Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9E0F54A66EE24977B17CBFE8CE4F6B70DA1957DA.cer
File: 9E0F54A66EE24977B17CBFE8CE4F6B70DA1957DA.cer (raw, json)
Hash identifier: 2SDtcRto7g4XBmiG4ZbqDGwakUmgR+kDndzsIDNa4gY=
Subject key identifier: 9E:0F:54:A6:6E:E2:49:77:B1:7C:BF:E8:CE:4F:6B:70:DA:19:57:DA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 26DE2F244718F3AE876C1F81CFBAA26304177D46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/9E0F54A66EE24977B17CBFE8CE4F6B70DA1957DA.mft
caRepository: rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 15 Aug 2024 13:24:10 +0000
Certificate not after: Thu 14 Aug 2025 13:29:10 +0000
Subordinate resources: AS: 264927
IP: 168.228.184.0/22
IP: 201.159.90.0/23
IP: 2804:3008::/32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 19:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:de:2f:24:47:18:f3:ae:87:6c:1f:81:cf:ba:a2:63:04:17:7d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 15 13:24:10 2024 GMT
Not After : Aug 14 13:29:10 2025 GMT
Subject: CN=9E0F54A66EE24977B17CBFE8CE4F6B70DA1957DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:10:f2:bf:45:91:75:6a:34:b8:b4:4f:1f:
31:a9:c5:e6:eb:ae:4e:f3:91:fd:c1:ba:cf:87:87:
14:ac:48:00:1c:d4:81:e6:b3:94:86:cb:8c:d9:25:
f7:5a:99:b1:49:b5:ae:2f:00:e0:70:ec:81:57:e0:
c8:dc:75:ee:ef:bb:0f:f2:20:01:99:80:e4:a7:62:
75:9b:2a:54:f5:65:43:42:d1:e6:8f:23:c6:9c:56:
2e:9c:51:81:79:15:9e:74:c9:24:39:53:f6:15:2d:
f2:40:85:8f:08:e6:54:eb:c8:6e:0f:1d:c0:95:fd:
62:31:fd:c7:5f:ce:b8:a9:8d:7e:6f:2a:cc:26:fc:
b1:30:89:af:6c:2a:95:79:7d:3d:fc:1d:46:07:7a:
d7:6d:fa:02:c7:da:1d:94:c7:ff:bf:08:27:da:f0:
37:37:e9:d2:be:36:a8:ab:41:86:b7:9e:3c:31:f8:
8f:fb:14:4c:2a:af:16:74:9d:c7:6b:c4:85:8a:d4:
62:2a:30:09:3b:db:41:9d:82:3b:aa:a6:cf:4b:0d:
76:40:ab:33:21:ac:36:3b:11:cc:bf:05:1c:c5:a2:
94:38:98:af:72:4b:f5:64:5d:ed:a2:b4:e1:9a:68:
95:cb:21:ab:00:fc:d7:6b:d7:61:58:ac:cf:6b:ca:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9E:0F:54:A6:6E:E2:49:77:B1:7C:BF:E8:CE:4F:6B:70:DA:19:57:DA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/9E0F54A66EE24977B17CBFE8CE4F6B70DA1957DA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.184.0/22
201.159.90.0/23
IPv6:
2804:3008::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264927
Signature Algorithm: sha256WithRSAEncryption
b6:72:9d:ee:06:8c:ed:9a:58:e2:12:fb:84:00:12:e4:90:c0:
aa:d2:1d:f4:32:3b:10:79:42:f8:f2:37:df:25:46:91:bf:0a:
d2:43:90:93:4a:ee:fa:34:47:39:fe:c4:0c:54:f2:3a:e9:49:
f6:9e:6c:ca:62:96:16:62:ca:44:49:a0:49:cd:8e:f1:ce:50:
a1:e5:8c:ae:fe:26:cd:b9:7c:64:85:09:22:56:97:5e:f0:74:
30:f8:37:52:17:35:0d:c8:a3:c2:aa:1c:0a:21:77:6d:07:98:
9c:8c:8e:83:cd:a0:30:8b:92:31:b6:ec:93:78:a2:62:f8:bd:
f5:04:be:a7:9d:61:05:6d:4e:e0:13:34:9e:17:79:64:ad:aa:
99:07:eb:fd:3c:ee:71:74:21:0b:17:cf:60:b5:26:43:97:05:
b8:da:53:6a:67:3b:2e:ed:c9:02:c8:a6:2d:78:3f:70:9f:04:
54:05:ce:88:74:22:f4:f1:77:19:e9:b5:15:eb:db:b6:65:d6:
bc:4f:9a:f6:19:91:9a:f7:c4:b4:0e:d8:4b:7b:d7:ce:e4:31:
de:2f:b3:b6:17:3b:7c:98:56:0f:8e:f9:53:31:08:0f:d3:f4:
0c:13:53:a8:4e:1c:ff:b7:44:dc:36:a9:a6:73:a8:3d:11:49:
61:dd:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 22:18:32 2024 by rpki-client on console-fra.rpki-client.org