Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F40AB7AFDFE7ECE74BEBC65A8E008DBC1E8B249F.cer
File: F40AB7AFDFE7ECE74BEBC65A8E008DBC1E8B249F.cer (raw, json)
Hash identifier: YaxFrLdibAt5cfaNc+wi2lM4S+M3I0hEHtfIKP+vEEY=
Subject key identifier: F4:0A:B7:AF:DF:E7:EC:E7:4B:EB:C6:5A:8E:00:8D:BC:1E:8B:24:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 553F8BC92A82765E3337328477C8F720DE478C20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/F40AB7AFDFE7ECE74BEBC65A8E008DBC1E8B249F.mft
caRepository: rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 20 Sep 2024 19:42:55 +0000
Certificate not after: Fri 19 Sep 2025 19:47:55 +0000
Subordinate resources: AS: 262494
IP: 45.179.112.0/22
IP: 45.226.88.0/22
IP: 138.185.188.0/22
IP: 168.205.240.0/22
IP: 170.82.124.0/22
IP: 177.66.112.0/21
IP: 177.124.168.0/22
IP: 177.129.60.0/22
IP: 179.125.124.0/22
IP: 179.191.56.0/21
IP: 2804:ad8::/32
IP: 2804:1510::/32
IP: 2804:4678::/32
Validation: Failed, certificate revoked on Fri 20 Sep 2024 19:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3f:8b:c9:2a:82:76:5e:33:37:32:84:77:c8:f7:20:de:47:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 20 19:42:55 2024 GMT
Not After : Sep 19 19:47:55 2025 GMT
Subject: CN=F40AB7AFDFE7ECE74BEBC65A8E008DBC1E8B249F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:71:7b:6a:ce:53:34:87:c3:e6:bb:4c:e5:
30:21:d7:40:bf:31:a6:ba:d8:55:77:a5:31:16:ef:
9d:5e:77:78:34:97:a8:d9:b7:9c:38:dd:9c:f0:aa:
39:5b:cd:9c:f4:83:53:60:d0:95:9a:b6:10:07:e3:
77:0e:fd:a8:d3:df:cc:e9:f2:18:33:8a:c4:37:db:
18:36:1a:35:53:db:b1:f6:59:b6:d5:a4:e7:45:f7:
81:b7:32:08:f5:34:81:6e:80:d6:ae:30:bd:1d:ee:
22:50:66:ec:49:53:08:d9:24:a4:91:08:94:d0:a2:
a2:ec:7d:ca:1b:ac:04:47:16:c6:a5:7e:e1:f2:37:
52:77:70:d8:59:cf:ae:24:ff:d8:6a:34:f3:52:01:
23:04:00:33:d9:93:a6:45:0a:46:73:6e:a3:93:13:
a9:ac:33:15:ed:16:b6:e5:c8:e1:45:e1:e9:3a:6d:
6c:55:0e:77:97:e5:fd:b6:52:10:e3:59:9f:6b:3a:
ec:fa:0f:61:4e:5d:d1:5a:94:10:9c:e4:cc:7d:71:
c0:8f:72:fe:4f:9a:3a:79:70:8d:50:45:46:4d:e9:
50:0d:1f:1e:48:1f:72:86:56:90:a1:5c:be:e4:95:
9a:f2:04:3a:bb:e2:7b:dd:ef:99:d9:92:f5:21:65:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:0A:B7:AF:DF:E7:EC:E7:4B:EB:C6:5A:8E:00:8D:BC:1E:8B:24:9F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/F40AB7AFDFE7ECE74BEBC65A8E008DBC1E8B249F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.112.0/22
45.226.88.0/22
138.185.188.0/22
168.205.240.0/22
170.82.124.0/22
177.66.112.0/21
177.124.168.0/22
177.129.60.0/22
179.125.124.0/22
179.191.56.0/21
IPv6:
2804:ad8::/32
2804:1510::/32
2804:4678::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262494
Signature Algorithm: sha256WithRSAEncryption
55:eb:e9:d6:c6:0f:31:f2:f1:e0:ef:22:57:1a:5e:0f:b8:4d:
68:6e:dd:b3:8b:0e:e0:90:75:10:4e:03:e9:14:78:fe:b2:72:
f7:56:8a:33:83:ae:ee:57:55:d4:0c:61:47:2d:c0:8b:96:32:
4d:7e:e9:b5:45:4a:f1:29:37:59:4f:93:de:7f:dc:30:e4:3c:
5c:1d:ac:95:e5:15:2f:c3:b7:8c:3d:3c:ef:6e:c0:26:ad:83:
94:03:7d:25:a2:80:58:2f:bb:85:53:35:69:f8:01:f7:1a:93:
17:6f:14:59:21:81:10:f4:b8:70:ed:55:5b:5a:50:1e:8e:c5:
a4:e5:db:c9:cf:4a:a8:7a:3e:4f:14:bb:97:bd:9f:e8:fb:2b:
ad:36:7e:bd:2b:f9:6e:dd:40:21:53:76:b5:4f:1a:03:f6:44:
3b:47:94:82:62:2d:3b:af:d7:31:65:e1:0e:35:d6:8e:62:c7:
f6:d0:05:fa:1f:2b:e0:0e:cb:05:f0:72:62:34:39:c3:c8:3f:
b7:c0:33:3d:3a:6b:a5:13:26:a2:e5:d5:3d:19:e4:68:ec:af:
50:50:dc:22:76:da:64:0b:cb:3a:b9:01:c2:93:49:25:24:e2:
06:0b:a1:1a:d6:de:be:43:cf:aa:f6:5a:37:f9:51:91:6b:43:
7e:8a:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:46:23 2024 by rpki-client on console-ams.rpki-client.org