Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer
File: F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer (raw, json)
Hash identifier: TXqAQL1sq1enX5tazLH8Q9QKTZTYlTZAEoWF7PzxmYc=
Subject key identifier: F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4E3CA784B848730A82F9380D7377D758A4C6A888
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.mft
caRepository: rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 23 Jul 2024 11:50:42 +0000
Certificate not after: Tue 22 Jul 2025 11:55:42 +0000
Subordinate resources: AS: 53080
IP: 45.175.80.0/22
IP: 138.186.36.0/22
IP: 170.82.64.0/22
IP: 170.150.4.0/22
IP: 186.194.176.0/20
IP: 187.95.0.0/20
IP: 191.253.0.0/20
IP: 201.216.100.0/22
IP: 2804:71c::/32
Validation: Failed, certificate revoked on Thu 31 Oct 2024 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3c:a7:84:b8:48:73:0a:82:f9:38:0d:73:77:d7:58:a4:c6:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 23 11:50:42 2024 GMT
Not After : Jul 22 11:55:42 2025 GMT
Subject: CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:b0:3b:4d:8f:1e:95:f0:c6:5e:54:ec:7a:
5c:23:74:e5:af:c7:52:f9:9f:07:35:87:f8:01:96:
cd:c1:34:13:26:c6:f2:da:d8:47:92:97:f3:d0:ba:
52:d0:0d:38:ba:ee:97:ba:64:bd:61:ce:df:5e:0c:
32:77:ff:02:94:01:b5:b0:f3:38:7b:a9:48:0e:49:
aa:e4:47:b3:0c:74:8c:c4:9c:fb:b6:30:6d:6b:6d:
ba:06:9f:1c:57:38:8a:14:0d:a9:5a:e6:7e:3b:e2:
2f:23:9a:63:fb:b6:76:2e:98:96:b7:41:88:c0:db:
f8:d3:b9:31:71:8e:c7:74:22:4b:3e:0c:29:f9:b9:
bd:d6:af:c9:b2:2c:07:72:41:23:b3:c2:a5:4c:f0:
70:17:b4:85:03:2a:1a:cb:0b:08:a5:c8:11:a2:c9:
3a:53:f5:e4:76:54:53:12:af:87:93:4d:d3:05:17:
60:b1:2b:8b:0b:8d:6d:87:31:61:55:01:8b:75:6e:
dc:cd:ce:58:82:7f:cb:91:1c:83:31:4b:18:9f:34:
16:19:28:f5:17:f1:5e:74:13:06:e0:af:38:85:46:
a5:e1:44:46:8f:e6:df:31:d7:3d:ff:98:b6:82:3a:
61:53:18:76:f0:a6:8e:be:84:5b:5c:46:28:48:75:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.80.0/22
138.186.36.0/22
170.82.64.0/22
170.150.4.0/22
186.194.176.0/20
187.95.0.0/20
191.253.0.0/20
201.216.100.0/22
IPv6:
2804:71c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53080
Signature Algorithm: sha256WithRSAEncryption
79:66:25:62:3d:85:b5:36:9d:f9:a5:b3:de:e4:7c:62:57:ab:
3a:93:1c:6a:98:68:22:9e:15:0d:98:92:e0:3d:4f:a1:f2:1f:
03:3d:d3:3c:26:7a:d9:67:95:66:fc:70:0e:06:64:3f:9d:98:
0c:ef:c9:f4:0a:fe:74:b4:38:7f:fd:a9:d0:c1:7f:2a:ce:92:
74:83:7b:47:ff:9f:73:40:4d:a8:e1:23:a3:ca:37:d4:93:7f:
d1:0e:df:62:cf:2a:10:73:d7:ab:31:45:c7:70:c9:2b:45:ff:
d5:77:07:59:60:65:2e:70:a2:0b:50:bb:85:c3:14:4c:6a:a8:
11:97:ec:56:c3:3e:ba:1e:5c:d9:c8:73:31:31:f8:ca:a2:ea:
72:a6:e5:69:2d:3d:87:40:84:9f:e4:62:86:97:6e:0b:ed:41:
b7:cc:6e:2e:b7:0c:76:49:32:c3:3f:e9:3d:d1:75:3d:92:25:
8b:2d:8f:a7:4a:dd:f6:71:74:13:63:41:65:46:49:86:39:4f:
af:57:bd:3e:7e:fd:ee:cb:b3:ed:d7:9a:4a:3b:69:eb:64:20:
7e:ee:34:33:b0:41:86:75:74:e1:d6:69:6a:15:f4:f2:da:a1:
85:d2:91:ca:ba:b2:10:7b:b8:98:ce:4c:b5:13:e0:52:02:f3:
d6:4e:c9:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:12 2024 by rpki-client on console-fra.rpki-client.org