Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.cer
File: A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.cer (raw, json)
Hash identifier: R05pdhqkPn97EAG/8htibrFqdsice+GJ4O9wbeSEe+4=
Subject key identifier: A1:C8:A1:A0:58:DF:2C:D3:1B:ED:8D:3D:82:EC:49:DB:5C:06:38:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1F3F053F0BB8499BDF0164DE84E4CA99B2816D9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.mft
caRepository: rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 06 May 2024 16:28:34 +0000
Certificate not after: Mon 05 May 2025 16:33:34 +0000
Subordinate resources: AS: 272724
IP: 177.55.92.0/23
IP: 2804:87a8::/32
Validation: Failed, certificate revoked on Mon 28 Oct 2024 04:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:3f:05:3f:0b:b8:49:9b:df:01:64:de:84:e4:ca:99:b2:81:6d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 6 16:28:34 2024 GMT
Not After : May 5 16:33:34 2025 GMT
Subject: CN=A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:15:38:18:19:a5:20:7a:23:01:8b:b7:27:
15:6a:ff:5a:03:8a:45:bc:33:f2:6b:42:45:4c:0f:
44:82:d4:bf:c1:a0:54:d5:dd:2f:47:46:27:35:87:
e2:51:4f:29:7f:54:79:88:7f:95:5b:6e:e7:74:d9:
d0:cc:73:62:f7:76:b0:78:21:ed:87:19:f0:d6:af:
30:7d:a4:fb:f6:f7:62:aa:c3:df:00:66:d1:e4:66:
9c:6c:17:dc:6a:2b:7b:05:64:8a:2a:f0:57:37:43:
f1:33:d7:73:7f:68:f4:d7:0b:b3:ff:42:39:6b:99:
63:27:af:a8:af:95:9a:b6:92:7a:bc:0b:d0:b2:2f:
cb:51:6a:a9:20:f0:9b:b1:94:b5:40:2f:2a:80:32:
5c:97:e9:a5:70:d9:40:66:87:99:0f:7c:2f:e7:6f:
d6:73:80:bd:1f:31:04:65:3b:83:9e:8a:6c:a0:fe:
8d:1f:5b:c0:8a:63:37:2c:32:ab:77:a0:e2:d3:da:
d5:61:19:3a:33:06:70:04:5b:1d:d9:8b:19:ac:fc:
d1:65:04:cc:da:ec:2c:f2:38:9f:98:ce:47:e5:c0:
f0:e5:84:ef:27:af:9e:96:fa:3b:79:23:2c:88:9a:
e1:6f:7d:a0:11:96:de:7e:3b:24:58:75:a6:30:90:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A1:C8:A1:A0:58:DF:2C:D3:1B:ED:8D:3D:82:EC:49:DB:5C:06:38:29
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.55.92.0/23
IPv6:
2804:87a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272724
Signature Algorithm: sha256WithRSAEncryption
a9:73:d6:9e:77:20:43:aa:9d:08:61:10:d2:29:c5:e8:07:8b:
87:e5:42:8f:02:24:c5:98:89:20:70:79:34:71:5e:bc:fa:40:
e9:8c:b5:e2:41:7b:ef:34:bb:4a:de:68:22:38:88:09:94:78:
63:b4:4f:72:6b:29:35:f3:12:37:46:69:24:f6:9e:95:ad:59:
3c:b4:3f:b6:57:60:33:10:f3:0f:a6:1e:47:09:68:45:60:52:
26:af:29:eb:2c:09:09:99:63:5f:3b:45:04:38:77:3f:08:c9:
30:d3:62:a6:9b:29:ff:50:17:d3:f1:81:8b:80:6d:ce:7e:26:
94:57:c9:6f:f8:2b:e7:99:1e:9c:83:24:96:fd:b0:30:1b:f1:
59:d4:3f:b8:3f:72:18:77:c8:32:7e:b7:49:c3:8e:50:e1:31:
d5:b2:3a:e4:e9:b2:e9:60:5e:d0:4a:57:26:71:61:61:6c:9f:
78:7d:92:e9:20:b0:6f:73:77:78:7a:4d:0a:c9:b5:95:3b:5e:
52:47:9f:55:95:d7:9b:c6:2b:a5:fc:33:9b:71:a7:0c:58:66:
d1:df:bc:dc:b2:5a:ae:86:25:36:3c:d3:c0:5b:45:0c:fa:92:
c4:7d:56:61:11:b6:a7:e7:e3:b5:78:dd:ac:0f:a7:48:e3:60:
5d:fc:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 07:37:32 2024 by rpki-client on console-ams.rpki-client.org