Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
File: A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer (raw, json)
Hash identifier: kPb5wBhtRDrY51wwop/GZTsD36bm/5JEOHPLcdhZDj8=
Subject key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1840DC1DDFC314F05B0F55CC38F1514EB8851F82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.mft
caRepository: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 07 Nov 2024 20:35:16 +0000
Certificate not after: Thu 06 Nov 2025 20:40:16 +0000
Subordinate resources: AS: 28270
IP: 131.196.76.0/22
IP: 131.221.68.0/22
IP: 138.117.124.0/22
IP: 138.121.220.0/22
IP: 138.122.236.0/22
IP: 143.255.112.0/22
IP: 160.238.220.0/22
IP: 168.121.52.0/22
IP: 168.227.44.0/22
IP: 168.228.128.0/22
IP: 168.232.116.0/22
IP: 170.0.204.0/22
IP: 170.245.100.0/22
IP: 170.247.52.0/22
IP: 177.66.64.0/21
IP: 177.67.0.0/21
IP: 177.70.128.0/20
IP: 177.75.192.0/19
IP: 177.87.144.0/21
IP: 177.130.192.0/19
IP: 179.191.128.0/19
IP: 186.219.144.0/20
IP: 186.233.72.0/21
IP: 187.18.128.0/17
IP: 187.108.96.0/20
IP: 187.110.208.0/20
IP: 189.45.64.0/18
IP: 189.50.144.0/20
IP: 191.6.80.0/21
IP: 200.94.240.0/22
IP: 201.149.120.0/22
IP: 2804:880::/32
Validation: Failed, certificate revoked on Thu 07 Nov 2024 20:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:40:dc:1d:df:c3:14:f0:5b:0f:55:cc:38:f1:51:4e:b8:85:1f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 7 20:35:16 2024 GMT
Not After : Nov 6 20:40:16 2025 GMT
Subject: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:06:85:42:21:d9:9b:89:ca:00:f6:bd:de:
e6:b5:3b:96:4f:06:55:2f:4d:9e:af:59:60:1a:31:
7e:ab:eb:ef:f0:c3:6f:43:97:10:3c:9f:6d:f0:a5:
4d:a1:83:d4:05:cb:ef:c5:d1:b2:25:79:30:a8:50:
fb:fb:32:bb:51:07:7c:73:10:cb:c6:00:25:95:0e:
57:46:47:da:48:85:64:88:79:94:6d:c6:26:3a:6b:
d6:01:d5:0c:b3:18:f2:41:5d:1a:c5:b5:3d:37:17:
3c:ce:cb:37:d6:ae:85:1a:61:70:3e:a8:a1:00:9e:
cb:5a:a1:5a:33:f4:fc:15:2e:ed:58:26:39:8e:2b:
83:10:9d:75:80:76:42:84:9c:c3:8d:3c:69:01:9b:
4e:30:45:52:f4:1d:22:47:de:d1:ef:48:6b:a8:70:
84:65:01:b8:f9:51:86:44:24:91:71:7a:59:ed:1b:
19:7e:14:96:c3:af:b3:e9:b7:b7:37:e4:69:43:88:
b5:a5:ef:e8:b6:52:93:a6:43:4a:c9:75:b0:7a:5f:
ec:ec:35:fb:92:06:19:34:be:23:e4:03:68:40:ec:
a7:f7:81:1a:8f:51:8c:30:60:7c:ac:ab:32:e5:8e:
f4:51:39:b6:15:33:03:62:c9:d2:16:69:52:de:35:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.76.0/22
131.221.68.0/22
138.117.124.0/22
138.121.220.0/22
138.122.236.0/22
143.255.112.0/22
160.238.220.0/22
168.121.52.0/22
168.227.44.0/22
168.228.128.0/22
168.232.116.0/22
170.0.204.0/22
170.245.100.0/22
170.247.52.0/22
177.66.64.0/21
177.67.0.0/21
177.70.128.0/20
177.75.192.0/19
177.87.144.0/21
177.130.192.0/19
179.191.128.0/19
186.219.144.0/20
186.233.72.0/21
187.18.128.0/17
187.108.96.0/20
187.110.208.0/20
189.45.64.0/18
189.50.144.0/20
191.6.80.0/21
200.94.240.0/22
201.149.120.0/22
IPv6:
2804:880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28270
Signature Algorithm: sha256WithRSAEncryption
0d:5b:fa:c3:31:15:df:98:8f:96:ce:5f:b5:8d:11:f9:6b:ce:
e7:ae:2d:32:06:e3:94:18:18:29:3e:1b:ec:e6:b7:60:06:7a:
da:65:31:16:61:42:55:4d:58:3a:52:06:8d:13:63:6d:1b:7d:
36:3b:22:9c:f9:75:62:74:88:e7:50:ca:42:78:73:94:41:6f:
c3:d5:fd:40:ff:be:b4:81:c5:bb:4d:54:83:8c:1e:ee:fd:cc:
e1:17:ba:9a:87:86:94:4b:0c:ad:f2:c0:23:80:a2:de:0b:0f:
aa:1c:49:ec:46:c3:33:d8:c5:44:3a:62:e1:15:da:f7:5d:3c:
94:4d:3b:79:fb:3d:9f:d1:ba:b7:8b:21:4f:bd:fc:db:02:ae:
04:37:b2:a7:2d:2b:82:2c:d2:8b:d3:ea:28:97:0b:2a:d7:97:
4b:fc:e7:a1:03:37:92:4e:90:c3:57:4d:d6:26:b2:6e:c8:94:
23:97:77:2b:96:df:b9:a3:3a:a0:e9:f5:32:0b:57:75:7f:48:
c1:c9:87:d0:aa:a4:d6:53:bf:bb:8e:24:de:41:64:b8:82:e0:
dc:39:a7:29:d9:e0:7d:2c:1d:9d:e0:1b:a7:89:60:45:e0:21:
23:79:63:82:3f:53:b0:bf:48:56:81:54:93:61:4b:48:f4:5c:
51:d5:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:10 2024 by rpki-client on console-ams.rpki-client.org