Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B9282FDD0A2B602C0F1723614F0309733B8C6B71.cer
File: B9282FDD0A2B602C0F1723614F0309733B8C6B71.cer (raw, json)
Hash identifier: Rv/5NrkngfizWg7+uaDgPvA8t363oiNKtUpI7KNoNHM=
Subject key identifier: B9:28:2F:DD:0A:2B:60:2C:0F:17:23:61:4F:03:09:73:3B:8C:6B:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3884B87B0A41139F26587110663ADEF91276EE1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/B9282FDD0A2B602C0F1723614F0309733B8C6B71.mft
caRepository: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 29 Aug 2024 14:44:20 +0000
Certificate not after: Thu 28 Aug 2025 14:49:20 +0000
Subordinate resources: AS: 52898
IP: 168.227.156.0/22
IP: 177.184.64.0/20
IP: 2804:a9c::/32
Validation: Failed, certificate revoked on Sat 19 Oct 2024 10:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:84:b8:7b:0a:41:13:9f:26:58:71:10:66:3a:de:f9:12:76:ee:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 29 14:44:20 2024 GMT
Not After : Aug 28 14:49:20 2025 GMT
Subject: CN=B9282FDD0A2B602C0F1723614F0309733B8C6B71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:aa:75:50:16:6c:d5:2e:88:0c:3d:26:b1:
0a:4f:7f:70:01:e6:d6:9b:9f:ca:5a:a7:7d:ec:fe:
95:17:bf:c1:95:20:5c:d2:8f:dd:f6:00:38:65:9d:
8d:d9:c4:d5:2d:95:ef:64:3d:be:9e:af:c0:1f:44:
b6:6c:6e:26:ee:44:48:04:9e:15:c4:78:8d:e1:1d:
ce:f5:b2:2b:d2:2e:9b:69:3f:19:0f:a5:dc:08:66:
12:86:60:ba:9e:e3:0d:18:7f:52:06:aa:9f:df:13:
a4:2e:2d:1b:4e:37:bd:1c:09:cc:12:de:ba:0a:36:
a8:eb:8f:0b:39:65:61:58:78:3d:e6:47:92:04:ae:
83:b4:91:12:ca:af:c0:a6:74:2b:a1:26:dc:52:7f:
bd:8d:e7:67:10:99:af:58:35:1f:a7:6e:49:4a:d0:
1b:ad:3a:51:26:83:26:90:b5:28:a0:dd:59:b4:0d:
c6:d7:ee:f0:2a:0e:1b:19:73:c2:ec:24:3b:b3:d6:
d2:29:4c:db:4b:e8:7e:cd:74:05:d3:43:ee:88:94:
80:d7:8e:d2:20:fc:08:e0:48:5b:13:d0:7f:ba:7b:
63:7b:01:5b:8c:5d:8c:ca:11:a6:00:74:f7:c6:f3:
41:ca:56:fd:5b:75:70:a2:06:9b:73:ae:e4:01:cb:
fd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B9:28:2F:DD:0A:2B:60:2C:0F:17:23:61:4F:03:09:73:3B:8C:6B:71
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/B9282FDD0A2B602C0F1723614F0309733B8C6B71.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.156.0/22
177.184.64.0/20
IPv6:
2804:a9c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52898
Signature Algorithm: sha256WithRSAEncryption
3f:52:74:74:87:4c:c5:bd:70:6c:d0:88:45:a0:52:17:17:0b:
bd:25:d7:3c:09:21:ae:74:9d:41:3e:ce:bc:5e:f9:e8:01:e9:
c9:46:da:5c:1b:95:b1:e6:fa:01:8f:9c:81:72:1c:47:ec:b9:
b5:61:e8:11:a0:8d:12:61:26:e3:0f:0f:d6:53:ba:f5:f6:10:
a1:9a:4c:67:6a:d6:9e:fd:b9:49:af:a0:52:21:21:71:89:50:
3a:9c:74:a9:ad:35:ba:ea:e9:eb:98:59:79:53:d1:85:39:0d:
25:c1:c1:cb:98:30:37:93:73:b3:ac:98:12:9e:06:81:df:c1:
3f:ca:93:c5:b7:53:1e:25:44:cd:80:16:86:88:ea:6a:28:03:
8f:5e:e7:f2:b7:b6:9e:5b:fc:65:a9:6e:34:56:ff:53:27:68:
be:1a:7b:06:c0:4f:ab:82:24:a5:2e:2e:2b:5e:7e:b4:1a:82:
af:88:39:20:1f:ad:a2:76:ce:16:7a:b2:36:8f:75:bf:f7:5d:
b4:59:6c:89:a3:19:37:3a:b9:42:f4:8c:f3:0b:01:69:83:36:
a9:23:37:bc:bd:8c:36:57:65:cb:60:8b:a3:99:da:9b:a2:6e:
a5:60:71:24:e4:b9:b2:ae:9a:db:f4:3d:59:36:51:d9:87:bd:
f9:55:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 13:44:27 2024 by rpki-client on console-fra.rpki-client.org