Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.cer
File: E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.cer (raw, json)
Hash identifier: vhuiwcr4/n5d0MnHnUZRtctzPzP6j/piIN0hTga3VUM=
Subject key identifier: E9:86:D8:D3:14:6A:4D:08:E3:6F:EA:EA:C7:3B:87:E7:E5:A3:F9:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2EAAEB5CB01FA13D4FC87D8BDA7EE81C30895D51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1/E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.mft
caRepository: rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:25:18 +0000
Certificate not after: Wed 02 Apr 2025 18:30:18 +0000
Subordinate resources: AS: 28327
IP: 131.0.20.0/22
IP: 189.50.80.0/20
IP: 2804:c3c::/32
Validation: Failed, certificate revoked on Thu 20 Jun 2024 15:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:aa:eb:5c:b0:1f:a1:3d:4f:c8:7d:8b:da:7e:e8:1c:30:89:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:25:18 2024 GMT
Not After : Apr 2 18:30:18 2025 GMT
Subject: CN=E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:e4:3b:46:1b:5e:ab:51:5d:86:e3:80:1a:
ff:88:2f:3a:95:2d:cd:02:15:0d:74:0e:92:20:0e:
0f:4f:83:86:ae:e1:59:05:1e:30:e0:8a:50:96:7f:
3c:e0:a1:25:76:ac:df:f6:cd:b1:f0:91:82:2b:12:
37:e5:78:b4:32:89:a1:80:df:da:ff:2b:1a:b4:46:
71:5e:d5:ff:9a:61:5c:3f:b5:dd:69:5b:54:39:b4:
5c:69:f7:22:5f:88:1e:10:9e:b6:04:36:d2:57:d8:
d6:8d:9f:7e:12:84:cb:c9:de:4f:16:85:fa:44:04:
60:6f:4d:7c:85:21:d6:af:fa:fc:f7:39:c0:72:65:
48:f4:47:e5:46:f0:8f:98:35:ab:aa:9a:15:61:20:
b1:8a:4f:ed:e2:cb:0a:1c:7b:15:55:92:95:e5:71:
0d:af:33:03:90:15:ad:0c:d2:3f:23:2d:68:37:e0:
a2:73:a1:fe:61:87:d6:9f:c7:b1:67:40:8b:76:c9:
cb:46:e6:ca:12:3c:0c:99:dd:d3:21:ac:43:a7:db:
24:1b:07:d0:35:c1:74:bc:98:75:a4:81:af:34:43:
6f:a8:f4:e8:03:5d:59:1b:30:52:fc:4a:ae:7a:82:
73:a7:76:32:d7:30:4b:5e:25:05:91:ce:f5:71:16:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E9:86:D8:D3:14:6A:4D:08:E3:6F:EA:EA:C7:3B:87:E7:E5:A3:F9:90
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1/E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.20.0/22
189.50.80.0/20
IPv6:
2804:c3c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28327
Signature Algorithm: sha256WithRSAEncryption
d8:9c:72:68:9d:e5:8d:da:d1:fc:ab:65:f0:d5:61:fe:37:3d:
5c:01:14:15:9a:99:af:f4:aa:6b:f4:27:ab:78:a1:c4:f6:32:
a1:4e:55:5f:f6:f1:b6:52:4f:21:55:6a:ca:87:97:57:54:21:
47:f9:29:b8:e2:04:61:1f:13:80:ee:8d:1a:f7:c3:d6:e4:c3:
94:25:49:8e:e8:2d:56:a1:24:52:cd:e5:63:36:3a:51:ee:9e:
46:17:e3:6d:5f:4e:65:28:3e:4a:99:c3:f1:90:81:ba:be:96:
b4:d2:0b:cd:40:34:e2:8c:87:53:64:f2:42:12:65:40:ea:6d:
87:af:16:48:88:4b:a8:22:e6:c3:b2:56:83:dc:57:bc:f7:7c:
b9:ac:8e:dd:86:39:2a:fa:df:63:91:a0:17:d2:e0:04:47:b9:
db:4b:5f:c8:a8:cb:9f:17:5b:c4:e4:a2:2b:ee:e9:0c:22:0d:
aa:9a:26:d0:ad:ea:df:97:24:f2:36:64:04:b3:a7:f7:98:c7:
1b:a6:5e:70:1e:df:3d:94:d0:63:4c:15:2a:db:4f:eb:da:fe:
a4:39:36:f3:73:fe:85:d4:ad:0e:02:8c:1c:33:be:a1:c9:a6:
2e:83:f1:fb:c0:01:e3:e3:ad:fa:db:42:02:ac:90:c8:03:6b:
ae:87:a0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 19:28:48 2024 by rpki-client on console-fra.rpki-client.org