Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9ECBFC2FF2E4101039C7F79F95430A7CBEE57B5C.cer
File: 9ECBFC2FF2E4101039C7F79F95430A7CBEE57B5C.cer (raw, json)
Hash identifier: F/vqCZRCfbWQ5ssnHmuVOi9w1S5LSSCP5biomKhNg+8=
Subject key identifier: 9E:CB:FC:2F:F2:E4:10:10:39:C7:F7:9F:95:43:0A:7C:BE:E5:7B:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 07BDBE0FECA94800A466D0E0AC38E9A9B367DF30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/9ECBFC2FF2E4101039C7F79F95430A7CBEE57B5C.mft
caRepository: rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 05 Nov 2024 12:26:51 +0000
Certificate not after: Tue 04 Nov 2025 12:31:51 +0000
Subordinate resources: AS: 264065
IP: 143.202.0.0/22
IP: 2804:2a38::/32
Validation: Failed, certificate revoked on Tue 05 Nov 2024 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:bd:be:0f:ec:a9:48:00:a4:66:d0:e0:ac:38:e9:a9:b3:67:df:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 5 12:26:51 2024 GMT
Not After : Nov 4 12:31:51 2025 GMT
Subject: CN=9ECBFC2FF2E4101039C7F79F95430A7CBEE57B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:ae:bd:2e:c4:f8:83:6e:85:19:49:15:ea:
7e:00:8a:6f:b1:ac:83:5f:71:f9:c7:89:10:78:2b:
4e:b8:33:da:c9:fe:72:89:1e:d2:28:16:dd:76:b0:
73:56:06:69:4c:84:c7:b4:dd:f1:f2:6c:a7:89:c0:
62:9d:28:34:7d:e9:41:a8:1b:db:35:45:ba:4e:33:
7a:1c:7b:31:48:19:d1:5b:b4:b6:e7:00:77:ec:c8:
a8:eb:31:3c:b9:d7:49:f8:4d:e5:ff:8e:e0:a2:55:
5b:b3:69:ba:28:4a:63:70:11:3a:d7:2e:d5:71:3d:
a2:22:dd:e3:50:5e:93:e7:3f:85:1a:98:98:60:11:
4b:00:bc:15:fa:1e:99:29:6c:0a:b2:4f:08:4d:15:
13:2f:71:5b:22:ab:07:cd:20:3e:15:b6:a2:22:30:
d3:32:ee:cc:29:27:7e:b9:41:34:05:2f:7e:43:19:
98:d2:92:be:52:bc:29:1f:77:5f:b1:a4:3f:01:01:
5a:3a:3a:9e:fb:2a:00:e6:d5:6e:c7:07:f7:7c:ee:
e0:71:05:20:c3:4b:a2:e7:c4:ae:0b:42:62:18:a3:
32:37:b8:f7:9a:96:c6:e0:ba:61:80:d1:b2:16:ab:
cd:f6:94:1e:63:c7:ed:92:57:32:cf:72:39:30:f8:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9E:CB:FC:2F:F2:E4:10:10:39:C7:F7:9F:95:43:0A:7C:BE:E5:7B:5C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/9ECBFC2FF2E4101039C7F79F95430A7CBEE57B5C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.0.0/22
IPv6:
2804:2a38::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264065
Signature Algorithm: sha256WithRSAEncryption
a6:1b:20:7b:a7:d3:63:7b:50:09:45:9c:76:38:e8:be:56:ca:
35:a2:ef:e3:98:08:b3:d6:11:fb:05:69:e9:18:1b:20:25:cd:
1f:04:e8:c0:95:86:27:86:c8:9b:3f:db:09:f2:b8:56:37:50:
8b:e1:75:c1:f9:95:4e:e0:8e:69:4b:c4:ce:b0:ef:d4:f3:69:
c9:ea:b7:91:f3:c1:c8:f7:1a:61:6c:ed:c6:75:62:34:81:af:
6c:70:80:d8:37:0c:26:03:3d:c1:71:6f:f6:70:0d:31:70:08:
1e:25:3c:45:a8:87:31:48:43:a9:a9:1f:1b:04:e2:18:4a:f9:
ae:92:74:2c:b6:8f:8b:d7:17:11:91:65:4d:3e:20:b6:e3:fd:
db:62:5c:39:11:82:95:0e:e5:c5:d0:19:d1:7c:43:39:ae:c6:
17:e0:6d:49:0f:58:f8:53:0d:19:06:63:db:e5:cf:0c:31:40:
76:5f:3d:97:91:d5:70:87:ff:1c:e7:48:74:c6:bc:18:89:5f:
ea:dc:b3:18:3d:5f:4a:8d:1c:79:ee:78:74:26:eb:43:f5:45:
6b:aa:78:c1:f9:24:13:02:49:32:6b:14:17:42:a5:fa:af:27:
57:55:ab:86:71:4f:02:91:c9:5a:4b:0e:a7:62:c7:01:79:82:
49:e7:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 21:31:32 2024 by rpki-client on console-ams.rpki-client.org