Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B820834F8E1CCC01C0092F3EC51C0CC2A53C0A80.cer
File: B820834F8E1CCC01C0092F3EC51C0CC2A53C0A80.cer (raw, json)
Hash identifier: XINcijpe8gmfXbtlYqRb72bGEN0S2HvhtvPB74klkVY=
Subject key identifier: B8:20:83:4F:8E:1C:CC:01:C0:09:2F:3E:C5:1C:0C:C2:A5:3C:0A:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2803CDA797A82793618C97E6B26539C3D2A25919
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/1/B820834F8E1CCC01C0092F3EC51C0CC2A53C0A80.mft
caRepository: rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:26:07 +0000
Certificate not after: Wed 02 Apr 2025 18:31:07 +0000
Subordinate resources: AS: 268815
IP: 45.173.152.0/22
IP: 2804:5b0c::/32
Validation: Failed, certificate revoked on Thu 16 May 2024 14:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:03:cd:a7:97:a8:27:93:61:8c:97:e6:b2:65:39:c3:d2:a2:59:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:26:07 2024 GMT
Not After : Apr 2 18:31:07 2025 GMT
Subject: CN=B820834F8E1CCC01C0092F3EC51C0CC2A53C0A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e1:94:b8:51:b9:b7:78:d2:d7:fa:20:af:a8:
d9:5d:bd:69:c9:98:d2:9d:b0:0a:a7:19:23:14:23:
4f:9c:80:5e:76:1b:41:9b:92:a4:59:db:2a:c3:f8:
cb:58:3d:33:38:06:03:1b:ad:bb:6c:17:3e:5c:f9:
c7:0e:6e:9d:4b:73:d0:f9:22:5c:9e:d1:45:b8:3e:
09:c5:62:14:2b:c1:15:cc:d7:5a:41:6f:6a:c1:05:
87:8c:9f:1e:1e:3e:f1:ba:fd:bf:94:71:55:61:31:
b2:0d:f2:3e:35:51:a0:c9:30:d9:fd:bb:e5:95:ad:
7d:15:87:c9:b7:8b:ae:04:85:15:f3:48:27:9b:db:
af:87:a7:c4:09:49:a1:02:d7:d3:7d:30:3b:7e:ba:
db:ce:e6:36:3b:0e:f1:3f:76:3d:23:ec:34:e9:3e:
9d:ba:f3:ad:16:a8:dd:37:5b:87:4a:3b:a4:4f:bf:
e3:70:23:f2:34:0c:23:a0:49:f2:01:c0:0d:e7:1b:
6d:f6:7b:da:c9:e2:01:05:d2:9e:25:ff:d5:45:10:
44:c4:74:9f:0d:f9:ed:4e:ed:42:f1:d1:cf:94:45:
7a:9b:95:cc:8c:48:f8:d7:1f:08:b0:ac:d9:2a:1b:
18:73:8b:0c:6d:3b:97:f6:ef:9b:36:6e:28:8f:65:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:20:83:4F:8E:1C:CC:01:C0:09:2F:3E:C5:1C:0C:C2:A5:3C:0A:80
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/1/B820834F8E1CCC01C0092F3EC51C0CC2A53C0A80.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.152.0/22
IPv6:
2804:5b0c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268815
Signature Algorithm: sha256WithRSAEncryption
b7:7c:8f:0a:6c:20:9e:c7:24:eb:a3:52:c7:2a:41:1f:c2:5b:
30:66:00:95:48:6a:8e:28:78:cc:b1:e2:3f:16:85:49:cc:30:
93:7f:ff:68:7d:bd:be:27:e9:3b:5e:4f:77:92:eb:2b:0a:dc:
47:8e:70:68:6f:90:32:64:2d:4d:b8:6c:9b:a9:de:41:37:79:
d4:22:d3:39:1e:6c:ab:fa:c1:69:4c:c3:df:1e:fb:fa:e3:8a:
74:f4:ed:af:98:82:a5:29:2e:65:77:17:b0:dd:78:a3:53:d9:
76:d0:db:51:65:8e:88:54:89:8c:d5:1b:3e:2c:9b:35:9f:51:
f5:92:f1:e9:a1:95:88:85:db:a5:68:93:7d:76:66:9d:fa:ff:
6e:06:b6:c1:e0:21:9b:be:68:41:3a:c2:87:94:92:73:80:c3:
d3:4e:af:54:77:8e:55:a4:2c:ab:38:4a:e7:f3:53:12:b2:d1:
4c:57:86:ee:3b:65:3e:3c:2b:1e:c0:30:48:71:df:e4:df:5b:
71:fd:f5:ca:74:bc:a2:ed:c3:41:59:36:3c:6f:23:6d:6e:e0:
1a:fd:81:ed:d7:c2:b9:a3:fe:8c:8e:8f:1a:d8:57:01:99:0f:
98:a0:11:1f:f0:68:af:5c:b5:b6:95:56:74:39:7d:9f:b4:c0:
6a:9a:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org