Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.cer
File: DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.cer (raw, json)
Hash identifier: N5r4WIiG6Fryv+SogS0KXTuPIcQ5mYXO1l1fV4CUJ1I=
Subject key identifier: DD:21:3D:69:C1:AF:23:05:1E:81:F0:B9:E6:C2:ED:BF:7B:C2:3B:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 22E7BFBFA7CA61B37FC194E41B8703EAFB8663F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.mft
caRepository: rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 28 Oct 2024 13:00:32 +0000
Certificate not after: Mon 27 Oct 2025 13:05:32 +0000
Subordinate resources: AS: 266022
IP: 170.245.124.0/22
IP: 2804:3944::/32
Validation: Failed, certificate revoked on Tue 05 Nov 2024 14:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e7:bf:bf:a7:ca:61:b3:7f:c1:94:e4:1b:87:03:ea:fb:86:63:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 28 13:00:32 2024 GMT
Not After : Oct 27 13:05:32 2025 GMT
Subject: CN=DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:c0:6d:58:20:d8:2e:8e:d0:78:db:19:52:
f1:f8:31:63:60:8d:e2:e6:1d:21:73:67:d3:ea:fd:
ad:54:86:00:f1:01:0c:4a:0f:23:e5:e7:ed:bb:17:
c5:e9:ae:2f:42:38:fd:b6:44:1b:44:8e:c2:2a:b5:
6c:9c:0e:b0:e7:0c:49:13:ac:2d:31:c6:79:4b:ea:
a1:07:17:de:93:10:92:16:6e:35:15:48:db:34:fe:
32:9a:a5:fb:31:cf:25:37:59:8c:68:40:f3:32:49:
d3:67:00:b8:b8:d8:f0:8a:9c:84:b9:9f:ff:fc:b0:
70:12:c0:8d:08:b4:87:b4:59:3e:6d:ae:7e:9e:4c:
37:3a:1d:20:00:8b:41:56:40:21:20:d9:0f:29:3d:
42:48:a7:c9:1a:6e:b5:e8:a6:2e:3d:8b:64:b4:37:
e8:7d:da:85:de:5a:9e:bf:35:7e:8d:ed:f1:0a:04:
58:ad:1c:c2:30:58:97:5a:24:1b:fe:c8:58:29:8b:
3b:44:59:09:b4:e5:ed:fc:a4:7c:2f:d2:3b:25:0f:
c3:50:22:06:6b:dc:1c:f7:1d:40:6a:82:99:8e:5e:
e2:ea:04:a7:f2:5c:56:69:33:88:cd:30:3e:2a:8d:
27:0c:06:df:10:11:f5:b0:e9:f3:b0:36:72:0a:70:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DD:21:3D:69:C1:AF:23:05:1E:81:F0:B9:E6:C2:ED:BF:7B:C2:3B:73
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.124.0/22
IPv6:
2804:3944::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266022
Signature Algorithm: sha256WithRSAEncryption
a5:84:47:64:2f:f3:9b:f4:40:2c:01:c8:48:e3:78:84:96:71:
56:fe:71:6f:f6:89:b5:fd:db:cf:ab:39:ba:bb:b0:87:27:d1:
89:97:41:f1:0c:3d:66:6a:ec:51:5c:38:4f:ba:3f:4d:32:5f:
73:42:e4:c7:fb:a6:e2:e6:22:5f:ab:1f:5c:dc:cb:12:4d:fe:
12:49:95:73:d3:08:ce:d6:23:37:51:6c:9f:8c:15:94:de:1f:
a8:5c:b7:fd:c5:a6:13:19:a7:1c:c1:b1:55:ae:1d:e8:c4:b2:
7c:5e:30:48:c3:8e:2c:d8:09:7a:04:44:1b:5c:43:e8:6b:2f:
7b:e0:91:d5:88:44:03:69:6d:16:94:02:3c:fb:66:2f:1a:a2:
c1:a1:09:4b:be:f5:eb:1d:d5:64:27:b2:23:62:02:9f:91:03:
fe:19:b7:d9:af:ed:b3:5c:af:91:58:56:d8:53:d0:15:68:2f:
92:46:3f:7c:aa:1d:91:19:4e:36:dd:1a:af:81:0d:37:8b:18:
48:a2:1d:5f:80:7c:40:14:ac:22:29:95:c4:cf:1b:23:2e:25:
da:46:5b:c5:f7:9d:a4:f7:f4:bb:df:85:06:22:9e:a2:60:6d:
85:32:da:a0:a3:5d:07:88:38:41:e9:8b:d3:8c:25:1b:33:f2:
95:13:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:09 2024 by rpki-client on console-ams.rpki-client.org