Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer
File: C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer (raw, json)
Hash identifier: A1Qkv48yU/Ws0pqetgu8UT6DjQYiLmYgopHk9xiwfXk=
Subject key identifier: C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6FFA0B70B13593FA8C28025F85962FC632D67351
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.mft
caRepository: rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 06:01:03 +0000
Certificate not after: Thu 03 Apr 2025 06:06:03 +0000
Subordinate resources: AS: 266327
IP: 170.238.160.0/22
IP: 2804:361c::/32
Validation: Failed, certificate revoked on Wed 24 Jul 2024 18:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:fa:0b:70:b1:35:93:fa:8c:28:02:5f:85:96:2f:c6:32:d6:73:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 06:01:03 2024 GMT
Not After : Apr 3 06:06:03 2025 GMT
Subject: CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:39:3f:c6:d1:c3:49:76:83:6a:8f:35:9a:
11:b0:d8:39:a0:3e:19:33:5b:23:7a:0b:7c:b8:46:
3c:4b:ac:35:f0:7f:5e:0b:76:c9:f0:e4:ec:63:74:
10:32:59:37:89:88:02:03:9a:5b:5c:58:f7:54:70:
32:85:12:41:ad:e7:1a:a9:52:d8:3f:87:eb:8e:87:
ad:f8:0d:17:ee:c1:8e:4c:b2:e8:fd:7f:fd:d0:0c:
d9:c4:fb:6d:78:00:53:4c:22:17:f2:54:55:d5:ea:
47:15:db:dc:62:af:79:9c:b8:79:da:64:c9:1b:45:
9a:bd:49:18:bb:14:4f:c7:1d:b6:3d:35:d0:40:54:
a2:44:02:d0:2e:23:a5:a1:2a:c6:e4:92:88:ec:96:
b2:34:a0:60:84:f7:60:d4:51:40:94:bb:e7:f9:45:
8e:43:2f:49:7c:65:00:79:51:3a:d1:15:c4:ea:d4:
84:34:94:d3:c8:b0:fe:22:29:87:1b:cc:14:6d:8f:
aa:cc:45:14:e9:eb:a1:ad:99:25:c8:69:72:86:db:
19:c6:45:77:ce:47:ca:54:4e:b9:d8:46:a8:d8:bd:
22:00:b7:f8:af:84:c1:45:83:7a:15:63:99:4e:60:
c8:fd:8d:4d:4e:fc:7f:8b:3c:55:10:53:c7:ec:a5:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.160.0/22
IPv6:
2804:361c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266327
Signature Algorithm: sha256WithRSAEncryption
5d:b2:0a:79:80:9f:5e:df:c1:50:70:e1:9d:18:4a:a6:34:40:
62:c0:ec:63:e0:4b:81:7e:b2:ea:1b:ef:4e:8a:88:07:66:e8:
04:c1:78:e2:12:7e:98:97:1a:27:f9:85:46:2b:b4:22:15:41:
14:40:3b:d8:16:08:0c:de:e0:3e:72:bb:d7:2e:e4:ab:55:9e:
fb:53:14:14:75:01:75:95:12:32:f6:d3:35:4b:4f:cd:4a:2e:
76:52:82:52:5f:5a:b5:6c:29:44:2f:cc:91:16:25:41:ae:58:
f9:6a:a4:8d:ae:cf:07:4a:a1:0a:89:44:0b:61:2d:22:e8:89:
b8:3a:0b:d4:d6:90:8c:41:5a:ee:4e:19:57:da:04:14:3b:68:
44:19:46:12:ab:8a:4a:f7:6a:3f:e3:22:72:41:f4:9e:e9:fb:
13:f4:1b:41:38:df:fb:25:c9:ae:93:3b:78:9e:0b:6f:63:d1:
98:02:e9:c4:48:86:af:4d:2a:0b:96:53:7c:bb:8f:f4:af:8b:
7b:03:0c:26:4c:69:f1:e8:ea:10:e0:0d:7b:4e:0a:aa:60:d5:
13:2e:d0:c5:cb:d9:3c:62:28:52:18:44:0e:8d:1f:b8:6f:51:
25:72:6f:6f:c0:a6:cc:ce:fd:68:e8:76:d2:fa:20:c0:65:84:
b0:53:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 19:34:33 2024 by rpki-client on console-fra.rpki-client.org