Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer
File: A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer (raw, json)
Hash identifier: 1rjzeIGv/9CmS/aqcQ8faza5i+SwEg3BXKf0CsBlU2o=
Subject key identifier: A2:E8:A6:A1:F5:77:10:B7:0C:25:15:F2:15:95:65:5D:AF:C4:BC:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4C5A0B23BE40DD90C0F70685C3E71B57F0ABAB46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.mft
caRepository: rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 08 Apr 2024 20:07:43 +0000
Certificate not after: Mon 07 Apr 2025 20:12:43 +0000
Subordinate resources: AS: 264352
IP: 131.108.228.0/22
IP: 2804:1d2c::/32
Validation: Failed, certificate revoked on Thu 22 Aug 2024 03:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:5a:0b:23:be:40:dd:90:c0:f7:06:85:c3:e7:1b:57:f0:ab:ab:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 8 20:07:43 2024 GMT
Not After : Apr 7 20:12:43 2025 GMT
Subject: CN=A2E8A6A1F57710B70C2515F21595655DAFC4BCE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:79:55:6e:c4:71:3b:c4:5f:c2:58:df:6b:
f8:13:77:94:30:96:7a:82:c9:6a:67:9d:d6:e4:8e:
e6:57:16:3c:57:7f:78:8a:e7:37:36:f2:9e:8e:d9:
3b:d1:ce:08:7d:de:8f:de:51:2b:d8:c6:dd:ae:38:
72:bf:68:3c:2f:44:7e:1b:2b:18:84:d3:64:8a:24:
2e:f8:23:7f:47:3f:a6:16:07:33:e6:20:3e:2e:21:
5a:49:28:f8:a4:63:3e:5d:da:2a:c3:5b:c1:a9:f5:
42:93:87:b2:6c:07:74:d3:40:c0:36:14:79:1f:cd:
30:dc:45:dc:7a:31:5f:fb:6e:b9:80:d6:1d:da:50:
ef:36:ac:1e:83:b3:dd:94:a9:b3:47:f3:92:40:30:
49:50:bf:15:20:53:c2:a9:71:37:3e:41:66:3e:6b:
f7:4e:70:d3:ee:c4:9f:37:53:5e:ed:25:2b:82:7b:
18:67:91:0d:62:0f:6c:57:7a:22:f3:0a:fe:2f:0f:
29:6f:28:8a:e7:4a:d0:9f:53:eb:26:e0:04:98:06:
c7:b2:6e:0e:64:0f:d1:33:ae:16:aa:74:fa:27:51:
3d:92:07:c6:0b:9c:8d:d2:fd:74:a1:65:e7:b1:c8:
1e:b4:a3:be:bc:bd:0a:2f:33:ab:05:8d:73:9e:2c:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A2:E8:A6:A1:F5:77:10:B7:0C:25:15:F2:15:95:65:5D:AF:C4:BC:E0
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.228.0/22
IPv6:
2804:1d2c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264352
Signature Algorithm: sha256WithRSAEncryption
d5:77:6f:dc:4e:e9:46:a4:0b:16:80:d9:6f:f3:c4:5d:84:6a:
13:c9:b3:cf:f3:84:6d:77:93:1f:7b:35:27:40:50:1b:e0:d5:
9a:15:7c:7a:1f:2d:eb:61:0a:40:b8:5f:e2:40:27:bb:f7:28:
aa:58:b0:ee:68:1e:8b:24:9f:3c:22:d1:7c:e9:0c:8a:35:8c:
67:d2:2b:09:4a:da:3d:d0:aa:93:2b:73:e6:5e:ed:73:fc:23:
60:07:79:d3:61:e3:2d:11:26:05:4d:c9:02:f7:b6:57:33:0e:
0e:af:c5:e5:7f:7c:74:a0:2d:dd:6d:22:4d:0f:b9:55:95:18:
ef:bb:fe:26:fb:da:03:c5:0c:ac:c3:00:14:d7:37:b5:14:b7:
e6:db:09:72:cf:4e:b2:0e:03:23:31:55:dc:eb:9f:13:ca:4d:
b5:2b:38:5c:17:1d:05:17:a3:62:6d:23:3b:58:28:4d:65:bb:
04:00:e5:6c:74:2d:a6:ef:ac:8d:17:ec:b1:bf:3e:b1:a9:71:
3e:43:11:1d:d0:b3:ec:4f:92:b2:2b:ea:37:0f:32:50:d6:13:
be:e7:36:5e:77:00:1c:da:32:93:10:0a:7d:1e:09:40:a1:aa:
1d:e6:b0:5b:d5:88:1e:c0:04:e2:0c:d1:f9:48:73:64:cc:cb:
3f:78:02:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:46:00 2024 by rpki-client on console-fra.rpki-client.org