Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D4D1F4FC172C7887B248D13DF360A443CBEC492D.cer
File: D4D1F4FC172C7887B248D13DF360A443CBEC492D.cer (raw, json)
Hash identifier: IT84ZYn4pHLUgYj64Ok7Cx5mPDbCAh0DiCn2wtrlOQw=
Subject key identifier: D4:D1:F4:FC:17:2C:78:87:B2:48:D1:3D:F3:60:A4:43:CB:EC:49:2D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 657B9A3234EE7BBFD4B9842A78A616D0864EBDDE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/D4D1F4FC172C7887B248D13DF360A443CBEC492D.mft
caRepository: rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 03 Oct 2024 22:50:30 +0000
Certificate not after: Thu 02 Oct 2025 22:55:30 +0000
Subordinate resources: AS: 267940
IP: 45.165.216.0/22
IP: 2804:5588::/32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 07:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:7b:9a:32:34:ee:7b:bf:d4:b9:84:2a:78:a6:16:d0:86:4e:bd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 3 22:50:30 2024 GMT
Not After : Oct 2 22:55:30 2025 GMT
Subject: CN=D4D1F4FC172C7887B248D13DF360A443CBEC492D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:e8:c3:7c:92:19:33:ee:28:20:78:b1:18:
e3:fb:80:00:20:4d:37:ac:ab:47:7f:16:08:ee:d0:
29:2b:ae:a6:e9:fc:0a:c8:5a:02:f5:75:39:4c:e0:
2f:12:c4:ed:b4:68:bd:0e:e8:81:f2:1b:ab:36:72:
1c:79:53:c2:e6:ab:fa:76:1a:c9:8c:eb:dd:93:bd:
c8:8b:55:26:65:85:27:5e:02:0f:5b:a5:1f:7b:c3:
19:f6:26:2f:d0:7f:aa:11:55:a6:7c:9b:d4:13:60:
b2:1c:d9:5d:37:8d:48:de:90:70:53:a9:db:f2:5e:
02:c5:f4:57:eb:ca:0a:61:35:87:e3:71:82:8d:98:
cd:8a:ce:14:be:99:fd:10:9d:66:f2:41:29:3f:e0:
36:53:b6:82:c3:54:cb:5d:41:75:33:41:e4:a9:39:
22:ab:63:90:83:0c:44:da:81:7d:cc:07:6e:d7:5d:
73:e5:f2:6d:da:8c:80:5f:c6:19:e6:e2:c7:68:64:
0d:11:b2:4e:98:2a:ed:2d:98:b0:95:ba:84:0a:f5:
02:7e:f8:91:6a:8a:e5:22:bd:a5:d0:f1:37:7d:23:
cb:06:8e:4c:55:34:aa:79:c9:33:50:be:97:79:8c:
cc:0b:71:68:f3:cf:88:2e:c0:3c:5b:60:24:30:59:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D4:D1:F4:FC:17:2C:78:87:B2:48:D1:3D:F3:60:A4:43:CB:EC:49:2D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/D4D1F4FC172C7887B248D13DF360A443CBEC492D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.216.0/22
IPv6:
2804:5588::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267940
Signature Algorithm: sha256WithRSAEncryption
50:ff:6f:92:eb:91:74:25:16:da:28:ab:54:c8:79:b6:7b:66:
80:a5:8e:fc:75:c0:4e:79:12:70:8d:ad:8d:ed:a8:13:e4:5d:
88:79:e3:62:db:24:ec:49:a5:54:81:0a:29:3c:70:f1:03:e4:
ee:66:e9:1e:25:d5:cc:d2:e4:ca:27:de:96:f4:a7:0b:b5:f4:
9d:df:2c:81:b4:b5:4d:4e:eb:fc:10:bb:44:0b:60:c4:02:7e:
26:da:e1:e2:a7:e8:c6:6a:0b:51:a8:ed:9b:94:35:de:28:ca:
7d:1e:be:33:2a:31:33:03:a8:e3:6a:ef:b1:d1:c1:ae:45:35:
0c:ca:d3:da:f4:95:cd:1d:68:52:76:61:96:10:25:52:ef:e7:
54:ba:32:2f:ca:8b:ee:35:46:cb:7b:c1:cb:ce:a6:04:9e:6b:
f0:94:67:96:7d:01:95:49:f1:eb:19:01:ef:24:32:43:86:cc:
b4:03:a4:a5:8b:8e:f0:77:6c:6c:2e:72:b6:4f:e0:53:6a:6e:
f6:b1:6e:36:25:08:2d:74:cd:d2:bb:a2:9e:46:61:2b:db:2b:
f6:82:2f:4f:38:12:23:74:8e:71:81:92:1c:cf:d6:74:66:ba:
1b:ea:f4:b7:f3:b8:8e:84:b1:8c:41:12:9a:ad:bb:7c:b3:08:
75:47:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 09:53:47 2024 by rpki-client on console-fra.rpki-client.org