Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF85AB11D3DC9DCD005E8DA25FB93F98D26561B3.cer
File: AF85AB11D3DC9DCD005E8DA25FB93F98D26561B3.cer (raw, json)
Hash identifier: W66QkacfGPa/gqVIll57F2zePblEkZjZtRE1FKAs6/c=
Subject key identifier: AF:85:AB:11:D3:DC:9D:CD:00:5E:8D:A2:5F:B9:3F:98:D2:65:61:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7E559235B7EF2EA4C4BF819468B194CEB0D5BA2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/1/AF85AB11D3DC9DCD005E8DA25FB93F98D26561B3.mft
caRepository: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:58:31 +0000
Certificate not after: Wed 02 Apr 2025 19:03:31 +0000
Subordinate resources: AS: 263450
IP: 168.232.156.0/22
IP: 177.91.232.0/22
IP: 2804:1200::/32
Validation: Failed, certificate revoked on Mon 22 Apr 2024 21:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:55:92:35:b7:ef:2e:a4:c4:bf:81:94:68:b1:94:ce:b0:d5:ba:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:58:31 2024 GMT
Not After : Apr 2 19:03:31 2025 GMT
Subject: CN=AF85AB11D3DC9DCD005E8DA25FB93F98D26561B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:48:38:88:99:09:84:15:8f:76:f0:00:68:
06:7d:61:3d:78:73:db:14:44:e0:83:4d:f0:07:44:
1a:1b:6a:79:8e:84:98:72:b2:99:09:3f:cb:5f:36:
07:37:11:af:79:e7:e8:4f:24:4f:a1:8f:92:b6:a2:
9e:5e:14:cb:03:6d:ca:16:20:ed:e8:29:6d:c7:1b:
1e:4e:c3:bf:b1:8e:2d:b1:c6:a1:90:0c:e9:fa:57:
c6:c1:7a:3a:c1:c1:3e:db:47:a1:0d:63:89:36:15:
5d:4a:11:dc:bf:98:b6:3c:24:e5:d9:05:62:97:9b:
9a:f3:4b:58:f4:1f:a7:2a:63:b9:d9:82:01:52:4e:
37:89:d6:5c:41:3f:02:e6:3c:a6:b3:62:6f:ca:b7:
1c:49:ad:d4:00:f4:bc:19:51:72:2f:04:55:c4:7e:
13:5e:bd:ca:34:d0:0b:c8:95:63:6a:5b:d1:e7:3d:
24:e7:89:28:50:19:16:05:fc:fa:3f:d1:24:c4:0d:
ac:39:d9:c7:10:96:cb:f8:8a:07:de:21:4e:56:c7:
da:a2:d1:e4:02:79:6b:69:0c:6d:48:d2:27:01:e9:
0a:a7:44:c4:07:8a:5b:64:46:e7:c3:b7:72:5a:6f:
6c:f9:17:07:05:d4:86:2a:1c:e1:eb:0d:cf:c5:24:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:85:AB:11:D3:DC:9D:CD:00:5E:8D:A2:5F:B9:3F:98:D2:65:61:B3
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/1/AF85AB11D3DC9DCD005E8DA25FB93F98D26561B3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.156.0/22
177.91.232.0/22
IPv6:
2804:1200::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263450
Signature Algorithm: sha256WithRSAEncryption
7e:84:57:9e:a3:39:2f:cb:92:69:93:cb:aa:67:07:e6:38:eb:
00:77:5b:f5:80:83:db:41:ce:68:12:ac:a5:d0:e3:7b:db:f6:
ff:09:35:3f:dc:6d:48:4a:76:6e:54:48:95:45:74:a6:60:36:
bf:a3:cb:dd:70:3a:4b:e4:09:35:de:36:28:72:fe:56:8c:11:
61:b1:ba:c6:17:ce:0c:ae:48:a2:8a:90:22:93:3f:69:d1:39:
c5:53:ba:83:d5:4b:8b:92:55:8c:48:30:a4:fb:c6:0e:43:fe:
56:20:85:b6:8a:40:3d:85:f9:19:2d:12:70:f7:cc:e0:fc:0e:
1b:0f:ed:04:38:07:a6:0a:25:bf:71:ab:a1:af:65:89:aa:6d:
9a:44:c5:ea:cd:a6:a6:ac:54:c8:32:1b:2b:03:d9:84:40:58:
70:ce:3e:65:1b:d9:95:7e:aa:44:b2:d6:6a:ad:4f:02:c6:ff:
3b:f8:e1:5f:d4:28:d7:af:09:2f:95:d4:15:43:95:96:21:99:
ca:2f:b6:64:34:12:55:dc:93:d0:cc:37:14:bc:8a:11:45:2a:
d7:58:0f:fc:d8:3d:a4:ae:6b:35:c9:11:52:35:90:65:a0:84:
80:ab:6a:c8:27:76:a5:17:b7:5c:03:af:62:9d:f1:fd:bc:e4:
e4:56:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org