Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.cer
File: BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.cer (raw, json)
Hash identifier: qZxalt61zpH0rPZlxtctCA/hchC51VIQjHEy1IRe2s4=
Subject key identifier: BB:7A:F2:63:1F:65:C6:E5:A5:7A:CF:0D:BA:13:E8:87:EE:7F:74:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4B1526DCBD3351A02F9F7524544E378903293CA6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.mft
caRepository: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 01 Oct 2024 09:20:11 +0000
Certificate not after: Tue 30 Sep 2025 09:25:11 +0000
Subordinate resources: AS: 270428
IP: 190.111.184.0/22
IP: 2804:6bd4::/32
Validation: Failed, certificate revoked on Thu 10 Oct 2024 20:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:15:26:dc:bd:33:51:a0:2f:9f:75:24:54:4e:37:89:03:29:3c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 1 09:20:11 2024 GMT
Not After : Sep 30 09:25:11 2025 GMT
Subject: CN=BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:fb:f3:7e:92:59:67:2e:b0:1c:a5:23:db:
ff:1d:0a:85:65:e9:31:3b:a0:f2:5d:44:33:5a:3d:
b2:7d:b0:c8:86:9e:6d:50:00:9d:86:e9:0b:76:84:
39:e2:76:a0:c7:a3:af:06:2c:11:62:dc:f3:54:50:
dc:fa:cd:14:85:0b:78:b6:78:26:2d:93:99:47:8c:
9d:93:fb:bf:4b:c1:ac:0d:e4:28:df:0b:77:6e:4f:
6b:ba:7e:bc:16:b4:be:ca:bb:de:5e:90:b8:ed:25:
69:ab:45:20:d0:a2:fb:22:80:ea:5d:ef:87:c9:d7:
82:48:db:03:78:9c:5b:f5:12:b2:93:21:7b:66:19:
4f:8f:3d:62:2a:be:c3:48:b7:1e:62:2e:b5:00:06:
f6:de:b9:22:34:46:32:85:18:65:19:f0:00:34:41:
08:64:ec:ca:6e:98:e9:12:eb:fe:0c:4d:b6:d3:66:
a7:71:31:e0:ae:9c:5b:e6:c1:94:b1:0b:01:f8:fb:
6d:21:57:36:74:af:f3:2c:9e:79:b1:be:d8:ff:18:
62:70:21:f7:05:4b:a2:84:08:af:11:64:83:68:3d:
ca:52:33:57:90:26:f8:65:89:b0:49:16:db:9a:3c:
14:1b:6d:12:58:a9:45:3b:05:3b:ad:28:6b:e5:49:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BB:7A:F2:63:1F:65:C6:E5:A5:7A:CF:0D:BA:13:E8:87:EE:7F:74:AA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.111.184.0/22
IPv6:
2804:6bd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270428
Signature Algorithm: sha256WithRSAEncryption
d6:49:2d:30:74:cc:53:c2:75:5d:5d:3e:6c:81:1c:8e:f5:19:
e4:ec:a0:88:45:26:35:60:90:43:05:28:fb:91:c0:a6:44:9a:
2b:a7:f4:92:86:ca:2b:66:91:88:20:9d:c5:4d:16:50:13:5f:
5b:40:bb:9f:32:f7:c1:32:02:56:46:43:c6:51:11:21:de:30:
33:97:57:ad:b0:f0:50:5f:71:05:bd:91:11:8e:a0:19:08:45:
f5:78:d3:e6:8c:90:42:39:51:34:17:30:4e:2e:9e:89:96:0a:
90:e5:c9:a7:09:c8:0a:a3:dc:52:40:df:9e:69:53:f5:95:f5:
15:f6:0a:b9:27:34:70:e9:67:ea:08:1f:43:94:29:53:30:41:
8c:4b:6d:d0:94:53:25:09:ae:10:73:de:59:53:5d:4b:02:8f:
a8:f7:48:a8:fc:a2:21:b8:54:71:24:f8:b9:46:52:9d:76:07:
a9:80:cd:8b:90:57:a2:a0:57:fc:1e:e9:16:ec:e6:c7:96:67:
10:8b:cd:61:f8:c3:11:19:63:00:55:fe:b8:79:01:4a:99:26:
2d:6a:fc:f6:0e:1e:73:41:32:60:db:e5:26:b8:fe:3a:d0:69:
cb:e0:30:a4:ef:cd:70:a4:78:15:a0:b5:be:9b:ba:ad:e0:b5:
65:25:78:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 22:40:03 2024 by rpki-client on console-fra.rpki-client.org