Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223.cer
File: DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223.cer (raw, json)
Hash identifier: xxtmuyM8jeNDdtFBxFK3Dw7d+G3oScg3O6BHOh/mNHo=
Subject key identifier: DD:E7:3F:9A:5B:A4:B8:CD:F6:BA:C6:B7:C0:60:5E:43:AF:9A:92:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4A425F9F8CBEC2F61D10F561A46474E59456C9B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223.mft
caRepository: rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Jun 2024 00:49:01 +0000
Certificate not after: Wed 04 Jun 2025 00:54:01 +0000
Subordinate resources: AS: 268964
IP: 45.177.36.0/22
IP: 2804:5d50::/32
Validation: Failed, certificate revoked on Wed 22 Jan 2025 05:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:42:5f:9f:8c:be:c2:f6:1d:10:f5:61:a4:64:74:e5:94:56:c9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 5 00:49:01 2024 GMT
Not After : Jun 4 00:54:01 2025 GMT
Subject: CN=DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:6c:5b:b8:77:c8:83:6a:19:ed:a2:dd:6c:
d8:65:6f:24:09:48:a5:2e:46:08:b9:27:6b:16:c7:
ec:cc:ef:25:de:e7:8d:4c:d6:9b:b4:1d:f0:e0:d4:
18:f9:18:b0:8a:ae:42:ce:4b:6b:84:06:01:25:d0:
34:56:9f:cd:42:e4:e7:2c:e2:f9:93:95:8d:75:d7:
59:14:86:6a:d5:ae:49:39:4e:74:7b:97:14:79:7b:
eb:0f:8e:96:4a:86:a6:fd:92:52:d5:2d:67:2e:90:
bb:1a:13:6c:e2:d7:fc:c4:b4:c8:51:4d:66:f6:a5:
83:37:c2:f7:b5:25:b3:c8:89:5b:ad:2c:25:72:7d:
b8:69:83:d5:b1:2e:f7:83:d9:01:ff:ec:2b:50:ab:
49:79:16:99:4f:7c:2d:03:cc:41:67:32:6b:9e:08:
a8:b1:57:b3:24:55:c3:59:11:4f:27:dd:b4:cb:e5:
9d:1f:72:89:53:5a:a4:3b:b9:aa:1e:ce:cc:a6:6b:
a4:67:74:67:cf:78:3b:69:35:57:f8:24:1a:48:da:
3a:e9:d0:7e:d7:ac:1b:00:30:18:21:9e:48:d7:d7:
8c:c3:82:38:7a:8f:60:ba:39:5a:78:1b:7d:e8:27:
d3:21:82:6d:77:1f:c3:4b:ff:15:b0:1e:f7:8f:d6:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DD:E7:3F:9A:5B:A4:B8:CD:F6:BA:C6:B7:C0:60:5E:43:AF:9A:92:23
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.36.0/22
IPv6:
2804:5d50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268964
Signature Algorithm: sha256WithRSAEncryption
66:18:c3:e5:6b:8a:c1:86:83:15:e0:7f:d5:50:91:f3:e0:cc:
00:9a:ea:dc:97:77:3c:99:92:a7:7d:22:4f:a8:67:e2:62:c9:
3c:0f:0e:ac:2c:dc:9e:e9:35:fb:7e:b7:fd:e4:fb:2e:b7:a0:
0a:c9:37:2c:82:41:53:35:26:c5:f3:fd:7a:88:06:53:fc:90:
e7:2d:94:27:a5:5a:d6:8c:4e:1e:25:c8:cd:8a:58:d4:f1:5f:
24:76:d1:1c:b0:15:4d:9e:1a:b7:ee:ac:bf:bf:82:fb:00:1a:
24:72:54:9f:e4:a9:31:d4:52:24:b6:ea:e4:c2:67:65:5d:ef:
a8:9d:73:b9:7d:5c:d9:44:cd:35:8f:29:06:c3:b9:7f:ba:7e:
07:f3:a9:aa:ad:45:df:5e:db:e1:eb:0e:a5:55:28:c1:60:50:
eb:eb:52:4d:1c:63:43:f6:41:cd:45:d7:a1:e2:93:4e:fc:33:
87:f1:16:70:b4:18:9d:4d:e8:1b:ea:ee:34:33:59:18:da:8e:
c9:b3:76:c6:14:3f:32:8f:50:0e:6d:50:d3:7c:9c:d7:31:4a:
ed:5e:69:61:92:8a:45:d6:ec:83:65:77:aa:b8:fd:be:8e:54:
41:f5:e3:83:7f:f4:14:7a:fc:51:a7:cb:02:f6:54:c6:03:2f:
56:80:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:57 2025 by rpki-client