Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.cer
File: 620A71C431D2B5B3DF64C60E7119DF06F484D0A8.cer (raw, json)
Hash identifier: z1jdzuCKhp1USpRf31z0f/AyjW/q3+Sd8q/CR5PxEd8=
Subject key identifier: 62:0A:71:C4:31:D2:B5:B3:DF:64:C6:0E:71:19:DF:06:F4:84:D0:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 28B233177ED851095EB784C265C3A3A4191E58C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.mft
caRepository: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 03 Jul 2023 15:53:40 +0000
Certificate not after: Mon 01 Jul 2024 15:58:40 +0000
Subordinate resources: AS: 263541
IP: 191.5.164.0/22
IP: 191.241.20.0/22
IP: 2804:1398::/32
Validation: Failed, certificate revoked on Mon 15 Jan 2024 18:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b2:33:17:7e:d8:51:09:5e:b7:84:c2:65:c3:a3:a4:19:1e:58:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jul 3 15:53:40 2023 GMT
Not After : Jul 1 15:58:40 2024 GMT
Subject: CN=620A71C431D2B5B3DF64C60E7119DF06F484D0A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:5e:bb:62:40:68:43:30:9b:b1:36:90:52:
ab:28:52:67:55:aa:35:45:9b:12:53:38:74:2d:b1:
1e:f6:d1:81:82:c6:09:34:f2:84:2b:fa:87:8f:de:
0d:f1:ce:21:06:16:65:a8:23:32:f4:8e:ed:c0:c5:
70:5f:17:99:61:22:bf:46:c6:59:e6:73:c3:28:e4:
28:c7:a4:6e:d7:4a:24:68:67:4b:11:b5:f7:f3:49:
6d:b1:4c:c8:8d:eb:5e:9e:50:ca:cf:29:5f:e4:5b:
72:b6:1b:a4:6b:35:f8:14:4b:f6:fa:f8:24:24:5e:
c1:c4:ac:19:94:57:e0:5b:9a:5b:b6:3a:7c:31:3a:
7f:98:e8:6f:0b:2c:a8:00:69:a6:3a:e4:c8:db:ba:
f3:25:60:0e:32:9f:6a:96:6e:ce:2e:3d:58:89:33:
00:45:7b:a3:2d:84:c4:5a:3c:24:06:31:c0:ce:e0:
74:99:ba:39:76:0f:b7:cf:01:7d:46:f7:71:af:75:
b5:91:2e:b0:4e:16:89:2e:5a:71:47:80:81:53:25:
a7:b5:1c:d3:b8:21:cc:0b:bb:13:43:ea:7a:93:40:
0b:5b:84:32:5b:c5:33:53:ec:0a:c5:78:b3:d5:e2:
64:c3:63:b2:12:b0:c5:d3:80:4b:0f:0e:ec:a3:5f:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:0A:71:C4:31:D2:B5:B3:DF:64:C6:0E:71:19:DF:06:F4:84:D0:A8
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.5.164.0/22
191.241.20.0/22
IPv6:
2804:1398::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263541
Signature Algorithm: sha256WithRSAEncryption
56:ed:ea:0c:8f:2b:0b:10:b4:35:a4:e6:22:7b:0f:7d:30:58:
a7:70:63:9a:2e:db:11:5a:26:6f:ad:14:cc:bf:3a:87:b9:07:
5f:14:78:51:ef:39:69:00:7d:ed:a7:74:12:31:52:fc:c6:85:
b3:f8:bd:95:35:71:22:51:5e:c2:0a:3f:75:f0:ef:1c:0a:b6:
97:8d:92:11:5b:87:fd:b7:d0:1a:85:63:5e:13:82:7a:22:6f:
00:8a:b2:44:e3:a5:66:65:09:46:73:1d:73:5b:1d:d2:fc:35:
82:2f:b4:ac:6f:79:00:a3:01:86:5e:c7:1d:0b:ae:6f:23:4a:
53:f1:ea:54:83:57:be:72:20:38:ad:ab:b9:07:a7:4e:e2:95:
88:dc:87:fc:98:6f:90:09:e8:14:5e:a0:5d:cd:aa:3b:65:ab:
06:6c:23:9d:4d:1e:9e:e0:97:cd:1a:65:2e:86:11:2c:7a:1b:
f5:fb:37:dd:08:1f:b6:09:95:33:c2:c2:f8:44:42:7b:ea:42:
a4:8f:55:a6:1d:42:80:01:09:56:49:30:d7:53:00:e0:17:df:
3e:bd:0d:83:6b:0c:5a:0b:ca:69:04:d9:72:24:4e:54:d8:80:
c3:b9:7d:5d:75:06:93:c0:7f:45:8f:b8:67:33:d5:03:0c:6f:
2e:a4:a4:3b
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUKLIzF37YUQlet4TCZcOjpBkeWMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDMxNTUzNDBaFw0yNDA3MDExNTU4NDBaMDMxMTAvBgNV
BAMTKDYyMEE3MUM0MzFEMkI1QjNERjY0QzYwRTcxMTlERjA2RjQ4NEQwQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUl67YkBoQzCbsTaQUqsoUmdV
qjVFmxJTOHQtsR720YGCxgk08oQr+oeP3g3xziEGFmWoIzL0ju3AxXBfF5lhIr9G
xlnmc8Mo5CjHpG7XSiRoZ0sRtffzSW2xTMiN616eUMrPKV/kW3K2G6RrNfgUS/b6
+CQkXsHErBmUV+Bbmlu2OnwxOn+Y6G8LLKgAaaY65MjbuvMlYA4yn2qWbs4uPViJ
MwBFe6MthMRaPCQGMcDO4HSZujl2D7fPAX1G93GvdbWRLrBOFokuWnFHgIFTJae1
HNO4IcwLuxND6nqTQAtbhDJbxTNT7ArFeLPV4mTDY7ISsMXTgEsPDuyjX5cXAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiCnHEMdK1s99k
xg5xGd8G9ITQqDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DaWF6cHZnODFRNERHTTJqODFDVlNGYXVZV1JRYzY0WUF5
TXdyR1h2UnpTVS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlB
eU13ckdYdlJ6U1UvMC82MjBBNzFDNDMxRDJCNUIzREY2NEM2MEU3MTE5REYwNkY0
ODREMEE4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAK/BaQDBAK/8RQwDQQC
AAIwBwMFACgEE5gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAV1MA0GCSqGSIb3
DQEBCwUAA4IBAQBW7eoMjysLELQ1pOYiew99MFincGOaLtsRWiZvrRTMvzqHuQdf
FHhR7zlpAH3tp3QSMVL8xoWz+L2VNXEiUV7CCj918O8cCraXjZIRW4f9t9AahWNe
E4J6Im8AirJE46VmZQlGcx1zWx3S/DWCL7Ssb3kAowGGXscdC65vI0pT8epUg1e+
ciA4rau5B6dO4pWI3If8mG+QCegUXqBdzao7ZasGbCOdTR6e4JfNGmUuhhEsehv1
+zfdCB+2CZUzwsL4REJ76kKkj1WmHUKAAQlWSTDXUwDgF98+vQ2DawxaC8ppBNly
JE5U2IDDuX1ddQaTwH9Fj7hnM9UDDG8upKQ7
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:14 2024 by rpki-client on console.sobornost.net