Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
File: AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer (raw, json)
Hash identifier: OxfIB7elXDhyQVzEXqP9cxxN4IWq+qTRvFjqmomuFVI=
Subject key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6DDD31C0EDB8DA4106DC9F0766A8B1654FDE2DCB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
caRepository: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 18:03:53 +0000
Certificate not after: Thu 03 Apr 2025 18:08:53 +0000
Subordinate resources: AS: 264197
IP: 138.97.148.0/22
IP: 2804:2404::/32
Validation: Failed, certificate revoked on Sun 18 Aug 2024 12:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:dd:31:c0:ed:b8:da:41:06:dc:9f:07:66:a8:b1:65:4f:de:2d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 18:03:53 2024 GMT
Not After : Apr 3 18:08:53 2025 GMT
Subject: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:35:a8:14:d4:ef:d9:87:7b:74:7d:18:42:
87:4d:24:47:32:e0:3b:21:89:63:9f:0f:47:95:d7:
9d:66:72:45:6d:50:12:e3:41:cb:a7:02:84:15:53:
68:f2:cd:b7:ca:27:0a:d9:d0:99:c1:77:bc:de:04:
49:3e:8f:8e:96:71:e7:ce:43:9f:ba:d8:be:67:38:
95:ac:df:4c:a6:15:60:cb:04:cf:ff:fc:dd:2f:20:
b5:c9:29:2c:d8:d1:71:6d:1d:32:e4:d2:22:eb:2c:
02:26:27:38:69:21:9b:4c:bf:20:70:e7:a3:19:4d:
8f:68:33:09:7f:ae:09:00:4b:b0:80:d2:cb:96:8f:
98:90:ee:95:61:de:d6:5e:c6:7b:a9:88:a6:0f:e7:
87:5c:c3:69:58:a0:c5:50:16:7f:c0:8c:70:c4:15:
a8:ea:7d:56:3a:53:9c:63:d6:35:f9:e4:33:0f:e0:
ab:f1:d7:82:56:fc:ed:6b:1e:cc:56:46:39:27:5c:
9e:55:e4:94:ec:b1:f6:2b:c4:29:27:47:dd:5d:73:
c0:ca:7c:2d:d4:d5:b5:bd:c7:d5:dd:d2:44:b0:a8:
61:af:32:72:55:51:22:f1:b2:fa:a0:ce:f5:c0:bc:
87:96:fe:e5:41:0b:06:b6:d5:db:71:6f:5e:93:ad:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.148.0/22
IPv6:
2804:2404::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264197
Signature Algorithm: sha256WithRSAEncryption
1a:02:8a:d0:aa:37:e8:c4:f5:bb:90:2b:86:53:d3:e9:09:ff:
14:97:33:f4:19:a2:0a:d4:34:c9:7d:c2:6d:08:87:7e:46:dd:
5b:1e:cf:85:19:1d:61:fa:90:4c:a1:f5:2f:87:a0:bb:32:bc:
88:6c:7b:9e:7f:ad:e7:9c:ac:ff:46:ca:4c:ca:17:1f:1f:f5:
81:7d:95:b5:d4:b9:c9:9c:fb:98:da:fd:11:64:e9:d4:44:be:
79:0e:8d:cd:32:07:8c:cc:5f:05:7f:4a:f0:1c:8f:16:02:6e:
0b:0e:7f:d3:93:0d:01:6d:24:30:18:5e:e4:28:5e:47:d9:3e:
ae:11:83:01:59:20:1c:d7:6f:35:99:4e:3c:13:67:53:6a:88:
47:a4:eb:bf:ec:89:6e:22:00:91:c6:e3:bf:2e:36:c6:c3:df:
3b:e3:44:27:25:bd:f3:e2:7b:fa:15:67:67:aa:d5:3a:db:d8:
01:50:db:a0:76:c6:b2:7f:71:37:e7:90:cb:e3:63:a8:1d:25:
0c:bb:9c:8a:1f:9b:35:23:5b:30:06:86:7f:a3:90:9c:e2:45:
b4:8c:e8:50:ee:41:05:91:be:ca:15:1b:26:02:f2:95:2b:8e:
7a:99:5f:01:89:b7:6a:33:03:05:3e:ff:47:20:4a:4c:52:30:
ea:30:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 14:32:54 2024 by rpki-client on console-fra.rpki-client.org