Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8.cer
File: B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8.cer (raw, json)
Hash identifier: awJ3uU09+5/aGP74qUSSOdcJSTwsP6tp721ageFtoAo=
Subject key identifier: B9:E7:9F:5B:48:E5:CE:50:2B:6B:62:B2:BE:BF:13:7D:A3:01:C0:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1086E1947E6FBAC004C1B1521F465EA9188179D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8.mft
caRepository: rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 07:38:09 +0000
Certificate not after: Thu 03 Apr 2025 07:43:09 +0000
Subordinate resources: AS: 61686
IP: 131.100.232.0/22
IP: 2804:1cf8::/32
Validation: Failed, certificate revoked on Thu 30 May 2024 14:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:86:e1:94:7e:6f:ba:c0:04:c1:b1:52:1f:46:5e:a9:18:81:79:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 07:38:09 2024 GMT
Not After : Apr 3 07:43:09 2025 GMT
Subject: CN=B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:76:fd:30:1d:0f:91:94:6a:d5:ea:bf:c4:
0d:5d:4f:a9:8e:fa:b4:a3:6c:60:87:89:bd:3c:38:
d4:1e:49:0b:1c:0a:1b:75:a5:2d:d9:68:c1:e9:f0:
26:27:c7:f8:43:b8:ac:ca:fe:8d:0d:f6:bd:c5:53:
01:fa:37:d4:04:3b:63:96:a3:b1:f8:70:47:69:67:
cd:45:66:cb:b2:b2:44:bd:42:3b:11:d9:f7:9a:91:
9f:ba:5f:19:8c:8a:a1:b0:3d:0a:a0:01:29:05:ca:
f1:8a:27:3c:62:71:66:85:d9:88:c9:d3:4b:94:6e:
b1:71:36:86:55:7e:f2:80:20:ba:24:b7:4a:23:12:
ad:df:47:c1:42:ca:72:fc:7a:1c:8b:4f:88:87:2d:
24:5e:37:bc:bc:49:e3:f4:fd:bc:0d:28:6e:27:a2:
7d:f2:95:7a:d1:5b:ee:9f:f6:18:a9:e1:46:0e:79:
c1:53:f7:a9:74:84:5d:68:07:f9:1b:76:d4:72:eb:
6d:63:8b:95:fb:21:78:1f:42:95:99:ab:26:0c:8d:
38:78:9f:aa:f4:f7:43:df:f0:b1:91:21:ab:2e:33:
6c:0d:5f:07:97:7c:c1:5d:5a:46:7d:0b:e2:4b:5b:
76:95:13:24:8a:f6:ca:48:f4:b3:d6:80:38:00:70:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B9:E7:9F:5B:48:E5:CE:50:2B:6B:62:B2:BE:BF:13:7D:A3:01:C0:D8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.232.0/22
IPv6:
2804:1cf8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61686
Signature Algorithm: sha256WithRSAEncryption
6c:bf:d4:2f:d5:2d:7b:28:ae:93:6b:4c:a7:04:d9:27:4a:75:
30:3f:9b:2f:bf:4e:0c:bc:cc:dd:4b:29:35:77:f2:d0:f0:a8:
e8:88:74:cd:25:31:8e:89:e2:e5:a2:e1:ae:8c:51:56:fd:a6:
9b:3b:4f:75:14:ac:5b:14:d6:25:eb:7a:bf:cc:06:6d:6f:fc:
b6:25:9a:e6:44:b2:2c:14:4b:c6:5e:0b:66:8c:53:68:25:64:
81:de:bc:65:19:8c:80:01:57:a4:a3:f7:84:30:7f:5a:b1:f7:
f4:08:07:6b:56:fa:76:4f:f1:35:63:60:dd:d0:df:7a:d5:39:
2d:14:d8:fc:a4:5c:a2:d7:3f:b5:11:ea:71:24:c7:7f:44:c6:
71:fd:cc:23:ab:0b:46:88:66:18:90:72:3e:5d:9b:1d:6b:9e:
15:99:9d:bc:9c:5c:a4:f0:84:eb:d9:d3:b9:ae:e7:dc:23:0c:
4c:56:e3:ea:18:d9:e3:2b:79:8a:7e:4e:21:be:c8:8d:bd:20:
35:1b:87:87:f0:84:0f:ed:83:5b:26:ff:14:b8:2c:4d:18:5c:
f5:e5:8a:a6:02:27:32:7f:c9:97:ce:e6:a6:23:be:d8:dd:ba:
20:62:29:bd:d0:00:bf:6e:b3:2d:a1:ce:3b:c3:af:8a:41:c9:
b6:fc:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 17:53:20 2024 by rpki-client on console-fra.rpki-client.org