Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer
File: BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer (raw, json)
Hash identifier: Io7KWlLq1EJ0wd0df5HM4lqjKtPyx2Vj3QbzYLV9z+8=
Subject key identifier: BD:E3:03:31:87:50:FB:F0:0F:09:F6:4D:09:47:A4:B3:3A:3E:AF:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 48710313E1D12556A5227CC7671E20FDF33CF7B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.mft
caRepository: rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 21 Jun 2024 17:43:00 +0000
Certificate not after: Fri 20 Jun 2025 17:48:00 +0000
Subordinate resources: AS: 263948
IP: 138.219.236.0/22
IP: 177.67.36.0/24
IP: 177.67.38.0/24
IP: 2804:2838::/32
Validation: Failed, certificate revoked on Wed 03 Jul 2024 19:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:71:03:13:e1:d1:25:56:a5:22:7c:c7:67:1e:20:fd:f3:3c:f7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 21 17:43:00 2024 GMT
Not After : Jun 20 17:48:00 2025 GMT
Subject: CN=BDE303318750FBF00F09F64D0947A4B33A3EAFF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:cb:04:4d:11:67:95:2a:74:08:7b:0d:77:
ee:fd:39:d6:60:32:64:79:97:d4:e3:bc:ed:71:d9:
7c:da:7a:c7:84:24:75:c8:68:9e:05:31:e9:5e:8e:
25:fb:03:58:cf:14:c4:2f:fc:c0:6f:2b:7e:4d:45:
be:50:84:f9:1d:c1:06:f9:46:71:f7:f5:bd:a2:4f:
3a:9d:13:29:44:47:f6:6d:08:da:5b:a2:78:b3:4b:
69:0a:fa:d0:6c:92:39:d1:79:43:9f:24:42:7e:ae:
e0:71:e0:08:96:96:42:25:10:a7:03:cf:21:45:ac:
01:de:6a:7b:bc:f9:17:d3:2b:f0:5c:ee:90:db:a5:
b9:af:f7:58:6c:76:7e:5f:20:a4:8b:4f:e4:22:b5:
d5:22:ff:f1:50:b0:25:65:34:51:c5:a1:c5:66:be:
fa:a3:42:3a:59:9b:9a:f0:ef:15:97:89:b7:fc:a0:
f3:03:16:68:66:4c:9b:d6:14:80:c0:ee:b7:b6:b9:
b5:41:b7:14:22:8d:72:6e:99:83:3a:3e:6d:5e:e5:
40:57:a3:2a:21:b3:dc:9c:d8:86:3d:f7:94:c0:37:
75:3c:f0:75:33:95:3e:e0:fb:97:ab:5e:15:aa:53:
a6:51:b7:a1:04:73:1f:ad:c0:86:66:90:9b:cb:bf:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BD:E3:03:31:87:50:FB:F0:0F:09:F6:4D:09:47:A4:B3:3A:3E:AF:F9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.236.0/22
177.67.36.0/24
177.67.38.0/24
IPv6:
2804:2838::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263948
Signature Algorithm: sha256WithRSAEncryption
b8:26:0f:cf:a1:ee:b0:31:0c:37:ac:4d:ad:30:fd:a4:18:cc:
a0:c3:72:12:8f:79:e7:ec:19:1b:ab:7c:47:fe:1a:8c:d8:f1:
b7:1f:dd:27:97:c4:60:1c:37:2c:07:7a:41:ff:c1:35:e8:fa:
f2:38:b5:5d:60:39:8e:03:5d:b8:6a:fc:f2:75:f5:ff:7e:bb:
0f:28:23:c8:f9:d6:44:0e:6f:72:8e:7e:d7:7f:8a:b1:e2:f4:
81:5e:b7:ed:15:08:c1:38:0a:b8:ae:c3:84:f0:8b:5b:0f:9b:
ed:0c:df:51:74:4b:6a:16:e7:82:fa:57:f0:2c:ff:44:9e:17:
1e:03:37:0b:17:51:6c:67:22:74:77:ee:c2:4f:5b:40:d0:00:
1b:2b:46:f8:c5:4c:6b:87:d8:51:b2:88:45:6a:f3:bb:61:ed:
96:1a:91:44:63:e5:5d:57:2d:72:c2:a5:88:fb:e0:1c:16:97:
b6:d2:22:02:ec:50:88:87:8d:4c:38:b9:2b:65:ed:9f:ec:a1:
fc:35:c0:85:b9:78:4b:bf:42:97:9c:1d:7e:17:be:b7:c1:fa:
b4:9b:4d:46:21:00:6f:4e:12:78:ce:72:ab:f4:93:2f:5e:54:
12:ec:c8:e9:23:bc:d7:bc:cf:69:31:63:15:c6:e8:ed:a6:67:
00:6d:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 21:09:18 2024 by rpki-client on console-fra.rpki-client.org