Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer
File: CA948884CA136F59A5F29D9B37F2E11919035585.cer (raw, json)
Hash identifier: 1zExa765LdA/fQgDLVkFOkm8RGfb1ZenZyMTbfIJzao=
Subject key identifier: CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 184572FB52C00170445F54DDB22EA4C10FF30CF9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/CA948884CA136F59A5F29D9B37F2E11919035585.mft
caRepository: rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 11 Oct 2024 20:22:36 +0000
Certificate not after: Fri 10 Oct 2025 20:27:36 +0000
Subordinate resources: AS: 264562
IP: 45.174.188.0/22
IP: 45.239.8.0/22
IP: 138.36.0.0/22
IP: 168.232.84.0/22
IP: 187.49.176.0/22
IP: 2804:2190::/32
Validation: Failed, certificate revoked on Sun 20 Oct 2024 20:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:45:72:fb:52:c0:01:70:44:5f:54:dd:b2:2e:a4:c1:0f:f3:0c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 11 20:22:36 2024 GMT
Not After : Oct 10 20:27:36 2025 GMT
Subject: CN=CA948884CA136F59A5F29D9B37F2E11919035585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:0a:75:7f:f8:3d:ac:a6:b2:59:df:9a:55:
cf:48:97:28:e5:72:84:c2:0f:46:fe:2a:df:20:61:
b8:58:69:10:c7:7d:0f:16:54:22:71:7a:50:b9:34:
a9:44:f6:a3:81:0c:e9:68:47:f2:94:9e:08:fb:e6:
a7:92:24:33:27:c0:82:90:73:c1:68:a2:52:8a:7b:
fe:86:f6:dc:a3:50:51:6e:4e:9f:90:ea:77:7a:77:
17:a8:34:12:aa:4a:31:56:2d:de:0b:89:cc:cc:db:
ae:36:9d:6b:c8:29:a3:7c:19:af:8f:58:e9:be:a5:
9a:65:7d:73:f5:c7:43:68:60:cb:12:ae:8d:75:b6:
bd:e1:d5:3f:5c:ab:e1:72:5e:fe:7a:9c:fa:88:09:
74:e0:6e:dd:ea:b0:c1:89:0e:f1:e9:fd:b9:10:08:
3d:71:f6:f7:95:43:87:05:50:52:a9:e0:86:d0:15:
e1:57:bd:ad:0b:47:eb:e6:7b:c8:dc:b0:08:0c:df:
9c:ae:63:07:40:81:bc:f0:2f:3f:3f:13:0b:ac:19:
f6:79:57:9b:b2:6d:b8:76:e2:8f:c3:e9:16:ae:20:
ff:15:69:33:6c:ed:e3:7c:3f:0b:c3:67:ed:74:ed:
54:6a:4e:ed:25:4a:bc:14:49:23:e9:3e:c1:10:f3:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/CA948884CA136F59A5F29D9B37F2E11919035585.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.188.0/22
45.239.8.0/22
138.36.0.0/22
168.232.84.0/22
187.49.176.0/22
IPv6:
2804:2190::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264562
Signature Algorithm: sha256WithRSAEncryption
3c:bf:e7:2d:a8:de:03:79:ed:fb:a3:8a:af:54:7a:b1:99:43:
d6:ee:82:82:1c:fb:8b:2a:a6:18:7c:b0:3a:10:af:1f:c9:79:
00:f1:ef:99:71:3e:15:22:2f:79:24:2d:af:87:48:bf:d4:eb:
fc:0d:d4:28:9e:ad:d1:81:75:0b:f4:42:14:78:3f:57:3f:75:
a3:fc:85:6b:6c:9d:af:bb:9a:c4:f0:fd:83:f1:64:5e:cb:19:
cd:1e:8a:17:42:df:b5:4e:6e:a2:25:bd:82:44:e0:0b:d5:2f:
d1:a0:10:18:89:76:76:34:12:42:32:cc:38:cd:61:0b:76:8f:
09:d5:57:0a:f0:29:3d:8a:40:7f:e4:51:b4:92:6f:9c:0e:a5:
cb:d6:85:6a:1b:76:f4:9e:72:9a:d6:36:b8:06:11:cc:9e:18:
17:0f:67:d9:5d:18:a2:b4:6d:e3:7c:de:6c:ec:7c:96:67:14:
eb:5b:01:5f:ee:dd:2d:75:74:93:f2:59:fa:9e:6e:97:a9:d6:
01:d8:41:92:f1:09:88:84:40:b4:81:ac:4d:65:22:df:a4:79:
a3:a2:7b:a8:db:b3:9b:39:84:6e:c3:f6:ad:04:5d:27:3b:5a:
ba:85:a8:24:ff:40:36:e7:f0:fd:8e:a5:0b:f6:17:5f:83:4f:
da:07:aa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 22:19:26 2024 by rpki-client on console-fra.rpki-client.org