Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.cer
File: CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.cer (raw, json)
Hash identifier: dWHbj3LJvY3qrWLJXC5vUp8Zb+8lhWeDtCn2PQauQ/0=
Subject key identifier: CD:A3:48:A4:B2:FE:FD:9E:13:C7:F0:75:05:38:DD:EA:A5:87:DB:22
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 63004753BF0F4C445B6A035550B0C0902AE8E98D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.mft
caRepository: rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 02 Aug 2024 15:52:58 +0000
Certificate not after: Fri 01 Aug 2025 15:57:58 +0000
Subordinate resources: AS: 272533
IP: 2804:82ac::/32
Validation: Failed, certificate revoked on Sat 09 Nov 2024 22:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:00:47:53:bf:0f:4c:44:5b:6a:03:55:50:b0:c0:90:2a:e8:e9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 2 15:52:58 2024 GMT
Not After : Aug 1 15:57:58 2025 GMT
Subject: CN=CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:f3:20:6b:41:8b:75:f8:c9:8b:97:3c:8d:
00:d4:df:c4:67:97:b4:27:fa:aa:6a:2c:f1:10:75:
0e:ba:62:28:15:ed:7a:40:6c:30:2e:7e:97:3a:d8:
05:20:63:b7:8c:f3:56:08:66:24:17:74:cc:68:82:
4c:b4:84:11:23:17:b0:42:0b:02:3f:4d:50:53:d9:
0f:fd:66:aa:11:3d:e6:88:7a:b7:05:16:0a:b9:fb:
a0:c3:b9:e4:3e:69:46:83:c1:d3:7a:65:6f:ab:91:
40:23:6c:7c:7b:30:df:11:d5:07:af:cf:7a:fe:70:
a2:70:30:e0:ee:a5:99:f1:4a:56:5f:83:07:5f:44:
e1:44:fb:54:fc:9c:75:af:02:8f:6f:11:ed:69:26:
01:2c:e7:1a:38:0e:a0:a8:a2:e7:f0:4a:45:ea:c7:
34:73:f9:bc:44:f4:4f:27:ad:1d:9b:12:01:5a:d3:
f8:ff:6d:6e:b1:f4:05:b1:44:73:5c:80:af:e7:3e:
f4:ad:b0:40:9b:39:d5:87:78:ef:3d:dd:01:81:7d:
69:e4:38:e6:85:4b:fe:d6:14:fa:fa:1b:a6:3f:e2:
19:27:43:3a:f7:38:87:d4:fa:22:08:46:cb:c2:1c:
76:23:00:e1:2e:30:ed:f7:21:24:a1:d8:ac:17:d4:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:A3:48:A4:B2:FE:FD:9E:13:C7:F0:75:05:38:DD:EA:A5:87:DB:22
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:82ac::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272533
Signature Algorithm: sha256WithRSAEncryption
94:1e:9c:73:d4:00:af:df:3a:bc:b9:78:54:83:81:7d:7a:1c:
fd:10:c2:96:68:8c:96:6a:77:e3:90:95:5b:69:5e:91:44:33:
d8:a3:37:74:f3:2d:90:ef:ad:3b:d6:cc:51:ce:e2:96:dc:99:
a8:c5:b3:35:26:2b:d3:79:01:89:87:b2:e2:ac:9d:28:15:ca:
5d:ab:61:59:05:b5:aa:23:b1:9b:d5:8b:e5:0c:8c:4d:8c:5d:
ee:57:84:d2:b1:00:fa:a0:1b:b3:db:64:b2:a0:b8:85:34:3a:
6c:34:38:56:70:bb:f4:e7:b6:3c:b1:be:a3:48:b3:1b:0a:57:
00:fa:a7:50:1e:bd:e4:48:42:3d:1b:34:a7:43:8e:10:5c:e9:
ef:30:a1:4a:8a:87:79:b2:06:00:85:6f:bb:db:b9:e1:30:46:
bb:e4:7d:ef:10:5d:7d:9d:1c:c0:8d:d3:99:00:ff:4b:fb:26:
59:cf:59:d2:82:73:d8:79:77:cb:b4:72:b8:b8:a4:0e:d5:57:
34:3c:b3:46:2e:ac:23:f6:07:59:ad:90:3f:a1:24:33:32:b8:
15:3c:6b:c9:63:1d:ef:6e:75:a9:4b:63:a0:cf:44:e8:45:38:
49:6c:c7:ce:3e:d3:7b:a4:b1:22:b4:2d:d4:5a:aa:04:04:88:
90:a9:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 00:52:46 2024 by rpki-client on console-ams.rpki-client.org