Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D4FA9683E2EF8D565176DA247E4F726152BAFFF1.cer
File: D4FA9683E2EF8D565176DA247E4F726152BAFFF1.cer (raw, json)
Hash identifier: j61krOw6A7g+cKFIAbxN+1DLRG3j+l2kacSj4PbLJ/8=
Subject key identifier: D4:FA:96:83:E2:EF:8D:56:51:76:DA:24:7E:4F:72:61:52:BA:FF:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 265E04C0A186B146D6EC46F0C44B466C99522FFC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/D4FA9683E2EF8D565176DA247E4F726152BAFFF1.mft
caRepository: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 11 Nov 2024 15:42:18 +0000
Certificate not after: Mon 10 Nov 2025 15:47:18 +0000
Subordinate resources: AS: 264999
IP: 170.84.76.0/22
IP: 2804:3130::/32
Validation: Failed, certificate revoked on Sun 24 Nov 2024 16:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:5e:04:c0:a1:86:b1:46:d6:ec:46:f0:c4:4b:46:6c:99:52:2f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 11 15:42:18 2024 GMT
Not After : Nov 10 15:47:18 2025 GMT
Subject: CN=D4FA9683E2EF8D565176DA247E4F726152BAFFF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b0:bf:72:5e:6b:fd:d0:91:ff:23:50:8b:a1:
b8:18:b6:27:cc:18:d7:94:19:e8:be:a2:da:9a:ad:
14:19:c4:fd:80:b8:59:91:95:8c:59:47:c8:8b:01:
08:e3:b8:eb:61:b0:5e:13:36:66:f5:5e:45:91:bf:
42:90:26:4d:81:ec:30:00:4c:e0:9d:2a:a6:4b:84:
e0:31:43:3b:3f:cc:98:e7:a6:ab:0a:9a:1b:97:cd:
9c:a8:e1:a5:bb:aa:26:ce:00:13:8d:e1:38:3b:df:
1c:52:30:eb:8b:f6:39:aa:2a:e4:d7:ed:e3:c3:bf:
52:1e:35:ca:e5:e4:a0:98:c5:f2:f0:a6:3a:b1:2c:
72:46:2b:d5:41:2a:65:c2:7a:ac:c3:2d:08:a1:b4:
3c:35:74:3c:ae:a5:71:30:ad:c9:0c:b0:2f:fb:58:
d1:dd:3a:5a:97:ae:93:f2:27:02:d3:5f:a5:52:58:
b0:05:b3:1a:48:c6:b4:27:fe:e9:52:03:8d:7d:72:
7c:e3:9a:e2:2a:f9:a7:f7:71:6e:8d:e4:03:2e:3a:
2c:45:2d:d3:c1:83:17:dc:66:1d:48:31:ce:56:7a:
7e:78:57:9e:4e:63:c4:29:1e:95:7e:e4:ac:41:a7:
b9:8a:73:fa:8e:d1:d0:fb:ac:b4:2e:67:a2:5e:ed:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D4:FA:96:83:E2:EF:8D:56:51:76:DA:24:7E:4F:72:61:52:BA:FF:F1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/D4FA9683E2EF8D565176DA247E4F726152BAFFF1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.76.0/22
IPv6:
2804:3130::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264999
Signature Algorithm: sha256WithRSAEncryption
a6:20:3a:24:7c:56:ef:83:d5:c6:63:b2:dd:ff:f3:16:9a:56:
5d:82:53:93:ba:ad:53:8d:64:93:9b:95:09:66:48:08:a6:eb:
ad:00:42:ff:7c:11:b2:c0:c4:98:1b:59:9d:58:ff:01:15:0c:
d8:00:e6:10:79:ea:98:60:81:5a:6d:d9:9d:88:a8:82:38:89:
59:fe:09:4b:2d:3f:47:fa:2a:d4:2f:aa:78:23:96:2a:f6:5b:
0d:f5:bb:fc:30:80:9c:bc:df:e3:4c:3f:da:53:79:f6:f9:77:
69:36:a8:92:2e:31:be:a6:d0:c9:b7:6e:c7:26:6c:c2:24:d1:
ab:69:cd:61:da:14:c1:c7:ba:71:72:a2:33:e1:18:11:9a:e7:
53:bb:cf:df:3b:a7:fe:75:c7:93:cc:31:bc:cd:7c:f9:48:b7:
ef:76:d9:c7:ee:bf:34:2c:f3:e3:f9:b4:c6:06:ca:70:61:be:
3c:a7:cd:fd:be:6e:89:56:57:e9:9c:2d:db:be:6b:4e:53:9b:
24:b2:63:0a:21:76:c9:9d:54:0f:62:3a:ac:c4:37:92:7a:41:
af:17:80:eb:94:60:7b:75:0b:2d:c0:20:77:d2:8d:a3:75:48:
fc:7a:c1:08:8c:1b:ed:b2:95:94:1d:47:83:df:f7:b5:e5:88:
1f:15:c7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:39:59 2024 by rpki-client on console-ams.rpki-client.org