Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.cer
File: AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.cer (raw, json)
Hash identifier: lxQm0QnhLnkdHu7m2GpocUPKfqtmBmXxqCCJ0EzbZvc=
Subject key identifier: AA:30:F7:8D:E6:E9:B0:80:AA:F8:A4:AB:04:2F:F1:BD:2C:8B:61:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 066A9E20AF8E4B7CCA9D45CF4572BAB1B324FD45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.mft
caRepository: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 09 Sep 2024 23:36:32 +0000
Certificate not after: Mon 08 Sep 2025 23:41:32 +0000
Subordinate resources: AS: 267142
IP: 45.229.240.0/22
IP: 2804:48c0::/32
Validation: Failed, certificate revoked on Wed 23 Oct 2024 02:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:6a:9e:20:af:8e:4b:7c:ca:9d:45:cf:45:72:ba:b1:b3:24:fd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 9 23:36:32 2024 GMT
Not After : Sep 8 23:41:32 2025 GMT
Subject: CN=AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:84:83:ff:cc:06:d8:4c:fc:1a:fc:90:0f:
b2:54:3b:c1:54:64:99:30:cb:80:23:46:d2:72:15:
2f:14:0d:60:1d:30:5f:be:04:14:77:ff:3f:25:d6:
ce:71:13:c8:a9:58:e8:55:5f:d6:c6:df:e4:ee:e0:
b4:26:a1:26:f6:de:92:6e:cb:c7:5f:45:78:ee:2f:
16:35:e6:a6:bc:b8:e8:f9:71:41:f0:6f:39:13:54:
d2:a7:b4:44:da:14:23:9d:a1:19:92:26:83:04:44:
8d:e9:83:7e:aa:d3:f8:9f:f6:52:b2:c6:61:69:85:
c6:f9:bf:ae:22:50:cd:47:3a:fd:df:6e:ba:dc:f4:
b0:6d:0e:ec:17:4b:03:59:20:a1:33:ee:2a:40:d0:
e7:fa:ee:7c:b4:1d:96:98:b5:d6:33:47:f3:cf:1e:
cd:e2:c5:82:ac:a2:6f:83:48:fc:39:11:47:cc:4f:
13:3d:5f:9e:89:80:c5:c3:8a:c5:46:58:be:4a:9b:
ba:05:2e:bc:76:76:7f:9e:bf:15:62:0b:11:fe:03:
c2:2e:1e:f1:cb:8c:45:d8:f0:94:18:5d:f4:12:50:
49:97:89:a1:e4:73:c1:fa:36:9b:4d:28:2c:3d:c2:
4e:b8:aa:78:08:44:0f:1f:2f:d3:89:62:5e:f6:bf:
dc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AA:30:F7:8D:E6:E9:B0:80:AA:F8:A4:AB:04:2F:F1:BD:2C:8B:61:EE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.240.0/22
IPv6:
2804:48c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267142
Signature Algorithm: sha256WithRSAEncryption
4d:37:03:4c:e3:7f:db:11:08:49:97:69:2a:a5:33:f1:bf:c3:
bf:1f:ab:3f:8f:14:10:46:02:83:56:d6:c1:aa:f6:34:58:9a:
1d:ec:6c:38:b5:1c:8f:2b:0c:90:e8:10:b5:20:a0:eb:7f:32:
ae:7f:80:4e:70:d6:2c:f0:19:c6:70:12:fe:ee:2a:31:d6:26:
c3:40:e1:d4:a3:11:db:87:91:b8:3e:7e:2a:f5:93:77:fe:14:
8b:67:f5:af:c8:41:a0:e5:bf:08:6d:1d:d4:62:35:4a:40:e1:
03:35:92:26:7e:e7:be:40:c3:1b:93:08:ca:29:7b:bd:f9:10:
93:b1:05:79:ab:42:b0:44:62:a3:04:83:69:4c:22:f8:72:53:
67:0a:bc:82:5d:b2:07:96:d8:a3:9c:39:91:95:aa:d3:4e:6e:
5e:d0:45:e0:44:b5:53:77:dd:7b:77:60:1d:9e:d7:9d:9c:77:
29:b8:1b:60:8b:e3:37:82:22:87:dc:ad:78:96:33:93:55:0a:
e4:ef:70:f1:c7:fc:06:d8:b5:eb:0e:29:e7:cc:ad:1b:c0:e7:
a6:f1:f3:0c:4b:f6:b6:3d:16:4d:6c:90:08:68:fb:48:9f:ee:
90:3c:7e:ba:4c:d9:df:9d:ef:fd:2e:ee:3d:1d:d7:f2:0d:31:
ad:b9:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:07:02 2024 by rpki-client on console-fra.rpki-client.org