Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF.cer
File: B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF.cer (raw, json)
Hash identifier: yoogYk3stgwJzBRjbVjhlJFvE7MzXcvqGWjlirFKCS8=
Subject key identifier: B4:09:4B:06:9A:8A:B2:55:2C:DB:CB:34:DC:2E:4D:3D:7F:EE:38:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3C2406ADCA81E51209C8BF856E4C1186BAE8B691
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF.mft
caRepository: rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 09 Dec 2024 18:27:57 +0000
Certificate not after: Mon 08 Dec 2025 18:32:57 +0000
Subordinate resources: AS: 268737
IP: 45.171.252.0/22
IP: 2804:59f8::/32
Validation: Failed, certificate revoked on Wed 12 Feb 2025 11:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:24:06:ad:ca:81:e5:12:09:c8:bf:85:6e:4c:11:86:ba:e8:b6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 9 18:27:57 2024 GMT
Not After : Dec 8 18:32:57 2025 GMT
Subject: CN=B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:59:ab:5a:ba:98:a2:18:05:5e:be:82:1a:
86:ac:b8:99:7b:e6:82:a0:b2:1e:45:6f:c7:ee:3e:
44:5f:7f:59:63:a8:2e:dd:cd:1c:ea:20:35:21:59:
80:55:89:f5:15:a1:05:5d:9a:6c:2b:36:b0:11:04:
b2:7a:d3:33:60:1f:43:e8:49:d5:03:f0:6d:eb:6c:
35:cf:4d:a7:23:51:1f:b6:50:e3:3f:ae:17:68:05:
6a:b3:c4:5f:91:07:56:5c:6d:75:f2:1c:46:5e:30:
22:48:8c:2e:24:fa:b2:d8:9e:f3:ee:04:1f:18:3f:
44:0d:9e:fa:88:22:1a:88:a6:82:32:42:1e:cd:03:
86:04:27:28:07:81:98:fd:24:95:59:a5:97:fe:ae:
91:6b:81:8d:11:6e:f6:3d:63:9d:15:a0:4d:65:4e:
fb:cf:c9:cc:a0:40:02:ee:12:37:64:72:dd:46:80:
9f:9e:ed:4a:e0:1c:d6:4f:87:0b:e4:93:2f:0b:95:
b1:7f:1b:31:8e:5f:7a:34:55:c9:3b:bd:0f:b2:fe:
24:0f:f1:8e:f4:d4:17:e2:04:d7:f3:60:b3:29:4e:
e1:f1:33:16:af:06:bb:52:fe:28:49:cc:47:a3:04:
0c:1d:63:b2:34:5d:a3:f4:94:37:e4:a3:fb:cd:32:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B4:09:4B:06:9A:8A:B2:55:2C:DB:CB:34:DC:2E:4D:3D:7F:EE:38:CF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.252.0/22
IPv6:
2804:59f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268737
Signature Algorithm: sha256WithRSAEncryption
2f:d0:4b:30:45:c5:e2:4e:00:31:7d:61:62:0d:37:45:3a:bd:
c7:ff:4e:4f:c8:f9:01:2f:b1:87:0d:65:b1:e6:63:a6:d8:5a:
17:18:ac:a6:fd:b0:89:92:f1:77:08:95:93:50:0b:c6:ea:61:
c3:a5:57:e3:9b:e1:ad:ee:3c:41:f1:89:7f:0a:d5:eb:b7:e1:
73:08:e3:ee:b6:c4:ee:75:32:63:e7:5f:07:59:6b:e2:9d:7f:
d3:ca:1f:16:aa:32:0f:1a:de:70:d1:20:90:93:88:92:dc:40:
d3:b1:fe:4c:4f:9c:62:f8:76:0c:77:7c:2f:ee:1a:6d:cb:66:
f1:56:df:ce:21:9b:4c:5f:83:52:3f:f8:ec:c1:54:60:d0:fa:
44:68:e2:f8:9f:a6:16:ea:4d:12:46:dc:95:5f:17:2b:07:c8:
c6:23:02:1f:c7:fb:ca:70:07:64:1c:c3:ec:b1:44:70:96:64:
72:95:e5:8e:98:0e:3c:a7:51:ff:c7:55:15:48:3c:fd:e3:e4:
4d:36:b5:82:96:24:20:d8:11:19:db:ce:78:c2:48:95:cc:e4:
ab:81:a2:0c:ed:c1:75:c3:54:58:ae:1f:7f:29:60:bc:62:e1:
df:cb:c6:24:78:e9:88:92:11:e3:5b:31:53:fb:5c:92:ee:f2:
9f:1a:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:04 2025 by rpki-client