Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.cer
File: 9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.cer (raw, json)
Hash identifier: TGRJrjmymw1E5nHWNxwnoyrJ91FWxf8efly/vWobCWs=
Subject key identifier: 9E:8F:BC:EF:C8:D1:CE:0E:FF:BD:BA:FC:7D:C4:59:2C:14:C6:D4:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 465FD39C3BCCB22F08DD9C372AF910459B491E5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.mft
caRepository: rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 14 Oct 2024 17:19:39 +0000
Certificate not after: Mon 13 Oct 2025 17:24:39 +0000
Subordinate resources: AS: 273408
IP: 2804:8e2c::/32
Validation: Failed, certificate revoked on Mon 04 Nov 2024 13:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:5f:d3:9c:3b:cc:b2:2f:08:dd:9c:37:2a:f9:10:45:9b:49:1e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 14 17:19:39 2024 GMT
Not After : Oct 13 17:24:39 2025 GMT
Subject: CN=9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:a3:c0:6a:97:63:38:b3:d4:fb:9f:d0:d7:
e4:ef:2a:af:06:46:da:ea:bd:29:8d:56:bf:b2:5f:
0b:53:65:3a:30:c8:e7:9b:7f:1b:82:7a:f4:27:74:
2a:c1:a2:b5:32:32:d9:61:33:b6:1e:49:19:63:9b:
08:d6:e1:d1:67:76:f2:5a:9a:20:1f:3c:36:39:3c:
8f:0b:80:8c:a0:39:37:5a:cf:77:55:e2:c0:33:15:
61:b2:57:56:84:f1:3d:ef:16:f1:09:76:cf:2a:8a:
64:0a:16:94:a7:ec:de:37:e9:c0:7e:fb:b6:32:0f:
1b:a7:69:e5:68:7b:49:c1:54:7e:85:16:8b:70:c3:
7a:cb:6d:55:ae:7f:c5:ff:ad:0f:7e:c3:cd:52:2f:
04:e9:6f:48:67:ee:df:cc:a9:0a:6f:3f:2e:64:1b:
9b:63:91:8b:85:4b:7f:ae:ea:3c:29:89:a0:85:20:
3f:90:f1:2e:11:ec:f7:3f:eb:1d:cb:6e:e0:a7:a8:
00:2d:d7:13:73:8d:5b:c9:8f:e2:8e:f0:75:ee:21:
15:b7:56:c0:a6:a8:eb:89:90:dd:47:1c:68:f8:4d:
5e:89:f0:a9:fc:8f:5b:8d:c2:4f:b9:5e:aa:94:a0:
e5:87:4b:c1:63:b1:aa:bb:bc:e3:14:3f:6d:4b:1e:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9E:8F:BC:EF:C8:D1:CE:0E:FF:BD:BA:FC:7D:C4:59:2C:14:C6:D4:94
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8e2c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273408
Signature Algorithm: sha256WithRSAEncryption
48:09:23:2c:8b:30:7b:b4:75:3c:b8:02:fe:5d:74:1f:dc:34:
57:74:eb:a5:c4:1a:96:f0:df:c3:40:88:33:b5:89:1e:12:cf:
a7:5b:d7:58:17:af:f1:c4:e9:1a:d9:3a:ca:62:93:52:33:de:
d0:a3:fb:3c:c9:a1:c4:26:c0:05:8c:c1:48:c7:8b:e8:8a:a6:
a1:a0:69:87:c9:53:32:f5:ac:d0:2c:4d:fb:58:55:54:e0:8b:
8c:0f:2b:7b:6b:65:1f:a4:db:0a:98:c0:e0:3c:fe:8d:40:5c:
15:21:64:64:b8:13:96:d0:2c:bc:5f:7a:6f:92:6b:b5:9e:2e:
98:07:1c:cc:2c:0e:ba:d9:2e:cc:2e:cb:16:0a:0b:8c:9a:54:
5e:e3:8e:8d:d5:13:c3:e4:3f:1d:c3:0a:87:e2:51:1a:a7:4d:
d0:d4:74:36:b4:01:bc:e3:5f:a9:a4:d6:54:26:0e:10:bf:4b:
a9:63:69:c1:a0:fd:5e:1e:3a:1a:62:1f:7a:f1:68:9f:69:70:
54:e6:55:87:ce:28:e2:22:4d:8f:e0:ab:1a:d8:5c:c0:a2:95:
91:8a:6d:a1:6b:c5:51:80:96:0f:c5:27:b1:9a:f6:b7:09:e4:
53:9c:3a:b7:89:c8:1e:5b:68:8c:33:60:b3:7b:79:b1:40:36:
f8:95:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 18:13:01 2024 by rpki-client on console-fra.rpki-client.org