Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.cer
File: CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.cer (raw, json)
Hash identifier: bPylale2Y3fODkKUSH9o1Y8JSN/2Hnhys1R65dTI0gE=
Subject key identifier: CE:8B:3E:AB:C5:F6:A5:A9:F6:C8:BA:E8:DF:C1:C1:27:61:2D:6E:4B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 393E31C698673F8E9F706D2F595FF1E2306F4EAC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.mft
caRepository: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 17 Jun 2024 20:09:31 +0000
Certificate not after: Mon 16 Jun 2025 20:14:31 +0000
Subordinate resources: AS: 264517
IP: 132.255.172.0/22
IP: 138.117.164.0/22
IP: 2804:20dc::/32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 10:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3e:31:c6:98:67:3f:8e:9f:70:6d:2f:59:5f:f1:e2:30:6f:4e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 17 20:09:31 2024 GMT
Not After : Jun 16 20:14:31 2025 GMT
Subject: CN=CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:02:ae:6f:0f:1d:1d:aa:63:03:20:f5:b0:
06:78:41:4b:35:38:36:2b:7e:14:4b:61:76:d5:02:
25:09:fb:ce:96:97:27:d4:7e:3b:3d:54:09:c6:16:
1d:6c:35:e3:9c:bd:64:a9:66:10:df:88:1e:5d:c5:
f9:10:25:b3:5e:e9:2f:8f:3e:9f:d6:4b:cf:8c:14:
db:6d:12:ec:81:6b:9a:dc:cb:c7:6d:2a:4a:bc:a5:
d0:a8:48:21:2f:ca:d6:c5:17:e2:08:c8:41:88:ac:
9c:3a:9c:58:63:f7:3e:94:25:7d:bf:d9:8b:03:30:
b6:db:02:33:2c:c6:08:62:21:e9:ef:5d:31:82:33:
78:fe:da:a0:4c:24:32:ad:0e:7d:45:3e:6b:73:58:
1a:be:65:cf:3f:2a:9f:5a:71:76:72:e5:69:8c:1b:
e5:79:26:2b:91:14:3e:3d:6e:30:b6:79:1a:a1:c2:
f0:54:0f:f9:bd:ac:96:84:9c:4c:07:b5:34:cf:bb:
65:53:f1:c4:da:3d:c1:6a:fe:2f:9a:01:01:a9:3d:
69:61:1f:43:b2:62:85:fd:cf:f5:c7:97:eb:13:64:
a6:38:b4:53:0f:a0:86:dd:47:c7:f5:fe:a0:13:22:
e4:28:90:9a:c0:a6:a3:7a:e0:22:5c:98:7a:6d:99:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CE:8B:3E:AB:C5:F6:A5:A9:F6:C8:BA:E8:DF:C1:C1:27:61:2D:6E:4B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.172.0/22
138.117.164.0/22
IPv6:
2804:20dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264517
Signature Algorithm: sha256WithRSAEncryption
34:28:a9:31:a6:ac:36:55:a3:1f:9b:95:2c:85:d5:b0:91:a3:
6d:e9:74:64:b3:e7:2b:79:21:15:26:8b:88:30:a4:0c:65:c4:
9a:09:82:15:c5:8c:ba:9d:31:13:39:47:d1:b0:7a:29:a1:ca:
c4:65:37:ec:26:66:8d:b6:ad:95:18:a2:bd:e6:db:e1:cf:99:
64:3c:d4:52:43:51:fc:a2:0c:e9:b7:c2:a2:d9:1a:21:6e:20:
ce:89:bd:ce:99:80:34:a5:df:7c:57:53:da:69:fd:6e:6a:67:
e5:3f:75:b6:a9:62:f4:b8:92:e3:f5:28:71:21:3e:4e:70:76:
00:03:49:db:cc:0f:e5:ad:4f:39:3d:cf:ad:6f:9c:a0:b2:9c:
39:e8:1b:f0:7e:90:76:90:41:15:b2:16:7a:4d:4c:87:e9:7a:
2c:7f:11:7c:b5:f1:c2:46:9b:e9:41:66:3b:6f:00:7a:1c:8c:
d6:56:82:84:01:9f:5d:3e:b1:b0:1b:72:66:be:72:14:9e:0a:
87:11:cb:af:35:d0:da:1e:5a:3c:8f:ce:ef:6c:00:2e:5f:92:
01:36:2c:d8:c0:cc:23:cf:6c:13:3f:86:81:d0:5b:64:17:5e:
3c:1a:6e:4b:57:2a:8d:cb:cc:48:e1:50:59:11:7a:c6:3f:98:
4f:9f:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 14:42:39 2024 by rpki-client on console-ams.rpki-client.org