Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8CD5CD51B0B5F562AD30E6DB7C64988C32AB4F8.cer
File: B8CD5CD51B0B5F562AD30E6DB7C64988C32AB4F8.cer (raw, json)
Hash identifier: xvP4O2ZqSAbMWhwC0QtsuHFqUGinYAmEUOOM9W/VSXI=
Subject key identifier: B8:CD:5C:D5:1B:0B:5F:56:2A:D3:0E:6D:B7:C6:49:88:C3:2A:B4:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 38EEFC0041DE1F838384E03322B2746EFAB26269
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/1/B8CD5CD51B0B5F562AD30E6DB7C64988C32AB4F8.mft
caRepository: rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 08:27:49 +0000
Certificate not after: Thu 03 Apr 2025 08:32:49 +0000
Subordinate resources: AS: 266921
IP: 45.225.36.0/22
IP: 2804:455c::/32
Validation: Failed, certificate revoked on Fri 19 Apr 2024 07:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ee:fc:00:41:de:1f:83:83:84:e0:33:22:b2:74:6e:fa:b2:62:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 08:27:49 2024 GMT
Not After : Apr 3 08:32:49 2025 GMT
Subject: CN=B8CD5CD51B0B5F562AD30E6DB7C64988C32AB4F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:3d:6a:a0:bf:fa:30:cf:77:a7:74:7e:e1:
c3:0f:e0:30:9a:31:34:f0:c8:49:af:e7:71:4b:72:
cf:1c:87:40:e9:7c:f0:13:2c:41:65:72:02:c7:11:
80:0e:75:67:ce:c2:85:4f:bc:59:89:b5:07:98:be:
2f:fc:70:c4:9b:22:79:22:a6:81:2a:f4:60:eb:e5:
0d:57:62:1d:3c:fc:15:3c:75:60:64:34:db:58:dd:
2d:9f:dc:8e:4f:23:ab:bc:47:ea:d3:c6:ca:01:68:
ba:1e:8c:2c:3b:47:2a:b7:ae:d4:70:56:30:f1:2a:
7f:2a:a4:aa:e1:f9:06:2e:5f:61:63:de:dd:75:2e:
e4:66:cd:7e:88:8d:fa:99:e9:55:59:29:de:92:3c:
33:08:db:37:8a:fd:89:fa:c2:22:6f:f6:e4:4a:66:
9d:48:2d:57:79:03:ac:3f:4f:3e:d2:d6:0e:39:df:
29:5f:51:45:3a:6f:d1:6b:f7:0c:0a:ad:bb:f7:de:
9d:d9:34:ef:25:e6:cd:b7:c7:e5:31:ae:3d:23:b9:
b3:61:98:07:0f:94:ed:89:7c:9d:b1:28:2f:2f:96:
0b:8b:71:18:1e:f6:18:be:fb:69:4d:40:8c:60:56:
fc:f5:87:2c:49:63:07:1e:34:3c:cd:da:f4:87:2a:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:CD:5C:D5:1B:0B:5F:56:2A:D3:0E:6D:B7:C6:49:88:C3:2A:B4:F8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/1/B8CD5CD51B0B5F562AD30E6DB7C64988C32AB4F8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.36.0/22
IPv6:
2804:455c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266921
Signature Algorithm: sha256WithRSAEncryption
82:93:23:64:cd:4e:ea:62:b9:da:f6:e6:0b:3e:2c:c0:8e:ac:
af:cf:a9:23:60:4d:70:43:9f:2e:ce:1b:c3:57:e1:87:d8:27:
d5:eb:8f:be:a8:d5:50:33:0b:07:d3:4d:14:fc:dc:e8:c2:12:
c3:ea:37:cd:ae:7d:0d:c3:29:43:75:74:c2:b2:e3:30:c6:82:
da:38:d3:8a:88:49:06:d4:52:c6:78:4c:6d:9e:20:8a:23:d1:
76:dc:e9:04:75:e3:b2:28:be:63:17:29:24:8c:11:d2:ba:b1:
80:e2:99:53:98:00:f7:34:10:a2:b5:d6:8c:77:41:bc:dc:8c:
40:de:fa:15:22:93:da:83:76:0f:23:4e:06:f9:a0:45:fe:0e:
a9:26:98:50:97:0d:88:75:7d:26:71:c4:f7:4d:cd:3f:24:95:
ea:9a:ad:92:11:29:b0:bd:04:1b:e8:de:eb:bf:5c:07:97:1c:
af:84:dc:01:9c:28:0c:55:7e:d2:83:9f:af:da:4d:f6:9c:32:
54:c5:77:4e:79:9a:50:ae:6e:1e:31:8e:fd:26:40:7b:25:23:
10:f2:94:74:47:cc:07:49:db:41:82:fb:bf:f0:18:31:c4:b6:
d0:23:ca:f4:86:d7:74:9b:cf:5b:76:44:9e:41:0f:65:6a:68:
de:fb:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org