Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.cer
File: ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.cer (raw, json)
Hash identifier: xFjINIe1+UkTiMMKfwsXqbl+vVir298wCgwpxFALNTI=
Subject key identifier: AB:E9:B1:1D:B9:D8:E8:D8:E8:0E:57:F6:4B:F8:7F:41:C9:0C:F8:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0AC87A91F67413FC58FE81545D05C0D905F71E13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.mft
caRepository: rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 09:39:32 +0000
Certificate not after: Thu 03 Apr 2025 09:44:32 +0000
Subordinate resources: AS: 52820
IP: 177.52.174.0/23
IP: 2804:8ac0::/32
Validation: Failed, certificate revoked on Wed 04 Sep 2024 13:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c8:7a:91:f6:74:13:fc:58:fe:81:54:5d:05:c0:d9:05:f7:1e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 09:39:32 2024 GMT
Not After : Apr 3 09:44:32 2025 GMT
Subject: CN=ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:6a:36:e7:1a:a3:74:16:06:08:98:30:55:
55:ed:86:92:2f:e7:cc:0c:f5:50:13:e4:d5:73:32:
9c:68:bd:f4:bf:af:5b:c5:01:99:16:d3:85:38:00:
a0:c6:0b:67:11:9e:3a:80:5a:92:bb:c6:5b:c3:c3:
b2:84:d8:0d:09:23:75:b1:42:8e:58:c4:51:24:ea:
71:fe:7f:fd:2d:17:80:f7:99:c1:6a:9e:49:60:3a:
15:ca:22:b2:2d:34:dd:50:a5:12:13:62:47:dc:19:
ca:55:52:2f:84:70:26:ec:a4:03:b3:02:6f:f0:6f:
f6:ef:7e:a7:fc:23:87:11:92:e4:e3:c0:1f:3e:c1:
fa:85:1a:50:d6:61:80:01:67:1d:0d:de:78:05:52:
9f:30:96:ea:a6:dd:07:98:57:6e:27:56:d8:76:9b:
6f:72:a3:e5:05:b8:3e:52:8d:d3:d5:e8:ad:2c:66:
51:4a:8f:e0:53:45:54:c5:c9:d3:25:ac:48:22:21:
73:00:78:08:12:c1:1c:15:1b:fd:e4:76:89:85:fa:
f9:23:d1:37:64:13:b0:63:44:1d:65:5d:cc:07:ab:
71:cf:95:9c:77:1a:4e:c2:6a:27:77:67:78:4a:61:
52:95:9f:ab:06:3d:0f:90:90:f6:7f:6d:18:47:f5:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AB:E9:B1:1D:B9:D8:E8:D8:E8:0E:57:F6:4B:F8:7F:41:C9:0C:F8:BC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.174.0/23
IPv6:
2804:8ac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52820
Signature Algorithm: sha256WithRSAEncryption
62:fd:af:4c:f6:d9:ed:90:61:fd:c7:37:fb:5f:46:94:8e:ba:
80:8c:c8:de:fe:7e:7d:2e:27:2e:65:5d:8a:21:d5:37:1d:76:
5b:9c:98:07:92:e4:2e:09:78:82:c4:62:60:9a:a5:d5:d8:f7:
ff:d9:b6:32:d4:7e:cb:4e:b8:4f:25:23:1a:18:22:72:0e:10:
cf:e5:30:65:2b:7b:62:23:eb:db:5c:f2:f9:97:bd:48:c1:98:
fa:92:66:b4:c9:fa:7d:5f:f7:06:c1:5f:71:35:b1:4e:2d:72:
da:79:5b:22:b2:f0:f2:56:0b:5f:2d:48:16:95:a4:30:0f:46:
c9:63:b6:8e:2f:cb:9b:7e:f4:09:7e:42:a8:67:ea:78:c2:d5:
09:47:4e:2a:f3:41:d5:d1:1c:e5:f4:eb:0f:39:1b:c3:1e:7e:
c0:29:b6:6a:c1:a5:f7:45:66:e4:94:69:98:ce:80:c2:2b:f9:
07:c4:ec:2e:95:8c:08:7e:97:7c:29:42:8f:19:c9:bb:93:e8:
2d:ca:83:b1:2c:23:eb:15:c3:8d:5c:af:e6:53:de:31:38:de:
cf:c5:d2:59:53:f9:d9:95:3d:ba:a3:20:58:57:0c:b4:73:28:
10:6f:dd:eb:53:e8:df:96:a2:c9:97:41:73:0e:4e:bc:fe:fc:
ce:83:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 15:47:27 2024 by rpki-client on console-ams.rpki-client.org