Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.cer
File: D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.cer (raw, json)
Hash identifier: F3E5JRPVMJyzhVrIMpHnPDnRu7HYf0B8/yk4TCbCp3M=
Subject key identifier: D7:07:0B:DA:8B:EE:3E:41:04:1E:7D:F6:8A:C2:BA:D4:65:DF:60:DE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1D0D4DCB0C996363909ABE5B84DCD04AAA0DB6A0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.mft
caRepository: rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 13:44:26 +0000
Certificate not after: Thu 03 Apr 2025 13:49:26 +0000
Subordinate resources: AS: 262380
IP: 131.0.240.0/22
IP: 138.255.92.0/22
IP: 177.128.232.0/22
IP: 186.251.28.0/22
IP: 2804:898::/32
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0d:4d:cb:0c:99:63:63:90:9a:be:5b:84:dc:d0:4a:aa:0d:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 13:44:26 2024 GMT
Not After : Apr 3 13:49:26 2025 GMT
Subject: CN=D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:3f:c5:a9:dd:0b:a1:f5:00:c6:27:81:d9:
a3:24:e6:50:5b:92:f4:39:43:c9:2c:2d:de:02:ae:
a6:cb:ee:84:05:52:6b:83:9d:5a:39:46:b4:ae:e5:
be:8d:19:33:d2:6d:34:43:fb:a7:9d:56:3d:7d:6c:
0e:27:07:53:70:e3:24:aa:e5:78:cf:25:c5:f7:2b:
5e:10:70:8c:c8:90:e1:7f:f4:a7:64:5e:e6:ce:52:
7d:e0:62:70:89:9c:e3:c5:b1:e8:11:fb:72:e0:ab:
cb:7d:1a:35:45:02:45:94:65:97:bc:66:13:52:68:
53:5d:20:2b:28:95:78:e5:68:ec:f3:7a:4f:9f:1c:
b8:23:b0:1f:9c:5e:33:ef:24:86:77:c6:66:35:bb:
d4:3f:da:e8:93:f9:e8:6c:0b:30:a3:c1:73:d1:ce:
30:b9:97:aa:be:a8:1f:b5:e2:85:37:c0:2b:2f:ae:
cf:05:2b:dc:2f:eb:c1:63:88:d9:51:72:57:95:a7:
cf:f6:7e:08:32:56:fd:6e:dc:23:79:ff:83:3c:0e:
54:ab:ae:d6:eb:a1:4f:d0:ea:e3:25:45:f7:ff:eb:
70:f5:c6:47:cc:ba:a3:3b:47:e8:b7:b4:4e:b5:80:
2b:b6:f9:44:78:9a:b8:9c:c2:dc:ac:0d:9b:2a:35:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:07:0B:DA:8B:EE:3E:41:04:1E:7D:F6:8A:C2:BA:D4:65:DF:60:DE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.240.0/22
138.255.92.0/22
177.128.232.0/22
186.251.28.0/22
IPv6:
2804:898::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262380
Signature Algorithm: sha256WithRSAEncryption
5e:ac:fb:ae:29:c4:41:2a:44:7a:5d:33:1e:6d:b6:b8:f7:ff:
50:72:58:ea:54:5c:31:64:97:7a:ba:d4:5d:2f:a4:bb:7b:0d:
bc:c1:22:d1:5b:34:98:9c:d2:96:8c:39:47:57:82:09:78:9a:
6a:8e:1b:ab:a4:a7:ae:f1:37:47:cf:c7:5c:5e:72:58:da:13:
32:06:79:68:88:7b:d0:92:5e:fc:51:1b:6a:be:76:81:f4:1c:
18:89:e4:57:c5:26:d6:6c:6b:46:98:f7:5a:06:52:52:01:b5:
64:65:61:5e:9b:76:3c:60:14:0d:22:59:e8:bf:e4:14:f3:62:
5e:d9:83:5d:49:19:1d:08:84:2d:54:e2:21:b2:5c:8e:a0:9b:
fa:00:65:2e:ba:a3:81:e2:76:c9:f4:9d:01:03:77:5a:7f:5b:
37:9e:6e:b9:12:42:fe:04:4d:ca:e5:ef:de:bc:83:29:6f:98:
dd:57:7c:26:c1:b9:ac:a6:09:ef:56:ff:92:db:8b:61:7d:34:
67:b9:59:17:f7:33:2d:b8:de:2f:d7:b8:4e:51:42:77:d6:81:
43:43:e0:ed:b8:ac:da:ed:b8:8c:e4:ec:de:f5:d7:f0:cb:46:
7f:33:f1:56:b0:b7:ba:5c:cd:1e:eb:98:d2:ec:35:b2:1e:8c:
ef:6f:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:53:24 2024 by rpki-client on console-fra.rpki-client.org