Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA05A5A4E368E7D591C311689FB45ECE06D7E648.cer
File: DA05A5A4E368E7D591C311689FB45ECE06D7E648.cer (raw, json)
Hash identifier: DGy8JxBHDUkJ8kHOeR9AmLrDOOepUpYEVR7MWpYnSZE=
Subject key identifier: DA:05:A5:A4:E3:68:E7:D5:91:C3:11:68:9F:B4:5E:CE:06:D7:E6:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 46E833DC90B08CA3D96509A4B292448E784E7C34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/DA05A5A4E368E7D591C311689FB45ECE06D7E648.mft
caRepository: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 18 Nov 2024 21:21:29 +0000
Certificate not after: Mon 17 Nov 2025 21:26:29 +0000
Subordinate resources: AS: 264397
IP: 131.161.92.0/22
IP: 164.163.36.0/22
IP: 170.239.96.0/22
IP: 2804:1dd4::/32
Validation: Failed, certificate revoked on Wed 27 Nov 2024 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e8:33:dc:90:b0:8c:a3:d9:65:09:a4:b2:92:44:8e:78:4e:7c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 18 21:21:29 2024 GMT
Not After : Nov 17 21:26:29 2025 GMT
Subject: CN=DA05A5A4E368E7D591C311689FB45ECE06D7E648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:70:38:b1:51:1c:a6:5e:79:34:a8:5b:7f:
88:5c:84:f4:51:f7:82:33:d5:66:d6:fe:ef:25:54:
04:03:59:92:34:8c:f4:2a:e4:b7:95:f2:22:01:ef:
65:47:14:fe:66:aa:67:9d:aa:4b:b9:dd:33:c4:21:
c4:e6:19:16:db:22:60:50:5a:fd:83:a8:7e:c1:a8:
d4:37:7e:05:08:86:5a:6a:9e:bf:60:d9:e2:06:4c:
96:e0:dd:d7:55:17:d2:e8:d1:10:6c:cf:3d:a5:6b:
8e:eb:b4:c0:7b:8b:6a:f1:50:90:f9:fd:10:17:a6:
d9:f3:8c:ed:f1:ab:e9:99:67:57:65:43:5b:d5:e4:
ca:db:bd:c6:ca:b0:25:9b:da:87:3f:29:59:1b:20:
23:91:7d:df:c9:db:46:7b:68:b1:11:3e:fe:25:09:
06:37:21:bf:a9:da:cc:4f:a4:20:0a:37:da:86:87:
ad:03:74:d1:27:da:42:13:4a:7f:04:02:d3:84:fe:
61:11:a6:95:a2:03:06:46:3b:f8:bc:b1:c4:61:20:
93:50:fa:bf:17:c5:22:08:d5:8f:88:c7:7e:28:87:
ca:d0:70:d8:fb:92:72:ad:ae:de:28:2b:6d:1c:f7:
7c:60:e6:f5:d6:00:16:1d:36:8e:fe:2a:64:9a:52:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DA:05:A5:A4:E3:68:E7:D5:91:C3:11:68:9F:B4:5E:CE:06:D7:E6:48
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/DA05A5A4E368E7D591C311689FB45ECE06D7E648.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.92.0/22
164.163.36.0/22
170.239.96.0/22
IPv6:
2804:1dd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264397
Signature Algorithm: sha256WithRSAEncryption
48:99:3d:16:f4:1a:5c:d6:63:a9:e3:a0:36:fb:9b:a0:e7:94:
7a:a6:94:0b:0a:1e:ec:dc:be:e1:ba:ba:32:e6:0e:3c:c5:8e:
0b:05:8c:d9:84:85:ea:5e:6a:5b:c5:fc:79:64:04:a2:93:b5:
ad:c8:92:ac:93:4b:ba:f3:a7:10:d3:cc:25:5e:73:a7:36:e3:
3c:f8:58:b8:aa:07:01:48:02:4c:99:b3:ea:a0:ce:b8:9f:9d:
08:ca:29:1a:d7:54:3e:32:2b:b1:f5:40:a2:f2:2f:5b:5e:ef:
c4:a4:1a:99:73:84:ba:02:88:bd:ac:16:ea:f6:4c:e3:d1:8c:
78:71:27:77:c4:55:d2:00:6f:9b:e8:18:a7:19:0b:c5:21:c2:
ce:bc:eb:7f:fd:3f:f0:5b:ab:03:ce:6a:0e:ee:7c:40:bb:7f:
90:12:86:d7:68:f4:a4:99:ec:83:33:3e:aa:43:43:b8:21:7f:
1d:9b:30:f6:1e:f4:22:58:4f:af:7f:3f:b4:a8:05:78:f8:f3:
78:59:78:75:23:90:9f:30:2e:b9:b0:65:d4:f2:0b:06:a3:e9:
46:f0:4d:b0:d2:a2:0b:3a:c8:a0:e8:2d:29:95:13:ae:9f:c8:
6a:4f:c4:dc:e5:02:8e:8d:e4:57:5d:d9:cb:89:e3:ef:14:6b:
e9:83:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:40:59 2024 by rpki-client on console-ams.rpki-client.org