Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AB528ABCEBD06A657080F8532041E15F1CC2F2B9.cer
File: AB528ABCEBD06A657080F8532041E15F1CC2F2B9.cer (raw, json)
Hash identifier: yYJAqVorIe18a2G3S3rbLSZJUPuiwXSMi+vsvzpgESU=
Subject key identifier: AB:52:8A:BC:EB:D0:6A:65:70:80:F8:53:20:41:E1:5F:1C:C2:F2:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1F76B27710D4036F70AA6155EC30691259EAF747
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/AB528ABCEBD06A657080F8532041E15F1CC2F2B9.mft
caRepository: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 27 May 2024 14:12:17 +0000
Certificate not after: Mon 26 May 2025 14:17:17 +0000
Subordinate resources: AS: 264127
IP: 138.59.220.0/22
IP: 2804:22dc::/32
Validation: Failed, certificate revoked on Wed 07 Aug 2024 06:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:76:b2:77:10:d4:03:6f:70:aa:61:55:ec:30:69:12:59:ea:f7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 27 14:12:17 2024 GMT
Not After : May 26 14:17:17 2025 GMT
Subject: CN=AB528ABCEBD06A657080F8532041E15F1CC2F2B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:90:48:23:ca:4d:87:0d:7c:f5:0f:2b:f8:
82:d7:7e:6d:5c:80:45:af:7f:05:2c:52:b9:99:6c:
ed:33:7e:85:4b:cb:9e:c5:6d:8f:11:2c:37:22:5a:
42:f5:66:f2:de:e6:79:41:19:6c:5f:30:f0:c7:5f:
e9:93:99:f8:26:6a:d4:98:b0:57:33:e4:2d:39:00:
d1:23:eb:4d:29:0e:c6:ed:e3:0f:a0:92:cf:78:1a:
ec:58:e4:f8:96:c2:f4:39:ed:48:04:1d:8d:f3:fc:
d2:2f:88:d8:09:d8:0e:b7:5f:d0:cf:81:e9:06:53:
c8:45:8a:4a:db:ae:99:5e:a0:57:0d:f3:5c:2f:2e:
fd:3a:95:65:c7:d1:19:03:aa:9c:a0:2a:c4:57:55:
1d:fd:5e:7b:27:c2:74:8c:82:38:a3:f6:1b:6b:07:
9f:0a:b2:cf:6c:e3:3b:ab:39:36:19:08:da:16:dc:
5f:02:81:40:e5:1a:4a:bb:69:e1:c3:78:aa:c4:03:
f8:66:2f:84:1b:e7:e6:cd:11:ad:25:75:f1:c0:05:
2f:75:40:70:6c:aa:cf:bc:f8:87:b7:95:28:b5:77:
5e:de:8b:12:9d:c2:22:5d:15:41:00:11:cb:f5:7f:
2c:cb:5e:8e:53:d0:3d:fc:80:38:0a:4e:3f:7f:72:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AB:52:8A:BC:EB:D0:6A:65:70:80:F8:53:20:41:E1:5F:1C:C2:F2:B9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/AB528ABCEBD06A657080F8532041E15F1CC2F2B9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.220.0/22
IPv6:
2804:22dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264127
Signature Algorithm: sha256WithRSAEncryption
b0:a4:46:63:a6:3f:45:b5:84:95:d5:39:1d:7b:a2:99:21:13:
6c:3c:ef:43:5b:4f:0f:75:d7:12:e3:83:eb:2b:70:17:57:0f:
fb:fa:bf:44:ac:57:c9:10:ec:55:14:f8:b8:86:ad:8e:e8:77:
4c:a8:fd:8b:7a:f8:49:8f:a9:c8:3b:29:69:76:1c:01:c4:be:
fc:13:db:61:70:e6:7a:13:d0:c7:32:6b:90:f4:07:1a:f0:8e:
d5:30:bd:98:b3:70:76:57:ab:80:45:8f:fd:4c:b1:d4:e1:b2:
ec:07:39:49:a1:ac:f1:67:cb:cb:68:24:96:06:94:4c:98:44:
6a:a1:e4:37:2e:7f:ce:05:58:d8:fb:7a:7b:6b:81:c9:3b:2c:
eb:3b:e0:b4:c4:9e:4e:3b:32:4f:dd:e5:84:57:e8:10:7c:d7:
8b:91:dc:2e:24:78:4b:db:aa:11:19:fb:dc:86:3e:d5:c8:51:
26:d7:e5:f9:6f:df:f3:e7:6a:35:f2:5a:cd:9b:0e:8c:44:fa:
79:fd:c1:5b:84:70:cc:ab:33:dc:f5:ba:c6:41:e1:ff:a0:cb:
c6:bc:1d:97:85:09:28:30:bc:a6:91:d5:88:09:cf:88:88:3f:
72:86:e8:66:44:a5:21:69:f2:b8:49:7f:8b:b3:f5:b4:1a:39:
c1:61:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 08:50:25 2024 by rpki-client on console-ams.rpki-client.org