Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.cer
File: D094BD14767790CF0B4A79F0DA251694C06C2C7E.cer (raw, json)
Hash identifier: Hi7TKmvl+hqOIoE9wr2qbXj/6qAK4oxZrPwdxhdImTQ=
Subject key identifier: D0:94:BD:14:76:77:90:CF:0B:4A:79:F0:DA:25:16:94:C0:6C:2C:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6925C51785C3E93F7E64325BF8BB35068194102A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.mft
caRepository: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 10:15:35 +0000
Certificate not after: Thu 03 Apr 2025 10:20:35 +0000
Subordinate resources: AS: 264404
IP: 131.161.228.0/22
IP: 138.255.16.0/22
IP: 170.82.140.0/22
IP: 2804:1df8::/32
Validation: Failed, certificate revoked on Mon 24 Jun 2024 09:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:25:c5:17:85:c3:e9:3f:7e:64:32:5b:f8:bb:35:06:81:94:10:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 10:15:35 2024 GMT
Not After : Apr 3 10:20:35 2025 GMT
Subject: CN=D094BD14767790CF0B4A79F0DA251694C06C2C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:8c:d0:d1:73:ee:58:41:85:a1:cf:b4:9c:
91:e3:47:7f:49:73:80:c7:9c:ca:c1:77:a3:70:6f:
17:1a:6c:66:28:1d:67:2b:e7:7a:58:86:61:2f:96:
c8:e9:87:f9:a3:11:8c:75:ad:0b:c2:e1:11:88:dd:
19:be:cc:80:c1:1b:74:c3:11:dd:b0:df:db:f4:c7:
ec:7a:dd:96:ee:87:10:85:8e:db:4b:ff:57:97:22:
21:5d:13:db:12:07:15:af:78:ab:8a:5d:f3:f1:17:
18:37:54:dc:35:6e:8b:21:05:9b:b2:93:36:d0:52:
be:be:98:ab:1a:7a:71:3d:d7:48:67:06:fa:44:f1:
cf:8d:8f:b6:47:d6:61:03:22:4d:dc:71:39:46:30:
89:3f:7f:e7:a2:f4:b5:17:97:78:72:2c:8f:ad:2b:
b9:71:51:df:93:5c:8a:3e:46:35:d7:64:a5:41:3f:
16:d4:d8:02:16:f6:1a:2d:af:46:5b:4f:42:e5:79:
a0:ce:ae:0b:a9:e4:ec:5d:56:ee:d9:ef:b3:ec:1e:
3f:09:a2:f6:94:6c:0e:2f:05:41:1a:ff:39:3a:91:
0b:f4:b3:f5:f9:52:7d:7e:46:0d:0c:09:cf:bb:8a:
4d:f4:ec:5c:d6:80:05:d9:b8:b7:80:c2:8a:af:6d:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D0:94:BD:14:76:77:90:CF:0B:4A:79:F0:DA:25:16:94:C0:6C:2C:7E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.228.0/22
138.255.16.0/22
170.82.140.0/22
IPv6:
2804:1df8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264404
Signature Algorithm: sha256WithRSAEncryption
5d:6c:d7:51:db:41:f3:6e:98:40:90:de:1e:b3:6f:7b:64:24:
b0:d8:20:67:94:75:3c:4d:43:fa:b6:b0:7b:04:0b:6f:74:91:
6d:7a:95:b0:10:1d:63:b4:61:f7:6d:53:4c:68:99:9c:89:6a:
37:b9:93:d4:d9:87:da:71:3b:b3:31:94:7d:d8:03:a4:d4:0d:
84:92:a9:58:07:db:1c:49:3a:bf:b1:a2:72:8e:f3:69:9f:2c:
06:8e:48:75:dc:6e:0f:b4:c6:ba:13:4c:d8:10:35:cf:78:c2:
dc:67:1d:59:3c:bd:38:fc:2f:37:4b:18:a3:86:70:9d:99:45:
97:6e:76:4e:1d:08:39:cc:99:40:19:51:94:3a:14:32:10:d8:
e8:75:3e:d0:84:c4:87:a1:47:23:74:4c:a8:9f:c9:93:7e:73:
da:e8:be:f2:99:75:30:af:2a:ef:a7:37:13:10:02:fc:f1:9d:
af:49:7d:26:10:7d:85:23:9f:1c:9e:d0:4f:5e:b3:8b:b5:8f:
74:21:7f:80:92:63:82:88:98:f6:e0:b3:36:15:eb:c7:e3:8c:
3f:1d:e3:c5:3e:2d:d2:ca:57:32:90:c8:cb:6d:c1:86:6d:2b:
71:db:d4:b5:1d:ef:16:99:c9:0c:7a:93:ec:43:11:c3:53:59:
03:bc:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 13:02:52 2024 by rpki-client on console-fra.rpki-client.org