Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E33A888FCBCB90828BDBB176ABE5A215FCCF66B0.cer
File: E33A888FCBCB90828BDBB176ABE5A215FCCF66B0.cer (raw, json)
Hash identifier: sbVSTsunm6gRsxgm0nOR8fC3PIzuEbae/lyiS+q5LOk=
Subject key identifier: E3:3A:88:8F:CB:CB:90:82:8B:DB:B1:76:AB:E5:A2:15:FC:CF:66:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0E458B9786532C1CAB75941C2D8042D1CAB626BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/1/E33A888FCBCB90828BDBB176ABE5A215FCCF66B0.mft
caRepository: rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:54:18 +0000
Certificate not after: Wed 02 Apr 2025 18:59:18 +0000
Subordinate resources: AS: 266143
IP: 160.20.20.0/22
IP: 2804:3b58::/32
Validation: Failed, certificate revoked on Mon 22 Apr 2024 21:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:45:8b:97:86:53:2c:1c:ab:75:94:1c:2d:80:42:d1:ca:b6:26:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:54:18 2024 GMT
Not After : Apr 2 18:59:18 2025 GMT
Subject: CN=E33A888FCBCB90828BDBB176ABE5A215FCCF66B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:67:79:ae:fa:3e:a9:05:31:56:0d:26:66:
69:48:b4:e4:58:b9:bb:a9:2c:df:e9:ee:79:4b:7a:
71:53:eb:f2:d4:2e:0d:b8:6b:a1:6a:2a:4d:08:8e:
ca:92:2f:4b:44:d1:cb:c6:e4:e5:5e:c8:1c:3a:76:
31:72:80:d1:28:8d:69:23:df:92:0d:61:18:24:be:
b9:83:83:07:d0:21:bd:4f:73:a2:35:25:43:3a:5d:
ef:ec:1f:3a:5e:eb:9b:9e:49:01:e4:3f:da:e6:8a:
7a:06:ca:7e:32:2a:23:70:5d:e8:21:66:19:4d:25:
75:74:f7:0b:42:11:2a:1e:7e:ec:d9:0a:c1:55:c2:
a7:ff:15:7b:38:ac:73:8c:36:5c:4e:1c:85:9f:3d:
31:3b:77:a2:ab:a7:56:a0:7c:ce:b1:2c:6f:6f:b6:
86:d9:cc:ae:27:ae:95:a1:7b:c5:43:9f:61:8f:b8:
ae:2f:30:74:63:b4:56:e4:36:25:7c:0c:65:b2:cd:
bb:b2:a3:cd:e1:c9:9a:ab:24:9f:29:26:53:7a:f3:
c7:f9:e7:fa:84:e3:49:0d:94:89:eb:f5:a0:9d:c3:
39:ae:71:dd:81:81:70:23:dd:ff:03:cb:ba:82:c5:
db:4e:5e:88:82:80:13:e9:78:8c:af:73:ac:b2:9b:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E3:3A:88:8F:CB:CB:90:82:8B:DB:B1:76:AB:E5:A2:15:FC:CF:66:B0
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/1/E33A888FCBCB90828BDBB176ABE5A215FCCF66B0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.20.0/22
IPv6:
2804:3b58::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266143
Signature Algorithm: sha256WithRSAEncryption
60:a7:8b:b6:5b:38:a7:b0:a6:78:66:52:78:d1:9b:8a:0d:3e:
34:66:54:34:3a:54:45:c0:17:f1:29:3b:14:e2:b3:1e:1b:26:
33:d1:f5:a7:fa:61:63:4f:de:e5:2a:34:4f:5d:97:f9:65:65:
93:f6:e4:55:5d:b5:5e:1a:8c:e9:a0:6c:ce:de:62:58:12:89:
52:83:f6:c5:0c:e4:85:c1:38:f9:7a:71:e3:52:d2:e7:b9:38:
8b:15:84:dc:20:39:e0:80:2c:35:20:dc:3d:22:b5:99:f7:3b:
0d:d7:27:9f:1c:52:0c:d1:33:df:87:77:f0:20:44:b6:00:56:
65:14:7a:82:3b:db:97:ad:89:85:e7:d7:8b:7c:71:46:fa:70:
09:c4:2c:78:2a:45:df:64:5b:b7:c1:df:66:18:4f:6f:20:cb:
cc:ed:0c:38:ed:6b:50:0e:f2:3c:29:94:53:1d:c4:10:7e:ef:
c4:4f:6a:65:89:26:53:ac:3e:1c:cf:dd:ac:2f:a7:b6:00:ec:
69:dc:f1:ff:94:0e:6b:59:07:2b:c2:56:f7:67:ef:ba:aa:e7:
67:2d:b6:9c:87:10:98:20:68:0e:2f:59:ee:a0:9c:c7:f3:0f:
21:f7:6f:6b:5f:b6:28:3d:89:b4:08:e7:bf:ff:95:06:0f:ec:
24:3e:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org