Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D6C625408DC20FFFD3792F96BA65AC94D746D52.cer
File: 9D6C625408DC20FFFD3792F96BA65AC94D746D52.cer (raw, json)
Hash identifier: qV9+VMxCd8RYcKYgcsMQEyQimWBzysJ2nnUWa5hhOFs=
Subject key identifier: 9D:6C:62:54:08:DC:20:FF:FD:37:92:F9:6B:A6:5A:C9:4D:74:6D:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0AED31D970B093AB78A3AA10B59C14F7AD79350F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9D6C625408DC20FFFD3792F96BA65AC94D746D52.mft
caRepository: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 05 Nov 2024 17:31:29 +0000
Certificate not after: Tue 04 Nov 2025 17:36:29 +0000
Subordinate resources: AS: 271297
IP: 45.229.136.0/24
IP: 192.231.175.0/24
IP: 2804:794c::/32
Validation: Failed, certificate revoked on Mon 18 Nov 2024 17:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ed:31:d9:70:b0:93:ab:78:a3:aa:10:b5:9c:14:f7:ad:79:35:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 5 17:31:29 2024 GMT
Not After : Nov 4 17:36:29 2025 GMT
Subject: CN=9D6C625408DC20FFFD3792F96BA65AC94D746D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:d5:3e:b0:94:c2:48:78:67:50:9c:f8:13:
74:be:89:4a:17:b0:c5:8e:b3:7a:04:84:b2:01:f1:
e8:6a:9c:26:97:8a:0e:87:b8:bf:07:87:f6:de:b6:
69:48:58:1a:f5:7a:1c:bd:ee:b1:79:51:07:99:3c:
8a:33:f1:f0:2b:e6:cc:2b:2b:1e:1b:2e:83:3d:83:
8d:f9:3d:1d:a1:68:b3:ce:4e:6a:1a:d1:dd:92:62:
d3:5e:2c:b2:b6:1c:d4:d0:cd:ec:7f:23:fd:cb:3e:
ee:9a:8f:ee:7a:58:bc:bf:01:84:c0:64:45:ec:50:
8e:c5:c1:16:53:f8:56:6b:e4:b9:79:f1:09:da:6a:
55:f7:2e:8e:36:38:0a:77:36:43:02:c3:d4:e6:e3:
ab:2e:c8:e4:d2:4e:7c:41:a8:1d:6b:65:c0:0e:7e:
e7:64:95:23:15:82:cb:2a:ab:78:55:7e:c0:31:ac:
1b:b6:f9:89:7f:b9:d0:bf:3d:d8:f6:55:f0:db:57:
7a:61:fa:2c:95:f1:32:b5:2a:75:f4:59:98:de:25:
4e:8b:d6:9f:21:29:4e:37:79:a7:0a:de:3a:9a:45:
cf:c4:cf:84:17:fe:b3:11:82:28:86:9c:14:32:7a:
40:67:21:30:59:c0:d3:a4:8d:83:5c:78:7c:ce:c2:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9D:6C:62:54:08:DC:20:FF:FD:37:92:F9:6B:A6:5A:C9:4D:74:6D:52
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9D6C625408DC20FFFD3792F96BA65AC94D746D52.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.136.0/24
192.231.175.0/24
IPv6:
2804:794c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271297
Signature Algorithm: sha256WithRSAEncryption
69:ed:15:d6:79:22:ce:79:ff:dc:7a:3f:21:e4:99:51:2c:f7:
71:ea:c5:f3:78:47:c5:b3:f3:ec:d6:aa:a9:c4:47:04:e5:35:
2a:be:45:4d:97:bf:79:35:31:4c:3f:46:2f:5c:5b:50:e4:cf:
b6:a7:5a:43:7f:10:92:20:1b:91:92:50:b8:ff:47:c2:9f:26:
c1:3a:98:0c:57:4d:18:18:9f:23:be:bb:c5:49:0a:79:30:bd:
38:4b:6a:18:ec:05:08:84:8f:cf:7e:f6:99:d7:80:12:19:c1:
f4:a2:03:b3:5e:b1:5a:dc:75:06:7c:85:b9:ad:97:40:de:32:
a5:a2:a3:ef:75:f7:8a:ee:cf:ed:38:6f:3d:45:5e:e6:f2:c9:
ac:3f:88:a1:08:9b:42:bb:7b:59:ae:dd:79:76:2d:27:2e:61:
a4:fc:af:96:ff:35:85:ae:24:2b:b6:18:21:0a:09:fe:7c:6a:
17:da:6e:63:b5:8e:90:ac:28:73:f1:e6:ec:ca:b2:36:8a:5e:
7b:4b:67:4e:81:67:22:27:20:fb:67:c8:b8:6b:3b:d8:b9:8f:
26:fc:78:97:9a:98:b2:6a:e4:f9:7e:4f:a1:e6:4f:29:47:dd:
a3:1c:84:02:64:f8:b1:a3:64:5c:e0:12:2c:b0:6d:c1:c7:3b:
df:45:58:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 21:55:53 2024 by rpki-client on console-ams.rpki-client.org