Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.cer
File: CD38A7C7D796C57003E777BDB835D0DB8AC490C6.cer (raw, json)
Hash identifier: tQDLRHhA1MkxFh/zfzlf1+7PTn2lEcfUV3e0KaPjOms=
Subject key identifier: CD:38:A7:C7:D7:96:C5:70:03:E7:77:BD:B8:35:D0:DB:8A:C4:90:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 487C3C8E51FE6BEB5222EABE9F4D048477174DB2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.mft
caRepository: rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:25:55 +0000
Certificate not after: Wed 02 Apr 2025 18:30:55 +0000
Subordinate resources: AS: 268751
IP: 45.172.60.0/22
IP: 2804:5a24::/32
Validation: Failed, certificate revoked on Mon 28 Oct 2024 19:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7c:3c:8e:51:fe:6b:eb:52:22:ea:be:9f:4d:04:84:77:17:4d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:25:55 2024 GMT
Not After : Apr 2 18:30:55 2025 GMT
Subject: CN=CD38A7C7D796C57003E777BDB835D0DB8AC490C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:d5:c9:02:6d:cc:de:bc:3a:69:55:7c:2b:
fc:b6:cb:b2:14:34:5e:5f:52:0c:d8:6d:c9:fb:d4:
11:e4:05:c4:36:61:19:41:13:2e:73:4a:64:a9:79:
46:36:44:20:54:c4:fd:4b:5c:f4:e4:74:dc:23:ff:
06:14:ed:d5:27:cf:70:92:30:e4:6c:15:fd:d0:60:
0e:f4:ae:ed:f0:ef:ab:0d:58:f1:96:64:63:9e:23:
4b:91:8d:ef:d4:5f:58:0d:02:ea:26:a5:5c:90:4c:
0a:d6:b2:05:5c:bd:7b:e9:85:41:b3:ea:9e:dc:4e:
58:57:fb:63:8c:e9:a6:8d:94:4c:1e:40:bc:98:53:
a6:b2:86:ea:10:d1:61:84:d6:0d:5a:7a:47:c1:4d:
01:b7:8f:7f:c8:77:20:e1:99:e1:85:be:9e:67:1e:
5e:5d:6f:3d:c6:7b:fa:4e:4e:c3:1e:1b:6e:36:2b:
a2:a2:73:17:af:cc:34:76:71:64:15:ad:35:13:18:
b3:77:33:d6:e3:8d:bf:ac:6e:56:6d:59:33:59:39:
24:27:e1:00:be:9a:fc:26:c8:70:b2:0d:76:37:d2:
cc:a5:a1:ff:1f:59:6e:d8:98:02:58:28:3d:9f:60:
7f:96:ff:37:0f:ca:4e:5e:02:22:a2:df:64:d0:14:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:38:A7:C7:D7:96:C5:70:03:E7:77:BD:B8:35:D0:DB:8A:C4:90:C6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.60.0/22
IPv6:
2804:5a24::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268751
Signature Algorithm: sha256WithRSAEncryption
29:df:95:af:79:b5:8c:bc:f3:9a:a6:8f:7d:c0:d4:bd:6b:83:
99:12:cc:ee:1c:5e:77:58:41:17:1d:bb:46:f2:91:bf:d9:bb:
8a:3e:04:15:f3:88:73:b7:da:f1:94:65:22:4a:fb:24:f0:fa:
11:34:e7:f9:06:ce:2c:d4:c4:4e:8f:9c:9f:aa:65:3a:9c:f4:
c3:90:05:5a:0c:31:9e:f6:ce:07:72:85:08:7c:8c:53:85:4e:
19:ef:c7:37:a8:38:21:f9:53:42:b1:58:2f:8a:0a:50:f4:78:
fb:44:58:e2:e1:3f:d6:b5:d9:a7:96:98:80:4b:9f:bb:0d:5b:
d8:86:b8:c5:71:1b:54:50:74:8f:4a:d6:97:b8:78:2d:f4:97:
29:ce:b2:62:17:f0:4d:be:c0:dd:ef:b7:e5:f5:a3:f1:ca:13:
b1:11:77:61:2d:72:91:06:c7:f9:63:4b:77:9d:e5:99:26:c0:
74:b3:ea:d2:42:84:da:f5:8d:21:48:af:38:fa:0f:dc:39:83:
2a:f0:a9:ea:d0:d1:43:e1:cf:23:70:1d:f7:70:af:97:c0:0b:
29:ab:60:1c:d8:80:4e:5f:8d:a2:93:47:c9:ee:0a:2b:70:73:
ad:8f:e2:39:26:94:e5:5f:45:33:73:4a:42:65:db:40:dd:a1:
9a:e9:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 22:57:00 2024 by rpki-client on console-ams.rpki-client.org