b:8d:4f:ed:32:3c:21:62:32:5b:14:3f:d0:75:
d5:52:b8:0a:14:1f:16:b2:96:16:04:a2:d5:8a:09:bb:c7:c0:
c3:47:f6:9f:4e:68:ee:f3:7c:e4:6e:04:8d:42:ae:b3:85:9c:
2b:f9:92:02:6f:a5:6e:57:9f:a9:1b:4a:80:2d:e4:66:72:12:
33:3f:d2:2b:26:97:86:a7:5a:0f:0a:69:c7:80:b9:a8:65:92:
32:05:fe:67:b4:c6:3b:02:6a:8b:d6:28:b5:0a:43:3c:c1:21:
d4:10:3e:15:4f:21:1d:1c:be:26:1d:61:84:56:41:a4:bf:f0:
84:a8:ed:c9:fa:64:7b:3c:36:a9:1a:b2:ab:0e:bb:74:dd:ea:
19:9e:10:b4:d1:f7:cb:36:ed:4e:b5:f3:bf:4f:47:96:a2:22:
68:1e:77:b5:3f:f9:4c:eb:b4:60:0f:8d:4d:f5:ed:7a:dc:f4:
03:74:5f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org