Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
File: CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer (raw, json)
Hash identifier: dzS6IfeL2/LpDTgookivqqzya8Xy4Oq5I1jxdIsPikU=
Subject key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 081017C74D6644A0CFDE42B48313BEBF55BC0FDE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.mft
caRepository: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 20:15:47 +0000
Certificate not after: Wed 02 Apr 2025 20:20:47 +0000
Subordinate resources: AS: 28125
IP: 187.19.16.0/20
IP: 191.36.160.0/21
IP: 2804:1488::/32
Validation: Failed, certificate revoked on Mon 08 Jul 2024 05:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:10:17:c7:4d:66:44:a0:cf:de:42:b4:83:13:be:bf:55:bc:0f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 20:15:47 2024 GMT
Not After : Apr 2 20:20:47 2025 GMT
Subject: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:a3:83:54:38:65:4a:8f:d5:f5:f4:e6:47:
8f:63:5c:0f:30:66:82:e8:a8:6e:15:ef:a7:74:b3:
47:78:4b:98:71:c8:90:16:6d:72:c3:c5:a9:3d:b9:
1b:97:ba:31:d1:f9:98:26:fa:17:c5:4f:88:59:a3:
d3:7d:6a:31:fe:ac:10:01:f2:5a:6e:0f:77:d8:12:
59:42:fa:c5:2c:c6:f1:a1:a1:a7:99:88:d9:1c:6a:
95:8d:c6:66:83:88:f5:d5:b2:e0:db:02:89:00:fb:
a4:8a:23:dc:ee:b4:62:8c:9a:be:a1:86:54:cf:37:
b0:ad:3e:d8:e2:1b:67:e5:9b:9b:9e:9f:c2:d5:fb:
ea:c8:6c:79:4e:c6:68:94:6c:3f:9d:f3:d0:75:ac:
8b:8e:85:57:f6:c6:e8:a7:7c:ea:ca:43:74:e6:93:
42:a9:a6:e9:46:2c:12:04:7b:3a:7b:ed:93:f4:d7:
a8:d2:e3:5c:17:a8:f4:80:4b:cc:cf:16:80:a2:66:
47:d9:38:89:b9:67:85:1a:67:f6:58:14:e9:86:1a:
e9:db:17:1d:6d:82:1a:fe:4d:58:61:0f:84:1b:8c:
85:dc:bd:6c:63:ae:14:3d:78:6e:92:e0:bd:6d:51:
34:10:18:9d:71:72:90:0e:ee:c0:af:05:47:1c:03:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.19.16.0/20
191.36.160.0/21
IPv6:
2804:1488::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28125
Signature Algorithm: sha256WithRSAEncryption
30:f2:27:d4:14:95:09:2b:d1:66:cd:5f:88:2d:95:43:9e:59:
16:38:ba:cc:a2:42:8e:b2:3f:f0:5f:c4:ca:cb:c5:dc:cb:93:
b2:7a:90:d2:2e:05:3d:d6:c6:b2:3f:8d:ba:8c:15:0d:7a:ee:
38:26:30:c2:4c:65:58:7e:a0:a5:5a:62:46:a7:99:ef:6e:d5:
7f:99:f1:1c:53:f8:21:d1:f4:ac:0d:fb:96:88:c1:e8:2c:76:
6b:91:2f:a1:36:8e:59:cb:51:31:cf:1f:67:64:26:56:e6:e1:
1e:ea:1e:5c:d7:33:83:d9:df:a2:40:32:c5:58:67:66:20:99:
30:cf:e4:8a:2d:73:6e:c5:01:8c:3f:bf:d4:23:67:7f:46:72:
cf:90:6b:1a:d9:06:1b:45:36:27:9d:3e:49:02:97:5e:68:37:
43:3b:30:1f:74:70:8b:7a:2d:b4:38:25:70:5e:26:2c:7c:48:
7b:a6:68:c6:a6:81:94:57:f0:60:36:2b:66:84:06:17:85:1b:
6b:33:2c:db:c0:74:bb:52:af:f0:f3:8b:ea:d7:79:d2:9a:8c:
81:05:11:9b:b8:25:a5:32:14:39:a5:ba:c9:d8:5f:79:26:1c:
d7:c6:42:c2:64:f4:1b:01:5f:a5:7b:1a:bf:dc:3d:ae:c6:b8:
cd:ca:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 07:24:45 2024 by rpki-client on console-ams.rpki-client.org