Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA921E7C3C9FDC4F96D45614C07E02367A255860.cer
File: FA921E7C3C9FDC4F96D45614C07E02367A255860.cer (raw, json)
Hash identifier: 9F9DF+MeHttMEgAxYb/F5yiG1YAmy0cS/L2qzq57IuQ=
Subject key identifier: FA:92:1E:7C:3C:9F:DC:4F:96:D4:56:14:C0:7E:02:36:7A:25:58:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 207AF9E625583576C7C28F951AE283343587C0FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FA921E7C3C9FDC4F96D45614C07E02367A255860.mft
caRepository: rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 16 Apr 2024 23:12:27 +0000
Certificate not after: Tue 15 Apr 2025 23:17:27 +0000
Subordinate resources: AS: 268113
IP: 45.169.32.0/22
IP: 2804:5834::/32
Validation: Failed, certificate revoked on Mon 13 May 2024 14:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7a:f9:e6:25:58:35:76:c7:c2:8f:95:1a:e2:83:34:35:87:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 16 23:12:27 2024 GMT
Not After : Apr 15 23:17:27 2025 GMT
Subject: CN=FA921E7C3C9FDC4F96D45614C07E02367A255860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:fa:bc:1f:61:da:9d:48:11:5c:08:7b:6b:
fc:42:18:9f:c0:79:d4:46:2a:73:10:ff:f8:aa:53:
46:ad:2a:7e:fd:64:19:8c:ec:38:d9:ff:fe:50:d6:
24:59:27:fc:5f:ba:9b:5e:56:37:2f:b0:88:1b:b3:
30:f8:5a:ed:19:4b:db:45:7c:6b:9f:51:05:76:97:
aa:f2:a1:ac:88:9e:57:de:f1:06:8c:b8:b9:97:24:
89:93:5b:c3:05:94:dd:87:d0:98:2e:12:00:52:31:
0e:b0:34:c4:1d:79:af:f9:d7:13:ba:2d:45:49:7a:
bb:5e:f7:62:d4:8c:22:11:78:aa:a8:a8:73:fb:1c:
5b:ca:92:d0:75:10:da:e8:06:c1:4f:e4:dd:99:30:
d1:29:76:df:3b:b2:8b:b0:69:f9:7c:a5:dd:ad:c4:
d2:81:2e:3e:23:79:68:28:4d:9f:66:44:4f:8c:d5:
4d:60:00:f0:aa:f2:f3:91:f8:2d:77:c0:50:f7:eb:
35:1b:2c:8d:8e:fe:17:5b:ac:88:08:6b:6a:79:9f:
2c:88:ce:2b:46:4b:84:c1:86:96:9a:fd:fa:9c:33:
8c:36:99:4c:16:c8:8b:44:32:50:44:32:7f:ce:4f:
cb:da:2a:aa:d1:e9:cd:36:2c:6a:50:5c:40:e0:3d:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FA:92:1E:7C:3C:9F:DC:4F:96:D4:56:14:C0:7E:02:36:7A:25:58:60
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FA921E7C3C9FDC4F96D45614C07E02367A255860.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.32.0/22
IPv6:
2804:5834::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268113
Signature Algorithm: sha256WithRSAEncryption
12:a6:a4:b7:52:45:1e:b2:08:41:2e:8c:bc:13:8e:6a:db:57:
50:d6:8a:c3:9d:36:d7:fe:93:d8:25:b7:43:7d:1c:8a:44:42:
f2:c3:5b:87:3c:87:76:41:de:b7:77:90:0e:73:85:04:d7:74:
14:fe:9f:04:52:31:c0:32:c7:55:cb:07:63:6e:2a:a0:c1:69:
35:2a:93:48:de:e9:c6:c4:13:85:6e:73:08:f3:29:b7:c6:c7:
33:13:3c:65:8c:5e:cd:69:3a:0d:f1:d6:e7:39:12:5e:f9:2f:
50:30:7f:05:68:58:69:fc:e9:98:4a:32:a5:39:47:1d:26:85:
6a:bd:9c:63:06:5d:80:39:cc:71:61:d7:30:46:8c:23:45:3e:
1e:64:33:33:46:b4:46:ba:4a:72:06:2a:03:6e:10:1e:77:2a:
76:d9:20:aa:11:22:75:a8:ce:9e:4b:6d:bf:aa:73:10:b7:c4:
1d:1a:cd:d0:09:8a:5f:a7:0b:49:c0:3d:80:ba:50:2a:a2:00:
86:89:57:4c:db:45:14:40:70:39:c8:9a:4d:ac:82:be:1a:02:
4d:9c:82:5c:41:c3:e5:39:6d:3d:cb:14:45:69:c0:dc:af:42:
df:a2:3e:32:9b:d2:2a:f9:56:f4:10:b5:64:ef:6e:1a:a5:a3:
20:85:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org