Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
File: AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer (raw, json)
Hash identifier: srQ6OTZDiAvkMFbev0WhwiAimzh0YalziovlsahDIQs=
Subject key identifier: AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 15F60CB2210B7FD16CE30942B1141AAAA376F3A1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.mft
caRepository: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 18:19:01 +0000
Certificate not after: Thu 03 Apr 2025 18:24:01 +0000
Subordinate resources: AS: 264936
IP: 168.232.80.0/22
IP: 2804:3034::/32
Validation: Failed, certificate revoked on Wed 09 Oct 2024 22:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f6:0c:b2:21:0b:7f:d1:6c:e3:09:42:b1:14:1a:aa:a3:76:f3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 18:19:01 2024 GMT
Not After : Apr 3 18:24:01 2025 GMT
Subject: CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:44:6d:54:8a:0d:b5:f6:d6:36:f8:f1:3e:
b5:31:28:cf:c8:ee:41:ff:76:4b:a3:68:4b:60:18:
47:c4:3f:7a:93:4a:df:c2:45:e9:c5:93:fc:d6:99:
08:30:ab:8e:e9:c9:80:13:78:aa:6b:22:f6:85:75:
a0:c6:38:d7:c0:ef:d0:ae:51:ef:c9:17:51:b5:1a:
63:1c:cf:e8:4e:f7:06:6d:ab:35:09:08:72:0b:9b:
67:eb:a6:3f:c0:80:5a:f0:0c:88:cf:93:94:e7:ab:
bd:1e:8a:61:25:ca:02:5f:f8:2d:0d:99:fc:54:3f:
de:d4:e6:98:15:9e:12:45:e1:a5:b7:a6:89:6f:4a:
06:47:3d:02:f5:0f:38:36:ba:af:1b:c8:26:f5:c8:
45:8a:6b:70:3f:4e:04:c3:55:e2:91:1f:d7:db:dd:
c8:59:94:da:41:d6:52:cb:db:6e:ec:05:83:33:a7:
70:d4:ca:94:5d:f4:48:10:9b:11:dc:a7:3f:f3:3e:
39:25:b4:d7:95:3f:cb:b2:b1:aa:2c:43:a1:56:8e:
54:2f:08:f5:88:2e:07:74:a9:85:de:da:cb:35:ba:
4e:f3:03:be:4c:eb:b7:c9:dd:c9:8f:0a:aa:65:3f:
58:03:ab:6b:70:19:6b:38:60:be:ef:4f:51:62:63:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.80.0/22
IPv6:
2804:3034::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264936
Signature Algorithm: sha256WithRSAEncryption
3d:47:00:76:33:7c:8d:0f:5f:7f:2a:01:8b:0e:0f:d4:cb:b1:
06:51:24:09:c2:c9:5d:d7:15:5f:31:87:01:49:79:e8:de:cb:
25:56:70:d6:ab:52:0a:c0:42:d1:d7:35:60:69:3a:21:58:86:
e3:b3:f1:5d:c7:cb:14:65:0e:1c:59:1f:fe:69:2f:b1:e9:61:
03:1b:c3:dc:f5:d6:d2:05:18:6c:9f:20:c6:d9:4d:ea:cc:14:
27:74:f0:98:47:6d:7a:7a:33:f5:41:95:49:bb:9b:2f:cd:6b:
09:3d:81:d3:fd:e9:d2:cd:ac:23:c0:69:af:85:c6:fd:bb:76:
a7:a4:2b:a2:79:d0:ff:10:38:f2:76:30:0c:8b:48:95:cf:60:
20:c6:da:3b:cb:fd:30:c1:c4:a0:b5:67:47:93:30:3c:cf:fe:
d6:f9:59:0f:5b:ef:17:f5:94:79:91:1b:a5:78:df:c3:e6:1e:
47:4f:b6:ee:5e:58:d5:45:0f:ee:23:47:28:64:b0:36:02:0b:
e4:c6:c7:ea:12:01:f0:8c:cd:08:6e:67:3e:38:4a:4a:b2:81:
81:ea:6c:32:1d:e5:f1:23:83:a1:a7:10:f7:0d:60:99:cd:42:
cd:0a:1f:a9:d0:60:f0:17:9e:43:87:1c:cf:6f:84:fb:a1:a6:
83:ab:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 02:31:55 2024 by rpki-client on console-ams.rpki-client.org