Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.cer
File: 0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.cer (raw, json)
Hash identifier: /Qm8ZUmbcfeIZBOHkuUVwW+zsS6ru3UoKgEEe14tKhs=
Subject key identifier: 0C:FE:98:4A:A3:F3:82:60:AA:BF:9F:BF:0F:E2:B2:DF:8D:CF:EE:53
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 2F68D424F39808D39010CEADFE86051465666472
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.mft
caRepository: rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 25 May 2023 23:00:58 +0000
Certificate not after: Thu 23 May 2024 23:05:58 +0000
Subordinate resources: AS: 266050
IP: 45.4.20.0/22
IP: 45.182.184.0/23
IP: 2804:39c8::/32
Validation: Failed, certificate revoked on Fri 12 Jan 2024 11:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:68:d4:24:f3:98:08:d3:90:10:ce:ad:fe:86:05:14:65:66:64:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: May 25 23:00:58 2023 GMT
Not After : May 23 23:05:58 2024 GMT
Subject: CN=0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:99:6e:c5:84:37:c1:07:31:71:f8:34:8c:
60:57:4e:28:49:ba:f1:ed:cc:29:e3:00:85:1f:92:
9c:d5:21:fd:eb:cf:c6:f2:05:62:00:0f:da:69:11:
0d:5a:ba:3e:a1:38:76:8f:c7:e7:2f:03:af:ae:f7:
3e:b9:3e:71:ef:db:07:0c:3d:75:fb:19:19:36:46:
d0:bc:ad:38:80:47:d1:70:0d:4b:a6:3b:ef:66:44:
88:7d:7f:c2:ae:e9:6e:90:21:7f:f3:a6:8b:2a:0d:
0e:50:15:06:41:2f:6d:73:4b:b8:a8:58:e0:36:e6:
36:7c:b0:ce:86:14:5e:64:57:b7:3b:f5:7d:d8:17:
c7:d4:06:07:a9:be:50:0c:32:e4:28:9a:0c:63:a6:
8f:84:1f:77:a7:85:b2:47:93:7c:2b:00:8e:f1:1b:
65:18:4c:2c:6a:af:d2:6e:58:80:a9:a2:b8:f9:ca:
cc:e9:54:db:03:ce:dc:33:f5:b2:f6:a6:9c:e8:8f:
f0:71:dc:cc:84:a4:0c:67:ff:76:82:ca:a4:fa:82:
68:0c:6a:14:f3:87:2e:bf:4b:ad:14:68:fd:eb:ee:
c8:2a:42:39:e7:d1:4d:bc:12:5b:4f:2e:7c:66:f2:
4b:86:4f:83:33:02:bd:f9:ee:24:7d:b7:70:88:d2:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0C:FE:98:4A:A3:F3:82:60:AA:BF:9F:BF:0F:E2:B2:DF:8D:CF:EE:53
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.20.0/22
45.182.184.0/23
IPv6:
2804:39c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266050
Signature Algorithm: sha256WithRSAEncryption
13:8c:69:c8:01:78:1c:9d:b1:1f:db:44:5f:7f:e0:ba:1c:50:
97:8f:7a:ef:6f:14:7f:40:b0:22:72:2c:52:93:fc:9f:7f:7d:
60:c3:b4:af:f7:25:db:b0:b5:9d:ac:04:8b:c0:32:ca:39:7b:
d1:ad:da:97:53:6d:41:e7:ed:7c:66:11:06:64:2b:f6:9a:4d:
e0:4a:f7:68:b4:e7:b1:13:ed:1f:7a:77:30:85:d5:9b:5c:df:
35:12:fd:72:91:b7:0b:d6:e3:f5:b3:a8:99:ea:1e:e2:02:5c:
54:8f:04:4d:e9:0f:b4:2f:56:3a:ad:0a:0c:a0:d0:63:6a:92:
4f:b1:96:02:cf:cd:b1:20:60:72:54:47:b0:c3:1b:85:4f:e1:
6b:00:f3:e8:fd:a2:fc:d8:95:66:a7:49:43:c0:58:eb:b3:a5:
c3:2a:d3:20:5e:a2:18:f6:eb:86:ba:0a:86:d7:eb:a9:02:a8:
54:09:bb:67:6c:d0:cc:c4:95:49:96:a4:f7:fc:be:31:6f:3f:
95:80:60:43:64:5c:62:7b:55:3e:a3:f1:a9:01:2a:7b:ef:cd:
2b:b5:b9:41:4a:98:b9:db:37:d1:df:d9:46:5f:4a:26:ed:9a:
91:24:f3:ec:f3:60:b5:52:ec:55:62:04:e7:c5:ee:8d:52:35:
03:1b:ba:15
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUL2jUJPOYCNOQEM6t/oYFFGVmZHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjUyMzAwNThaFw0yNDA1MjMyMzA1NThaMDMxMTAvBgNV
BAMTKDBDRkU5ODRBQTNGMzgyNjBBQUJGOUZCRjBGRTJCMkRGOERDRkVFNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tJluxYQ3wQcxcfg0jGBXTihJ
uvHtzCnjAIUfkpzVIf3rz8byBWIAD9ppEQ1auj6hOHaPx+cvA6+u9z65PnHv2wcM
PXX7GRk2RtC8rTiAR9FwDUumO+9mRIh9f8Ku6W6QIX/zposqDQ5QFQZBL21zS7io
WOA25jZ8sM6GFF5kV7c79X3YF8fUBgepvlAMMuQomgxjpo+EH3enhbJHk3wrAI7x
G2UYTCxqr9JuWICporj5yszpVNsDztwz9bL2ppzoj/Bx3MyEpAxn/3aCyqT6gmgM
ahTzhy6/S60UaP3r7sgqQjnn0U28EltPLnxm8kuGT4MzAr357iR9t3CI0i23AgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQM/phKo/OCYKq/
n78P4rLfjc/uUzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zZUdMOFI5N29QNDZBbXNRUE1wb1VDRFQ2eXQ4cUVXbWlU
U1lzaW5Fdkx4NC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM2VHTDhSOTdvUDQ2QW1zUVBNcG9VQ0RUNnl0OHFFV21p
VFNZc2luRXZMeDQvMC8wQ0ZFOTg0QUEzRjM4MjYwQUFCRjlGQkYwRkUyQjJERjhE
Q0ZFRTUzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAItBBQDBAEttrgwDQQC
AAIwBwMFACgEOcgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA9CMA0GCSqGSIb3
DQEBCwUAA4IBAQATjGnIAXgcnbEf20Rff+C6HFCXj3rvbxR/QLAicixSk/yff31g
w7Sv9yXbsLWdrASLwDLKOXvRrdqXU21B5+18ZhEGZCv2mk3gSvdotOexE+0fencw
hdWbXN81Ev1ykbcL1uP1s6iZ6h7iAlxUjwRN6Q+0L1Y6rQoMoNBjapJPsZYCz82x
IGByVEewwxuFT+FrAPPo/aL82JVmp0lDwFjrs6XDKtMgXqIY9uuGugqG1+upAqhU
CbtnbNDMxJVJlqT3/L4xbz+VgGBDZFxie1U+o/GpASp7780rtblBSpi52zfR39lG
X0om7ZqRJPPs82C1UuxVYgTnxe6NUjUDG7oV
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:02 2024 by rpki-client on console.sobornost.net