Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DD3B59F6150FF6DBD0D52C23C69B299B01BFB6E9.cer
File: DD3B59F6150FF6DBD0D52C23C69B299B01BFB6E9.cer (raw, json)
Hash identifier: Dw420HbpBk25sxn4Q4/vE+LvGYa30QUeXweu4RfS7AQ=
Subject key identifier: DD:3B:59:F6:15:0F:F6:DB:D0:D5:2C:23:C6:9B:29:9B:01:BF:B6:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0904E91D5FF08A5F1502A0A845B68690CA69A1B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/DD3B59F6150FF6DBD0D52C23C69B299B01BFB6E9.mft
caRepository: rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 27 Oct 2024 23:30:57 +0000
Certificate not after: Sun 26 Oct 2025 23:35:57 +0000
Subordinate resources: AS: 61831
IP: 201.140.252.0/22
IP: 2804:1a00::/32
Validation: Failed, certificate revoked on Tue 12 Nov 2024 17:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:04:e9:1d:5f:f0:8a:5f:15:02:a0:a8:45:b6:86:90:ca:69:a1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 27 23:30:57 2024 GMT
Not After : Oct 26 23:35:57 2025 GMT
Subject: CN=DD3B59F6150FF6DBD0D52C23C69B299B01BFB6E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:1d:26:fb:15:7d:e5:c2:25:84:99:39:dd:
f9:b2:91:ac:ad:d6:7a:c2:50:2c:1f:28:e4:ea:b0:
d5:4b:10:3d:8e:56:9f:cc:12:2c:ce:6a:5b:8f:3d:
02:b2:68:62:2d:ed:d9:dc:fa:fc:eb:d9:2c:94:8e:
40:02:a5:8b:2d:52:0c:2b:0d:9d:99:41:14:2d:53:
c9:f5:ea:99:5e:bb:15:2c:48:f2:af:10:a4:df:e2:
21:41:ce:44:56:51:a3:95:ba:06:1c:03:33:12:0c:
0d:4e:da:d5:3f:c1:36:99:81:a6:4c:10:1c:1e:3c:
be:a9:92:34:3e:63:4a:bc:7d:f7:aa:91:7e:1d:c1:
03:e7:d0:2f:4f:dd:0e:c0:89:66:5c:27:80:b3:4d:
b5:f1:3f:f4:56:c6:77:e8:f5:f3:08:20:91:bb:63:
b6:63:04:f7:63:9e:ff:0c:65:37:a6:86:75:1b:69:
84:79:3f:fa:d2:25:cc:b9:ad:1e:92:90:af:40:08:
8e:c8:c9:be:cc:da:a6:7d:bc:e4:c4:b8:e4:1b:a3:
d9:11:f5:cb:5a:31:e7:15:93:bd:71:73:60:ca:68:
01:c4:4e:c1:28:dc:bf:d9:b4:a4:ce:b1:fc:cc:8c:
2b:a7:d5:7d:e4:85:30:99:3b:91:89:5c:df:14:8d:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DD:3B:59:F6:15:0F:F6:DB:D0:D5:2C:23:C6:9B:29:9B:01:BF:B6:E9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/DD3B59F6150FF6DBD0D52C23C69B299B01BFB6E9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.140.252.0/22
IPv6:
2804:1a00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61831
Signature Algorithm: sha256WithRSAEncryption
18:1e:45:07:6c:11:c2:a7:b9:0a:48:b0:06:76:13:f3:27:d4:
15:1c:c4:92:40:21:60:4b:07:2f:96:11:d6:6d:c7:80:f1:ae:
f4:15:31:ed:db:92:47:5c:59:8b:d7:ac:71:4f:fd:c3:dc:5c:
2e:76:99:5c:89:a0:7d:f1:7b:bd:dd:17:e1:c8:ba:91:ad:b6:
44:27:d4:7a:0c:13:1e:11:1e:2a:71:43:64:89:7b:35:7f:b4:
c6:76:da:67:23:2b:c1:72:15:17:dc:d9:ee:2b:59:d0:70:33:
42:4e:50:ab:a0:e8:cf:e7:62:4f:09:a2:c6:09:60:82:e9:93:
84:17:41:4d:cb:87:82:85:9d:54:06:1c:3a:a1:ca:06:d6:dd:
d0:ef:33:1f:27:10:72:48:f8:55:61:18:63:f3:73:34:a3:c4:
af:a0:3c:8b:9f:0e:8e:4f:03:89:d9:d4:30:4d:ce:bf:ec:d3:
3a:63:ad:6e:d1:e0:5e:5e:a5:7e:f4:7b:eb:60:51:8d:f6:05:
ea:30:3d:c0:81:68:6f:0d:e9:a6:5e:ef:6a:0c:f5:d1:ae:5c:
fe:aa:44:5b:f4:0a:2a:82:00:31:d7:5e:03:9d:1b:eb:f2:42:
e5:b3:ce:63:6b:bb:75:e3:2f:98:c9:63:b1:47:91:0a:03:88:
47:bc:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org