Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.cer
File: AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.cer (raw, json)
Hash identifier: P3oQ8eVzvHSy8cUtTknWlnug2VrmXl5S7wzN+YDiauU=
Subject key identifier: AF:B3:AA:DF:BD:2A:7A:D0:DE:D7:E0:30:0C:9C:AC:A7:C5:DF:5B:DE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7E9DDC6B2A26D543748B0777D982521F8FE902AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.mft
caRepository: rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 21 Nov 2024 21:22:09 +0000
Certificate not after: Thu 20 Nov 2025 21:27:09 +0000
Subordinate resources: AS: 271208
IP: 179.49.136.0/22
IP: 2804:77ec::/32
Validation: Failed, certificate revoked on Wed 04 Dec 2024 04:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:9d:dc:6b:2a:26:d5:43:74:8b:07:77:d9:82:52:1f:8f:e9:02:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 21 21:22:09 2024 GMT
Not After : Nov 20 21:27:09 2025 GMT
Subject: CN=AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3f:09:69:bf:de:8b:8d:a4:2a:73:25:3d:fd:
94:04:a4:23:f9:0e:19:09:f5:40:71:6a:46:36:46:
78:76:c7:97:6e:f7:7b:6e:29:40:79:37:29:07:81:
e3:8d:c3:81:92:81:30:fc:b8:84:6b:c1:d9:ae:5d:
e4:16:1e:bf:e1:cf:bb:b0:36:42:23:a5:65:01:39:
6e:e3:6b:53:cb:31:5b:ee:6f:02:6e:1f:c4:a4:1e:
37:a6:44:a7:0a:de:25:58:c3:cc:83:d9:52:2d:d8:
07:58:2e:2d:19:74:28:24:f9:e6:c9:a2:c3:6f:62:
cc:ab:36:ec:48:84:4d:96:8d:42:3d:11:14:48:49:
48:cc:7d:94:12:ed:20:1d:ec:05:bb:3e:dc:94:f9:
4d:07:be:15:2b:dd:7a:81:99:83:7e:87:c5:68:cc:
81:01:10:24:28:eb:73:16:74:32:30:30:4b:09:6a:
60:23:60:e0:ff:0f:53:67:15:93:70:66:7e:1f:b2:
f2:dd:0e:af:55:c0:ce:c0:5b:ce:29:13:7c:06:5b:
7f:f6:bd:1f:5f:b1:6a:a8:cf:88:41:b7:b5:e0:47:
92:eb:c3:22:e6:d3:25:b6:32:f5:2d:27:d3:fa:ef:
b8:66:86:8a:fa:7e:6f:43:9d:28:29:6c:ed:ad:42:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:B3:AA:DF:BD:2A:7A:D0:DE:D7:E0:30:0C:9C:AC:A7:C5:DF:5B:DE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.49.136.0/22
IPv6:
2804:77ec::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271208
Signature Algorithm: sha256WithRSAEncryption
79:1d:4f:2e:59:88:f8:a7:7b:9b:62:8b:d5:a8:c9:d2:7a:a9:
27:77:56:05:9e:2d:8f:6b:6e:0b:8d:28:40:d5:9b:f6:82:99:
39:22:9f:7d:d8:14:44:88:07:41:06:b3:0b:9c:29:00:76:49:
b3:b7:d7:fb:eb:99:71:74:54:25:68:22:36:21:c4:3d:16:c6:
c6:38:6d:5c:56:7b:cf:3f:9b:5b:49:47:09:60:65:76:56:cf:
0a:62:b7:e7:35:fd:d0:81:85:65:f3:95:fa:0b:eb:af:fa:65:
f2:c9:1c:51:15:b0:33:2d:8a:fe:60:66:42:39:d5:e8:3e:6a:
e5:35:52:19:bb:ab:86:23:1b:5c:c2:7a:bd:4d:d4:d3:20:eb:
ce:65:81:77:89:46:a8:5f:14:2d:2a:94:01:50:4b:0d:e1:53:
bf:51:eb:e1:97:c5:f0:70:8e:f5:24:1b:65:ba:cc:64:96:0f:
e3:a6:a5:bc:0e:e2:f1:34:76:b3:3e:aa:1e:7b:03:5c:74:4e:
3a:ac:d9:f3:5e:e9:be:fc:dc:67:11:a7:6b:c8:35:25:c4:b8:
a7:65:2d:6b:96:a4:20:f0:22:a8:0b:90:e3:c9:64:b5:78:10:
d1:13:69:3c:3a:b4:64:9b:a9:6a:44:64:cb:95:0c:b9:17:98:
a2:af:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:04 2025 by rpki-client