Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer
File: CF5DDC6846F108B3778C38774DB09DDC03C92903.cer (raw, json)
Hash identifier: IR0tC1WhXIb51/DxUVvIIJRkjCnA313SeQ/b51c9qN8=
Subject key identifier: CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 70A28771A3968960C4C0BF53A5F481684E4F2FFA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.mft
caRepository: rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:26:39 +0000
Certificate not after: Wed 02 Apr 2025 18:31:39 +0000
Subordinate resources: AS: 22356
IP: 177.190.96.0/20
IP: 186.192.128.0/19
IP: 189.124.96.0/20
IP: 200.160.192.0/20
IP: 200.170.80.0/20
IP: 201.76.192.0/20
IP: 2001:129c::/32
Validation: Failed, certificate revoked on Fri 17 May 2024 13:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a2:87:71:a3:96:89:60:c4:c0:bf:53:a5:f4:81:68:4e:4f:2f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:26:39 2024 GMT
Not After : Apr 2 18:31:39 2025 GMT
Subject: CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:b0:bf:ff:78:d0:43:80:8f:f4:8b:88:d4:
a3:18:43:3d:98:23:f8:6d:92:1c:12:46:da:22:f6:
be:63:a6:b4:35:b6:48:22:9e:c9:9f:fc:e1:eb:87:
5a:57:1b:f4:c8:93:16:db:cf:1e:03:99:75:10:5b:
26:2e:62:71:b2:11:10:65:87:8a:33:15:80:65:0a:
3a:5b:18:0a:bb:db:2f:9c:90:50:fd:5c:65:b9:e7:
74:fd:5c:4b:b1:9f:98:f9:26:1d:27:44:70:7e:5e:
87:d6:4f:bd:3d:32:fe:a7:23:98:90:2b:65:ce:0c:
47:e3:e7:78:9d:2f:d1:02:42:88:a4:74:93:a8:58:
f0:80:31:f6:1c:fb:c3:11:04:ed:44:f5:d4:8f:0e:
53:f2:c4:05:4a:99:bd:8a:bd:74:b6:33:ba:32:c7:
98:f5:b1:47:02:e7:74:54:2f:69:7c:09:86:63:7e:
b7:6a:67:84:7f:ea:b1:21:f0:04:32:94:04:a4:d4:
1c:b4:6f:ee:0a:9a:3d:67:50:f3:07:84:a4:64:d7:
66:a4:b6:73:6d:94:17:91:be:3c:c0:52:b1:01:8c:
4b:97:5d:27:bd:d6:52:ca:40:36:5d:a8:c4:0d:a0:
49:18:b0:d4:9e:a9:10:92:71:b1:03:e9:f5:dd:a8:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.190.96.0/20
186.192.128.0/19
189.124.96.0/20
200.160.192.0/20
200.170.80.0/20
201.76.192.0/20
IPv6:
2001:129c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22356
Signature Algorithm: sha256WithRSAEncryption
6f:7d:6e:47:aa:b6:69:09:5b:bd:bc:1e:16:dc:f2:b0:1d:6c:
80:f3:1e:8f:b8:67:16:4d:a6:e6:4e:82:9d:ba:40:a4:2a:1b:
94:4b:e0:00:5b:c6:1c:ef:80:60:08:08:41:2e:be:8f:77:56:
29:9d:6d:73:dc:8e:99:5a:aa:7a:db:a3:86:51:f2:dd:50:05:
ba:98:ca:93:b1:16:d7:80:c0:c0:1f:1a:10:7c:97:68:36:fc:
8a:81:6f:86:69:5b:3d:80:67:54:27:68:99:36:d9:60:a7:5c:
c0:c1:4b:85:43:ad:e1:bb:4e:20:53:3b:b4:71:48:a0:3e:b4:
5e:8d:ad:53:e1:3d:d0:5c:c4:6c:14:00:60:35:dd:43:4b:c7:
f0:d3:4e:ea:b7:20:f7:9d:a6:b9:2e:26:48:ac:d5:7a:2f:21:
51:fb:da:5d:e1:9b:1b:02:25:2a:7a:4d:6f:47:49:58:0e:f8:
b8:f5:79:22:6d:de:f2:b7:33:60:c8:70:05:65:8c:75:19:9b:
90:ad:e3:2e:46:f3:0e:04:11:fa:37:f8:cf:4e:f7:fe:e8:a6:
ed:b6:34:86:c7:4f:ce:c4:da:a9:db:e2:3c:b7:41:a9:8f:a4:
a9:01:f9:d7:e9:a8:86:20:e7:f5:18:75:1e:7c:2e:b4:ee:a3:
4c:c3:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org