Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8571C5863EE83A3BA1E9EB8C43626F63E281684.cer
File: B8571C5863EE83A3BA1E9EB8C43626F63E281684.cer (raw, json)
Hash identifier: tuQB/Ma+N15V4sv46wyziuz+79YCfx2xUGGwByIYkNk=
Subject key identifier: B8:57:1C:58:63:EE:83:A3:BA:1E:9E:B8:C4:36:26:F6:3E:28:16:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 74097C85FC1DA1D151A846322D806E849495B4C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/B8571C5863EE83A3BA1E9EB8C43626F63E281684.mft
caRepository: rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 26 Jun 2024 23:38:32 +0000
Certificate not after: Wed 25 Jun 2025 23:43:32 +0000
Subordinate resources: AS: 263888
IP: 138.204.132.0/22
IP: 170.254.72.0/22
IP: 2804:2744::/32
Validation: Failed, certificate revoked on Mon 01 Jul 2024 02:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:09:7c:85:fc:1d:a1:d1:51:a8:46:32:2d:80:6e:84:94:95:b4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 26 23:38:32 2024 GMT
Not After : Jun 25 23:43:32 2025 GMT
Subject: CN=B8571C5863EE83A3BA1E9EB8C43626F63E281684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:d8:f3:30:5e:18:e7:ea:5d:f5:c6:2d:d8:
8b:a6:f8:b8:69:73:a1:ee:9a:85:bb:3e:a8:3c:fd:
b5:07:18:02:26:39:e2:39:21:0c:13:88:cd:e7:90:
e1:da:90:a1:a2:ee:97:ac:82:62:34:29:e8:63:6f:
cd:47:3b:dc:97:19:50:76:b1:b7:c1:85:eb:f2:c1:
e9:02:27:9e:2c:67:f7:a4:0b:79:f0:89:50:0c:e0:
a6:46:da:0b:79:5a:dd:0d:d2:54:63:29:4b:86:fd:
37:e5:9c:6b:4b:ef:30:48:3f:f2:68:1c:4f:31:43:
fa:3e:97:9f:3d:30:05:aa:f6:b1:60:c0:73:89:ea:
6c:58:8a:38:03:0e:f9:4d:fd:fa:b2:2c:26:32:21:
d4:ca:d3:00:0b:bc:6c:67:dd:d8:3b:e7:3b:0c:da:
c3:41:7c:9e:4b:7f:99:1d:0f:18:60:93:df:4e:f6:
a7:03:31:91:12:97:5d:7d:29:85:54:9a:c7:d9:3b:
ee:22:ad:b4:da:c4:25:b9:43:1c:34:2a:fa:d2:42:
be:a1:54:0e:16:e0:6d:b1:92:0e:fd:e5:02:f5:4f:
22:65:ad:a4:db:bf:e5:d0:41:56:f8:58:af:ed:5e:
bf:d9:d6:28:1d:6f:99:8c:e2:6c:e1:24:84:5b:37:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:57:1C:58:63:EE:83:A3:BA:1E:9E:B8:C4:36:26:F6:3E:28:16:84
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/B8571C5863EE83A3BA1E9EB8C43626F63E281684.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.132.0/22
170.254.72.0/22
IPv6:
2804:2744::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263888
Signature Algorithm: sha256WithRSAEncryption
24:11:27:c5:c3:9b:33:cd:18:ac:2b:b7:2e:96:d4:4f:d5:89:
5a:e1:41:0f:fb:07:78:17:b5:87:7d:41:27:89:a7:70:7d:20:
f8:fc:5a:8e:9a:d0:3e:74:53:b0:44:07:94:40:0e:57:e0:0a:
ce:61:0c:0f:11:e2:dc:15:bd:f4:4b:a8:9c:51:90:bd:9b:f5:
ed:bb:10:22:46:49:e9:37:c0:2a:89:30:2d:36:73:8d:4c:fa:
b2:ca:c1:7d:2f:30:0a:de:af:26:c2:5b:78:58:47:42:2d:35:
a0:47:f2:06:9b:ab:b0:61:05:aa:a1:a7:7b:df:c1:80:a3:a8:
08:d8:77:b4:c9:cb:3c:04:d3:76:e7:41:80:ea:a6:97:e7:dc:
86:ad:0a:f5:a4:c7:ee:8c:d1:b2:d4:20:50:da:19:da:3f:b1:
00:3d:e1:d6:16:1c:a0:7f:97:0b:07:6f:90:b1:45:4f:bb:2d:
bf:0e:6c:a7:69:0b:39:6d:7e:a0:2a:e2:99:de:e7:73:0a:f0:
76:09:3c:4a:86:32:45:40:cb:ce:f5:08:59:c8:ce:ef:f9:82:
d0:f0:7c:cb:89:70:f7:62:c9:16:a4:e8:0a:a0:86:39:ca:66:
4b:e5:c1:c6:29:b9:c3:b0:72:44:f8:41:af:8c:83:41:ce:83:
4a:67:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 04:03:19 2024 by rpki-client on console-ams.rpki-client.org