Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.cer
File: FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.cer (raw, json)
Hash identifier: tfCRpAm5BsuWfQJKom9S4f88dIpjLAIDL9aJ5VjEL1c=
Subject key identifier: FF:0A:92:22:DC:08:A6:3B:5F:32:5E:52:AF:79:B0:BB:48:20:EA:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 623FC655C9A5CEEFA8700B822C786CE39EBD6C78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.mft
caRepository: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 25 Jul 2024 13:12:32 +0000
Certificate not after: Thu 24 Jul 2025 13:17:32 +0000
Subordinate resources: AS: 268786
IP: 45.172.168.0/22
IP: 168.196.204.0/22
IP: 2804:5aa4::/32
Validation: Failed, certificate revoked on Thu 01 Aug 2024 21:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3f:c6:55:c9:a5:ce:ef:a8:70:0b:82:2c:78:6c:e3:9e:bd:6c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 25 13:12:32 2024 GMT
Not After : Jul 24 13:17:32 2025 GMT
Subject: CN=FF0A9222DC08A63B5F325E52AF79B0BB4820EA45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:f5:2e:2d:35:53:6c:1b:8f:be:ba:5f:57:
91:02:f1:c3:a4:1a:65:8f:30:e8:bb:23:2c:2d:d1:
28:9e:52:5b:7a:ea:72:b1:9f:15:f7:bb:71:91:72:
c8:a5:28:3b:17:ea:bc:14:ec:63:fb:6c:c8:c7:42:
1f:f2:62:da:53:25:ba:96:ab:84:8d:b2:a6:bb:64:
86:1b:8a:df:83:fc:0f:dc:38:84:11:98:22:4b:b5:
cb:30:b0:ce:88:7b:a8:14:bf:e5:31:89:e2:f6:a5:
28:7c:af:9b:7b:d1:ee:1d:8a:ad:d8:ec:c9:06:e7:
ef:63:3f:f0:8a:bf:7f:84:4c:98:1c:3d:39:97:67:
a2:29:c0:98:59:7e:24:9e:a9:b1:9e:e5:5f:25:f1:
22:9d:9f:77:93:d6:f6:04:19:3c:b7:97:f1:bf:67:
1a:95:7a:11:e8:76:a1:8f:58:21:1f:e3:b3:53:2f:
ae:b3:39:2f:93:42:c8:7b:bd:38:a1:74:e5:2c:00:
2e:7f:8a:d7:f2:ab:50:0e:ff:49:49:44:f3:8a:12:
eb:c4:dd:82:14:7e:65:e7:fa:cd:7a:d8:0f:2b:c3:
4b:96:f9:24:06:e1:90:a9:91:2f:c0:f3:c1:dc:89:
44:a7:d9:5b:0a:27:99:61:0a:2e:5d:88:3e:68:6e:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:0A:92:22:DC:08:A6:3B:5F:32:5E:52:AF:79:B0:BB:48:20:EA:45
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.168.0/22
168.196.204.0/22
IPv6:
2804:5aa4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268786
Signature Algorithm: sha256WithRSAEncryption
32:de:9c:02:85:2c:07:6f:27:f5:0a:c6:04:c2:60:69:84:fd:
d2:fe:a1:70:d7:75:36:d9:11:8e:27:97:27:01:4e:e9:b3:7b:
c5:ac:d1:cb:d0:74:5e:40:f1:c6:d1:a5:59:fa:65:22:5a:06:
3f:8b:5f:d7:4d:77:27:ef:f2:a0:0d:5c:5a:3d:dd:e4:c4:ef:
59:8a:35:5a:15:5f:58:da:45:e0:3e:e0:26:81:4e:79:31:c6:
95:55:17:b5:0b:b9:99:fd:5f:c0:d9:08:15:3a:e9:07:db:31:
b6:92:46:b7:f6:2c:5b:56:2b:22:41:a7:09:0d:57:be:2e:74:
69:4b:03:d9:06:91:7f:6c:be:2c:bd:80:8b:40:05:b1:f1:56:
03:d7:ce:9d:02:13:81:38:a6:66:30:ed:c8:0a:33:3f:c6:4a:
1f:ca:33:73:58:2d:9a:f9:fc:51:6c:9c:3a:86:58:98:e9:22:
9b:2e:b5:3c:16:2a:bd:f4:18:43:75:4a:fe:69:f6:e9:6c:82:
ea:3e:83:8b:9a:fd:88:4c:98:76:31:9c:9d:28:f3:15:ff:e0:
f6:bb:75:81:5a:22:47:c6:64:4d:7b:4b:78:14:a3:71:ae:5b:
c4:08:8c:ec:fc:83:a1:1e:39:db:2d:56:36:e6:fd:5e:50:60:
3e:e4:55:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 23:33:48 2024 by rpki-client on console-fra.rpki-client.org