Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer
File: 9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer (raw, json)
Hash identifier: znKS/jqr7aUoEKQsHiBHPg4QmpV/a44vo75r2WMVfVg=
Subject key identifier: 97:41:D1:A0:29:B3:29:62:56:3B:5C:5B:A3:B3:C7:3B:19:8E:65:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 116722D9D32BAEC8A31842206F2A2C3A89E25457
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.mft
caRepository: rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Jul 2024 14:04:33 +0000
Certificate not after: Wed 02 Jul 2025 14:09:33 +0000
Subordinate resources: AS: 263544
IP: 143.0.48.0/22
IP: 168.227.84.0/22
IP: 170.78.248.0/22
IP: 191.5.240.0/20
IP: 2804:13a8::/32
Validation: Failed, certificate revoked on Wed 11 Dec 2024 09:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:67:22:d9:d3:2b:ae:c8:a3:18:42:20:6f:2a:2c:3a:89:e2:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 3 14:04:33 2024 GMT
Not After : Jul 2 14:09:33 2025 GMT
Subject: CN=9741D1A029B32962563B5C5BA3B3C73B198E65B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:52:f7:b8:da:94:bc:87:27:18:ac:ee:bf:
eb:84:51:82:d7:26:1d:f7:ca:ca:34:c4:d5:ff:99:
0f:be:15:ad:7a:44:4c:3d:8c:21:21:52:85:d2:23:
02:65:ad:e4:e7:9b:44:09:12:79:b7:89:78:0a:c0:
0f:15:32:3a:97:ab:fa:f5:21:1c:23:a8:a1:d5:ba:
45:2e:8e:4a:72:7b:60:79:1d:36:4b:16:4b:d7:2d:
f3:64:9a:38:46:d7:2c:27:c3:46:39:c0:b7:f1:17:
b4:d8:ce:72:1c:7c:0d:6d:c9:33:52:ea:ac:b3:88:
63:78:4c:65:40:0d:01:ed:54:1b:73:45:48:aa:cd:
3c:4f:69:7a:dc:12:99:de:81:07:85:d1:c0:37:67:
0f:7b:e9:57:8f:ac:6b:35:a2:67:98:a2:f4:09:75:
72:fb:8f:65:65:e8:eb:4c:2a:6a:bf:61:7d:74:e3:
4b:5c:43:f3:c1:62:2f:40:e7:a6:f9:6f:36:e0:53:
27:30:98:cf:bb:31:e8:74:06:3b:d2:15:63:3f:c1:
8b:1d:74:f1:09:31:f5:02:d6:12:0a:61:e8:aa:e4:
87:fa:63:9c:0b:18:ce:ca:6e:62:1b:22:6e:64:74:
ac:7c:e4:be:30:27:87:62:30:b4:77:64:7d:c3:55:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
97:41:D1:A0:29:B3:29:62:56:3B:5C:5B:A3:B3:C7:3B:19:8E:65:B4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.48.0/22
168.227.84.0/22
170.78.248.0/22
191.5.240.0/20
IPv6:
2804:13a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263544
Signature Algorithm: sha256WithRSAEncryption
81:23:57:f5:4a:5c:56:43:42:51:c1:af:e1:0f:a7:35:7f:c8:
09:e6:f0:ff:3c:53:00:67:a1:06:99:7f:b1:1d:4f:74:61:70:
52:b7:f2:e7:c7:d3:e0:e8:c4:46:1c:1b:5b:e2:a4:e1:44:fa:
cb:ae:4b:46:97:ad:2b:e9:cc:cc:5e:24:77:99:50:ba:33:ec:
9e:6e:14:9d:25:88:7e:90:50:6e:8c:aa:18:c9:ed:f0:d9:47:
8f:a9:f9:25:33:0a:17:09:99:dc:c9:46:89:3a:59:f9:7b:98:
a5:0f:de:c6:e1:84:aa:0c:18:17:56:14:14:4c:c4:02:05:de:
a8:c5:7d:54:bb:d4:97:82:73:7a:af:4c:26:59:31:af:07:7b:
f4:78:96:8b:86:66:12:4c:35:53:46:8b:66:70:61:1d:86:ba:
fd:39:40:de:8f:f1:b1:bf:cd:eb:6c:04:4f:3b:d9:d7:a5:33:
df:79:7d:39:21:f2:12:85:6c:aa:a0:bd:fd:ba:9f:2e:16:9e:
ed:a7:be:fe:c1:cc:15:a3:57:d3:bf:63:9e:a4:48:be:ef:ec:
af:3b:d3:5c:bc:ca:79:11:65:ec:08:6b:f2:32:5c:d8:87:e4:
bb:9b:34:5b:d1:a3:c3:f6:75:b0:cd:73:a4:5d:6f:08:4e:15:
46:5b:e9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 11 10:58:24 2024 by rpki-client on console.sobornost.net