Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9EDCEB1043FD3B1A3F4FBDF352D3D5EBF6AC7FC.cer
File: D9EDCEB1043FD3B1A3F4FBDF352D3D5EBF6AC7FC.cer (raw, json)
Hash identifier: hvl2YQejtdjy8LKinyU9rLzuErQLAOdAXOFHWSAmHKA=
Subject key identifier: D9:ED:CE:B1:04:3F:D3:B1:A3:F4:FB:DF:35:2D:3D:5E:BF:6A:C7:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 72398CCE188B534E9C057A8400B675C497C3775B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/D9EDCEB1043FD3B1A3F4FBDF352D3D5EBF6AC7FC.mft
caRepository: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 30 May 2024 19:40:21 +0000
Certificate not after: Thu 29 May 2025 19:45:21 +0000
Subordinate resources: AS: 266020
IP: 170.245.236.0/22
IP: 2804:393c::/32
Validation: Failed, certificate revoked on Sun 09 Jun 2024 10:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:39:8c:ce:18:8b:53:4e:9c:05:7a:84:00:b6:75:c4:97:c3:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 30 19:40:21 2024 GMT
Not After : May 29 19:45:21 2025 GMT
Subject: CN=D9EDCEB1043FD3B1A3F4FBDF352D3D5EBF6AC7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:eb:43:ca:d3:b3:93:5c:10:35:f7:16:6f:
99:02:bb:4a:7a:26:16:18:08:42:de:6b:41:f0:af:
40:01:cd:13:71:d7:8e:f8:36:c6:bb:2e:d2:27:b4:
85:74:cf:0c:bc:fd:86:51:96:4d:1c:87:35:bd:7a:
ff:62:93:16:e8:99:3e:39:f3:3a:fe:54:0f:86:22:
e5:aa:89:92:46:f7:01:37:77:25:40:93:38:2e:29:
87:6e:21:5e:c4:f0:60:47:e2:13:7d:d0:c1:3a:0c:
26:94:6f:91:8b:44:37:69:a0:4b:07:44:b6:96:29:
92:37:08:a2:c5:b1:68:56:b3:47:8f:86:60:f2:cd:
11:04:ad:c6:94:c2:6d:db:8c:f3:04:71:90:0b:ef:
13:3e:ad:2c:19:88:35:15:28:6d:9b:36:14:fe:a0:
16:4b:e2:6f:fa:72:88:0a:f7:db:3e:64:c0:2d:be:
6a:fb:fd:46:a0:da:08:e2:ba:9f:5c:f2:9b:64:3b:
b4:b4:78:b4:7f:2c:82:04:ab:83:d5:38:08:4a:7b:
be:4c:69:f1:e9:5f:0f:5e:9c:61:f1:cb:93:60:d9:
ff:9c:e5:18:43:35:20:9f:52:f2:fa:e4:be:b1:d0:
81:9b:06:e7:ad:e7:e9:14:d2:5e:60:5b:49:e3:42:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:ED:CE:B1:04:3F:D3:B1:A3:F4:FB:DF:35:2D:3D:5E:BF:6A:C7:FC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/D9EDCEB1043FD3B1A3F4FBDF352D3D5EBF6AC7FC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.236.0/22
IPv6:
2804:393c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266020
Signature Algorithm: sha256WithRSAEncryption
77:4b:7e:a8:19:01:73:d2:a6:b8:c9:40:df:cf:db:93:59:f9:
b4:fd:9a:51:77:c7:24:32:ad:08:4b:f9:e9:8a:e3:6b:fe:81:
2d:7a:74:40:2a:6a:1c:d8:e8:c3:0c:23:ad:36:b7:b9:da:01:
c4:13:28:00:a7:b7:85:0c:6e:89:22:69:e7:25:4a:32:ae:2b:
d0:bf:b3:d2:2c:59:c7:69:76:af:12:2f:b7:b5:d2:56:0e:5e:
6f:55:df:60:f1:12:ac:b2:98:fd:c7:1c:ed:9e:e6:f4:3a:73:
17:cb:84:b9:c3:4c:0d:bb:b2:eb:d0:8b:01:b8:a1:96:97:8e:
ee:ee:ec:25:1f:08:bc:bc:32:cb:8f:87:de:aa:dd:cd:0b:a0:
45:b4:b3:d1:e4:8b:ef:94:87:3f:cb:7f:2a:88:ab:fb:f7:99:
f8:e8:40:92:b1:03:39:6e:68:38:41:a1:6b:84:7c:9a:69:74:
4d:92:6c:da:ee:0e:db:c0:c7:14:4c:cd:e4:93:52:ba:ad:c7:
62:20:39:7c:ad:1c:4a:cc:12:4b:14:c4:c5:ce:2f:c4:d0:cb:
99:2b:ee:c7:38:6d:03:45:5a:c9:d4:48:cb:50:16:e9:54:de:
7b:3a:e9:04:e9:37:ab:21:0c:f3:db:3c:4b:85:93:16:e6:d3:
76:61:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 14:08:36 2024 by rpki-client on console-fra.rpki-client.org