Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.cer
File: C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.cer (raw, json)
Hash identifier: G/nVqN7wgJQDRU8HoQKwj93TUbroRho0HFCXc/jn2c4=
Subject key identifier: C7:1F:CA:85:C3:B8:D7:6F:DF:2A:FB:C9:FD:18:52:35:8A:C5:56:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 23E86276E638E1E80DE0C58A788CFBE08EC311EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.mft
caRepository: rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 12:16:36 +0000
Certificate not after: Thu 03 Apr 2025 12:21:36 +0000
Subordinate resources: AS: 264230
IP: 190.109.88.0/22
IP: 2804:2490::/32
Validation: Failed, certificate revoked on Fri 05 Jul 2024 16:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e8:62:76:e6:38:e1:e8:0d:e0:c5:8a:78:8c:fb:e0:8e:c3:11:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 12:16:36 2024 GMT
Not After : Apr 3 12:21:36 2025 GMT
Subject: CN=C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:87:29:4d:40:2b:78:bc:e8:3f:1e:7e:92:58:
ec:1e:8a:18:70:2f:a8:98:60:cd:f8:bf:81:d4:2c:
71:88:5a:f8:c4:90:ff:5d:9e:5e:02:94:8f:67:b3:
f4:cc:ec:2a:c3:e0:a3:35:b5:ca:2d:23:ed:e1:31:
80:fa:45:26:cf:02:6a:25:56:1f:9b:73:bf:c4:5c:
b2:35:ee:67:83:2c:c4:d1:6a:35:7d:ac:a5:3b:5a:
3f:17:c6:b2:91:be:1c:bc:d8:b0:52:b1:3f:f1:6a:
02:d1:ff:45:aa:e6:06:c5:cd:0d:d9:56:62:93:5a:
f2:da:18:8c:7e:26:42:6b:8a:aa:aa:d2:9b:29:6e:
c6:f7:e3:8a:79:83:7c:17:19:ea:19:58:f9:9a:aa:
3a:b2:cc:f8:07:a1:2c:d8:8b:0c:ce:03:ef:47:9c:
cd:d1:ca:eb:44:7f:aa:d9:8c:62:dd:ab:c7:6f:07:
ab:87:53:77:02:a8:c7:e5:a4:96:a7:f4:94:0c:2e:
38:cc:fb:3b:65:55:a4:d6:c3:b0:ac:48:d2:4b:cf:
6f:97:dc:7a:f9:92:3b:27:40:be:e3:e8:8e:29:80:
1d:50:68:e4:a8:10:a9:ca:55:74:03:c7:90:c3:16:
a9:ea:a1:2b:8a:46:c9:dc:33:ef:7f:dc:bf:9f:3f:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C7:1F:CA:85:C3:B8:D7:6F:DF:2A:FB:C9:FD:18:52:35:8A:C5:56:BB
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.109.88.0/22
IPv6:
2804:2490::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264230
Signature Algorithm: sha256WithRSAEncryption
6e:73:2e:21:e5:33:b2:89:5d:68:38:02:cd:60:75:96:d0:7f:
57:e6:f1:ed:20:7b:5e:72:d6:4d:fd:42:c9:7c:ed:1f:e3:53:
ad:19:a7:aa:e6:ee:31:6b:14:94:6a:0b:60:68:5c:05:83:b5:
cf:14:2b:9c:e2:1d:08:19:60:1a:10:df:24:e4:7a:fa:2e:f8:
58:aa:e9:37:f2:2a:78:e1:c4:b7:32:9d:df:c3:42:26:9d:45:
42:ae:da:82:7c:32:10:f8:0a:c2:79:8a:36:2d:23:b4:42:05:
3f:d7:11:45:ff:b9:f1:ce:db:3b:ea:b9:d6:c3:d3:06:7b:fd:
fe:4b:a3:ad:01:84:6b:60:a3:95:6a:75:ab:8a:43:a1:7a:55:
75:64:59:73:5b:f1:c0:52:b4:4c:6c:e7:5a:37:87:b4:23:57:
02:6d:65:a0:00:a6:9d:4a:a2:b4:c5:59:41:e2:cd:f5:98:2d:
e5:29:43:b6:47:1c:db:0b:15:19:21:2f:66:83:1b:99:f4:28:
18:c0:54:9d:46:57:f6:b6:37:8a:ef:8d:3e:5d:b9:64:b1:3d:
17:db:53:6e:6c:85:7c:ad:8e:de:e2:1d:4d:21:4f:d7:1a:41:
72:80:c2:72:d9:4d:67:f0:18:4a:4a:41:3d:ec:bb:2d:85:91:
30:63:e7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 17:25:51 2024 by rpki-client on console-fra.rpki-client.org