Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
File: A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer (raw, json)
Hash identifier: Q4ZcwE2Rb2zDMX+rKPR0oVr3q5NuKOt1xRlt+RC5CH0=
Subject key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6DE088E9941CF9E9F70265704B955AF70A25F3B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.mft
caRepository: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 07:55:23 +0000
Certificate not after: Thu 03 Apr 2025 08:00:23 +0000
Subordinate resources: AS: 263558
IP: 143.255.196.0/22
IP: 186.237.216.0/21
IP: 2804:ef0::/32
Validation: Failed, certificate revoked on Sun 06 Oct 2024 12:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e0:88:e9:94:1c:f9:e9:f7:02:65:70:4b:95:5a:f7:0a:25:f3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 07:55:23 2024 GMT
Not After : Apr 3 08:00:23 2025 GMT
Subject: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:56:83:e2:33:8f:0f:f3:e3:25:6c:24:26:16:
73:6d:01:f5:3e:97:32:36:d9:98:6f:db:d5:37:0d:
e0:fd:8f:20:b4:4e:f6:7e:03:f5:e9:a5:ef:9b:02:
ea:d4:01:cf:97:d1:96:fc:97:6b:4b:7c:a8:da:c8:
0a:3f:87:3b:61:87:35:f1:1b:1f:f3:f6:b4:f9:38:
fa:ba:31:48:80:c9:49:20:30:80:69:73:a3:fa:3b:
ae:36:93:a8:68:df:b8:3a:18:3c:f7:f6:5c:ca:fb:
48:a7:28:03:13:94:4e:5e:42:ef:53:b5:83:e8:e7:
a5:47:e0:d8:a1:07:a6:99:e8:da:66:ec:2a:fa:37:
d3:ec:26:12:e3:4c:1e:30:f4:b2:e1:c6:ed:ba:3d:
eb:82:8b:a4:f4:c6:af:06:a3:dc:40:a7:68:b0:6e:
fc:97:e7:81:d5:f5:f0:01:f7:32:4e:96:13:fe:f3:
04:c3:44:be:88:35:66:9d:de:e2:67:17:83:31:64:
c6:25:f0:18:f4:f7:75:aa:35:95:dc:48:dc:84:4d:
f4:11:b8:3c:71:97:b9:fc:8a:b4:54:00:04:90:a9:
b8:06:c4:8a:4e:1a:4b:b2:d0:6d:95:3c:93:0c:0f:
c6:1a:9f:ae:24:0e:5d:3b:09:2e:1d:b5:d5:57:54:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.196.0/22
186.237.216.0/21
IPv6:
2804:ef0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263558
Signature Algorithm: sha256WithRSAEncryption
c2:f1:ac:b9:c8:1d:71:4e:ef:20:c7:59:fe:e1:9e:b0:eb:c6:
25:ec:54:25:fd:2e:dd:d1:be:dc:ed:b8:1f:fa:bd:33:90:b9:
17:8e:01:22:7c:f7:15:e3:09:f9:87:ab:f8:79:d5:6b:6b:a8:
b9:f1:07:33:92:94:72:25:7f:27:79:a7:85:9c:66:a0:2b:0a:
32:61:57:51:0b:df:ee:85:42:39:f3:e9:dc:e3:df:78:5c:4b:
b2:e5:f5:72:b8:a3:1f:d5:a3:92:d7:55:8a:96:cf:73:21:1a:
a4:9b:10:0e:c3:6e:f9:00:35:ec:7f:7a:d0:8b:b7:c7:d1:73:
0d:78:ce:41:dc:23:b4:22:5b:0e:50:cc:9c:34:91:25:c6:af:
15:64:f6:90:d7:0a:fd:d5:08:ec:84:ec:e4:ed:95:82:06:4e:
8a:fc:6f:5e:f5:d3:d1:d5:27:1a:7e:2e:5b:a5:2d:90:d8:ed:
bd:1c:83:85:a7:5c:6b:87:0a:db:85:a1:da:b7:12:03:24:c9:
21:a1:83:bc:2b:ac:1d:e4:93:d3:52:4e:b9:b6:99:e8:a3:c0:
49:cd:dd:5b:bf:88:51:65:0b:76:8c:f6:34:2c:df:a8:e6:c1:
ea:31:6b:9e:99:60:db:a9:ca:e8:e4:08:b4:ff:98:6a:1a:b2:
ef:0b:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 16:43:52 2024 by rpki-client on console-fra.rpki-client.org