Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CD7A42DB88BCBC28213A8DEEBF9492B2A41D331.cer
File: 9CD7A42DB88BCBC28213A8DEEBF9492B2A41D331.cer (raw, json)
Hash identifier: 8DCXn7cclejE6JqK5sCTNvftds2C9gmq8Rb/IIjZSy4=
Subject key identifier: 9C:D7:A4:2D:B8:8B:CB:C2:82:13:A8:DE:EB:F9:49:2B:2A:41:D3:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 44005664A5D488E1BBF294ED3C2C608CDE8C6C31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/9CD7A42DB88BCBC28213A8DEEBF9492B2A41D331.mft
caRepository: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 22 May 2024 14:16:18 +0000
Certificate not after: Wed 21 May 2025 14:21:18 +0000
Subordinate resources: AS: 264216
IP: 138.99.196.0/22
IP: 177.86.48.0/21
IP: 2804:2458::/32
Validation: Failed, certificate revoked on Tue 02 Jul 2024 04:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:00:56:64:a5:d4:88:e1:bb:f2:94:ed:3c:2c:60:8c:de:8c:6c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 22 14:16:18 2024 GMT
Not After : May 21 14:21:18 2025 GMT
Subject: CN=9CD7A42DB88BCBC28213A8DEEBF9492B2A41D331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:96:bf:9f:39:cf:5b:9d:8e:27:f0:a3:9e:
22:ad:95:6d:06:ff:c0:09:d3:65:af:da:2c:ec:47:
46:33:6a:b0:9c:6a:9d:26:82:2b:e9:16:6a:3b:e8:
89:83:11:37:b1:c1:a3:4d:8f:47:5d:27:cf:32:82:
f0:80:ea:fb:40:8b:01:68:9a:cc:f2:19:40:f5:bd:
93:32:8d:64:b0:08:51:61:26:0d:aa:3d:ca:64:ef:
69:46:73:8c:c4:10:51:ab:f5:8e:4d:c9:6c:a3:0d:
5d:9c:0a:8a:bc:55:eb:20:c9:e2:ba:f6:00:8d:9c:
a0:2e:2d:d9:35:bf:1f:a0:92:0f:63:df:06:fa:c4:
38:76:4e:45:d2:9e:df:a2:3b:ac:9b:b1:f0:ed:8a:
a5:19:05:11:b8:20:68:f6:eb:d8:f9:61:de:06:c7:
21:3c:36:27:b7:28:36:17:7f:5d:e7:bc:46:08:c9:
14:a6:9e:75:b3:15:a6:f7:9b:2c:d8:c1:8d:77:4d:
1f:90:81:4a:85:fb:53:1d:34:b4:c3:30:ab:a5:d0:
aa:89:14:98:c2:6f:5b:db:d8:31:84:2a:5c:37:dc:
d6:94:7e:16:78:aa:05:3b:55:41:89:14:77:74:2d:
4e:f9:ed:2a:ce:a4:c2:d4:b5:4b:60:03:27:3c:38:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:D7:A4:2D:B8:8B:CB:C2:82:13:A8:DE:EB:F9:49:2B:2A:41:D3:31
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/9CD7A42DB88BCBC28213A8DEEBF9492B2A41D331.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.196.0/22
177.86.48.0/21
IPv6:
2804:2458::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264216
Signature Algorithm: sha256WithRSAEncryption
ca:0e:57:53:fb:68:36:95:f6:22:a7:41:af:2f:2e:0c:19:a5:
2f:dd:f3:a4:64:1e:31:f1:c7:36:8f:d7:6e:b6:1f:24:ad:8a:
3b:82:5a:24:08:92:e3:26:60:15:10:c5:eb:bd:d2:d2:c4:ea:
7a:88:df:65:6d:3a:3a:79:96:48:e7:35:52:e8:32:c4:d7:6d:
8c:26:4e:41:dc:13:ef:46:fd:c0:fb:ff:b6:90:0f:1b:61:e4:
40:2d:a4:bd:80:91:58:63:8f:e5:ba:08:f8:b9:de:5c:6f:b3:
4f:e8:41:e2:b4:ee:3c:a3:14:0f:89:55:6f:d9:21:4d:65:cf:
14:25:0c:7e:73:51:c7:d1:08:4f:f4:d7:3b:d8:e7:64:90:c4:
37:0f:88:00:79:4e:97:29:a7:3b:0d:59:58:94:95:1b:d1:fe:
95:2a:97:e3:c9:c6:ec:e7:60:a3:b2:67:84:47:21:0e:eb:04:
d2:d4:19:d9:7d:ba:af:35:8c:29:92:5c:22:35:8a:e3:9b:4a:
7f:66:5f:ed:27:f7:38:15:f1:b2:f3:4d:43:06:8f:85:f2:0e:
b6:b1:c2:d0:9f:f2:78:28:83:02:d7:d9:88:f0:b6:58:50:f6:
f7:ac:fb:5c:2b:2c:11:66:1d:db:0c:89:90:d8:95:da:eb:d0:
85:20:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 06:11:00 2024 by rpki-client on console-fra.rpki-client.org