Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.cer
File: A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.cer (raw, json)
Hash identifier: ZLGTMuerydvwksgogKRAPOt0XQUtBvS+RZB3qjEkeaw=
Subject key identifier: A8:38:05:AA:B0:B5:A6:B0:33:CA:8E:AC:FC:11:FD:06:73:D0:0D:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 29578FAB1DF1EF4D7FE4AB38C7F7B7C6CB5D240E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.mft
caRepository: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 05 Jul 2024 19:55:44 +0000
Certificate not after: Fri 04 Jul 2025 20:00:44 +0000
Subordinate resources: AS: 273431
IP: 186.227.76.0/22
IP: 191.7.0.0/23
IP: 2804:8e84::/32
Validation: Failed, certificate revoked on Mon 11 Nov 2024 20:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:57:8f:ab:1d:f1:ef:4d:7f:e4:ab:38:c7:f7:b7:c6:cb:5d:24:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 5 19:55:44 2024 GMT
Not After : Jul 4 20:00:44 2025 GMT
Subject: CN=A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:a9:a3:d2:e9:e3:25:15:17:5c:58:66:7f:
39:8f:d3:30:d8:7d:f9:88:52:fe:2b:7b:84:5c:2e:
0d:2a:c8:60:db:54:fb:8c:b2:69:54:d6:10:16:18:
f4:a8:bf:f6:6a:fa:9d:0f:16:e0:47:55:3b:7c:20:
86:46:5c:ee:19:dc:5e:ba:9e:19:0c:a4:fe:37:96:
ff:b5:5b:6c:5c:a9:1d:19:0d:5f:e8:2b:93:d8:86:
a0:fb:87:cf:f8:84:20:6f:d1:c0:ff:da:59:3e:a4:
45:4c:c3:ac:ff:68:5f:a9:21:60:e4:1d:09:06:68:
bc:ef:1a:bf:d8:71:f3:16:d9:f4:c7:a7:e5:e8:3f:
d6:6d:5d:dc:e3:a4:59:64:80:69:a5:1c:28:b3:ee:
32:b2:07:ed:62:9c:43:c0:c2:b4:54:8e:dd:c1:97:
10:d6:63:c4:9e:f2:41:e2:21:b9:32:79:81:a9:59:
a8:2f:16:3c:3d:fe:92:1d:da:3f:cc:c2:5b:d4:ac:
ad:ba:7f:46:c3:88:0f:2f:86:7b:0d:f2:f8:ff:23:
05:64:c1:71:4c:ad:9d:8b:af:39:c7:99:67:23:19:
b8:ca:50:f9:8a:11:71:58:61:95:ca:a8:d7:0a:5e:
07:56:a5:49:ce:b1:2e:66:2a:de:bd:cf:9b:d3:c2:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A8:38:05:AA:B0:B5:A6:B0:33:CA:8E:AC:FC:11:FD:06:73:D0:0D:EC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.227.76.0/22
191.7.0.0/23
IPv6:
2804:8e84::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273431
Signature Algorithm: sha256WithRSAEncryption
49:fd:a3:28:c3:15:45:35:da:9b:28:df:c7:c4:d5:14:d1:16:
ea:fe:75:5f:bb:3b:b0:7f:bb:c9:c6:bc:77:83:7a:fd:a9:38:
cf:50:39:c3:5e:a5:95:83:12:ab:20:26:e6:b3:dc:01:a6:24:
59:40:69:c2:2e:3b:20:6d:eb:ae:17:02:c2:5e:c8:72:55:b3:
ad:d7:71:84:9e:78:7f:7c:ab:17:39:e8:41:88:a1:b8:ed:c6:
0e:50:77:5c:42:54:09:20:f7:3d:af:5a:bc:97:ea:8c:fb:1e:
32:a4:47:f6:93:1d:ed:2e:0b:2f:61:d5:4a:5c:b6:e9:72:ef:
06:e1:40:a8:23:ae:3c:e6:72:97:6f:c6:d1:41:4b:b7:06:15:
3e:e7:92:e1:ce:38:a0:ec:25:4f:3d:22:d5:d7:89:5c:a1:54:
38:39:0e:ea:31:00:ed:33:32:90:58:3e:fb:dc:fc:d0:f0:e4:
48:c4:22:93:c2:cc:91:7d:28:cc:7b:29:9f:d1:50:6f:15:8a:
4d:b4:61:6a:42:89:71:56:b5:7f:fb:1d:36:5c:2e:13:f9:80:
bc:3e:1f:a4:bc:c5:10:de:a8:47:c4:f2:13:cd:f6:e4:58:d0:
2e:73:09:fc:05:fe:53:88:91:69:d7:d5:ab:e6:08:32:42:19:
64:1c:c6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 00:00:59 2024 by rpki-client on console-fra.rpki-client.org