Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer
File: 23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer (raw, json)
Hash identifier: AquOlugA49wZfck5U58Vx7GCFBRnHmvxCjK+xNMDzMg=
Subject key identifier: 23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4B0DC5B59EDB97729E1764A04BD99EA6CEACFC69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.mft
caRepository: rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 19:07:00 +0000
Certificate not after: Wed 02 Apr 2025 19:12:00 +0000
Subordinate resources: AS: 265055
IP: 170.231.120.0/22
IP: 2804:3218::/32
Validation: Failed, certificate revoked on Mon 21 Oct 2024 03:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0d:c5:b5:9e:db:97:72:9e:17:64:a0:4b:d9:9e:a6:ce:ac:fc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 19:07:00 2024 GMT
Not After : Apr 2 19:12:00 2025 GMT
Subject: CN=23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:27:f3:1b:9c:6f:fc:86:65:05:1b:50:29:
e0:73:bd:7e:82:06:f4:eb:81:15:b5:ac:5f:c1:4b:
4f:54:d2:ba:cd:1c:5b:7d:36:4a:bf:73:dd:cc:bd:
59:2f:a7:33:2e:48:89:99:80:a1:72:ac:89:90:7e:
45:6d:73:07:e1:44:cd:6a:36:07:d1:ec:63:1f:54:
fd:fb:57:b7:70:8e:7e:81:8b:67:01:0b:75:95:ed:
89:89:b8:9b:2e:06:4f:ce:2e:c4:26:6b:d2:be:6b:
5d:b4:b2:40:b9:ef:2a:11:c8:e0:b7:89:35:ec:b6:
f9:57:30:72:ac:2d:a0:37:9f:2d:5b:4e:f9:38:6e:
c8:df:82:d3:d7:b5:7a:24:fe:fd:8a:f1:68:70:28:
b8:60:88:fe:0c:3d:3f:2a:c5:28:73:fa:52:9d:7a:
e6:ca:08:28:47:28:5f:cc:4e:ec:b7:57:7b:2b:2a:
7f:cb:2e:f1:68:82:0c:5e:49:76:61:db:ae:93:5f:
d9:db:c4:36:72:9c:80:b1:7d:80:d9:f8:70:57:20:
27:36:20:81:5e:9d:7e:b4:9c:55:08:18:89:ed:61:
82:8b:8e:1f:68:29:08:69:da:0f:28:39:15:f4:3f:
03:6f:97:42:62:45:16:c8:ba:03:4c:53:bd:4b:b3:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.120.0/22
IPv6:
2804:3218::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265055
Signature Algorithm: sha256WithRSAEncryption
9f:ac:a2:8e:60:ed:ee:89:a9:2f:2a:9f:b2:d1:93:0f:0f:82:
c7:c9:0f:09:82:d1:11:0e:75:c5:aa:59:0d:2b:0a:a3:c2:8c:
3a:55:df:a1:74:b8:2d:14:96:7b:97:46:78:6f:98:42:3f:8e:
09:f7:9a:10:1b:03:f8:d5:5c:9d:91:df:d2:ef:f6:2b:d5:3d:
cc:3c:e8:5d:be:c7:07:ad:ff:13:dc:ee:33:24:4a:51:77:a2:
38:e7:8b:26:14:89:84:51:38:e7:0e:7f:c7:cc:1c:a3:ba:96:
56:65:c0:aa:66:27:1d:07:7c:32:c4:55:d9:d1:c2:64:dd:fb:
4d:89:74:c9:0a:53:80:a5:e0:a5:9c:33:15:aa:1c:e8:92:b5:
be:7a:3e:3c:e9:55:8c:fb:79:bb:a4:3e:80:e2:0b:48:89:58:
00:fa:60:0c:12:5d:12:86:71:b4:d3:f4:2a:ce:91:d6:74:ea:
29:f2:ad:64:c2:1f:27:c3:22:61:14:7c:96:0f:56:c8:a3:cb:
4f:40:66:0c:50:bf:68:26:dd:23:e0:f3:16:f8:fc:db:d6:51:
f4:7e:bb:8d:43:01:81:1c:e0:89:6f:a0:2f:53:24:5b:ce:f1:
3f:ea:6f:86:ee:c1:68:e8:a0:49:6a:01:4d:81:d2:fd:8a:a2:
b4:20:ab:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:55 2024 by rpki-client on console.sobornost.net