Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer
File: AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer (raw, json)
Hash identifier: nIw2KdH13OPJFYbo1Q6AlHITgOaPlU5U+hGhGKwgztw=
Subject key identifier: AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 058751FC98EBB20E215E3EDE1835E1C75C1B3134
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.mft
caRepository: rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 03:36:29 +0000
Certificate not after: Thu 03 Apr 2025 03:41:29 +0000
Subordinate resources: AS: 268056
IP: 45.168.88.0/22
IP: 2804:5748::/32
Validation: Failed, certificate revoked on Sat 13 Jul 2024 22:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:87:51:fc:98:eb:b2:0e:21:5e:3e:de:18:35:e1:c7:5c:1b:31:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 03:36:29 2024 GMT
Not After : Apr 3 03:41:29 2025 GMT
Subject: CN=AABCA739AD2EC3C35CC470A886CE5C2C87353AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:85:6a:50:a6:39:e5:7f:7f:b7:bf:91:a1:
23:8c:93:42:70:04:0d:48:8a:6f:0c:72:39:b5:7e:
87:ad:1f:7a:a9:75:9c:fd:d4:b5:6f:c7:72:26:a2:
f8:0b:85:fc:b9:c1:c4:04:36:37:8f:65:8b:d1:42:
17:c3:81:ba:a5:4e:e2:fa:e3:77:d0:c9:fd:1f:82:
fa:17:c2:31:a7:1a:ce:6a:79:41:fc:69:85:59:fd:
1b:49:ae:d3:2e:dc:f3:6c:c1:55:6c:32:c0:46:8e:
0f:ad:5d:a8:ce:60:68:56:c2:cc:2c:f0:f0:da:35:
de:bd:08:2f:ce:b4:22:42:1d:b8:f5:c3:51:7f:03:
f4:79:26:f8:0f:a0:5a:9d:15:86:3e:c1:da:69:77:
b0:62:f4:f8:62:f8:54:c6:5c:37:f9:b4:46:d6:d1:
81:1d:0f:61:3a:5c:85:92:ee:cf:fd:9b:fb:c3:66:
84:93:2c:50:27:34:57:7f:99:a9:89:f0:97:19:84:
2b:2c:a5:4b:a7:5c:99:5d:34:b3:7a:21:52:85:84:
d0:64:58:6f:c0:9e:f7:77:32:2a:49:45:24:9f:98:
65:71:d0:b1:0f:dd:19:ac:d7:c2:df:ac:4e:87:ab:
b7:bb:9f:82:71:a2:69:ba:9b:af:66:d0:0e:2e:6b:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.88.0/22
IPv6:
2804:5748::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268056
Signature Algorithm: sha256WithRSAEncryption
00:62:20:22:af:dd:cb:e4:14:0b:b8:e1:bc:09:f6:5f:d1:24:
93:ff:88:85:73:18:83:09:cf:d6:d6:3a:f0:c3:64:9e:c3:43:
3e:04:e1:c5:e8:af:77:f6:3b:f8:39:9d:5c:3a:39:73:f0:da:
8a:1c:d2:09:ea:2c:ce:a7:37:a7:8f:4a:1b:24:77:7a:61:9e:
c6:3b:3c:89:56:6c:b4:cd:f8:c5:cc:c3:af:fb:3e:af:46:bf:
8d:fb:7e:3e:1a:c7:22:3c:a6:6b:bb:ab:6f:b0:9f:6f:82:f1:
55:17:17:61:a3:4c:cd:fa:88:25:e3:a5:13:c3:1a:2d:5c:7a:
66:65:fd:fd:27:aa:cd:02:51:f9:25:96:e2:b8:bc:5f:fa:68:
4f:64:cb:ce:13:b3:71:6c:28:98:e7:43:24:a6:9f:8a:7c:92:
8d:6f:a2:7a:e1:df:ee:09:1d:d1:39:0a:29:34:70:c2:20:1c:
22:f1:7a:d0:46:57:ed:65:92:cb:27:46:ab:70:f7:09:17:58:
f0:75:7d:49:71:11:6b:fc:2c:c0:79:7e:74:a4:c9:89:aa:59:
72:97:38:f0:49:60:f0:48:59:4b:20:ee:c9:ac:0a:bd:7d:c9:
58:8a:7c:3e:9e:a9:f7:70:07:2e:37:76:4b:aa:f9:0b:47:cf:
98:6c:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 00:20:12 2024 by rpki-client on console-ams.rpki-client.org