Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/015A9A92933E6553551B875A4ECEFC62C4FB1B38.cer
File: 015A9A92933E6553551B875A4ECEFC62C4FB1B38.cer (raw, json)
Hash identifier: sRD4wvuYSHDYcGBi0qjiSDkHUOgtcWfqkjXOwDcTs6g=
Subject key identifier: 01:5A:9A:92:93:3E:65:53:55:1B:87:5A:4E:CE:FC:62:C4:FB:1B:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6D4EA7119DDF8AC5CAEEFF554CFA6053C1965B09
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/1/015A9A92933E6553551B875A4ECEFC62C4FB1B38.mft
caRepository: rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:57:03 +0000
Certificate not after: Wed 02 Apr 2025 19:02:03 +0000
Subordinate resources: AS: 61805
IP: 170.247.80.0/22
IP: 200.229.156.0/22
IP: 2804:1998::/32
Validation: Failed, certificate revoked on Mon 22 Apr 2024 19:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:4e:a7:11:9d:df:8a:c5:ca:ee:ff:55:4c:fa:60:53:c1:96:5b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:57:03 2024 GMT
Not After : Apr 2 19:02:03 2025 GMT
Subject: CN=015A9A92933E6553551B875A4ECEFC62C4FB1B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:d1:ac:f8:b0:ce:4f:af:9b:a7:dc:27:58:
33:88:22:30:75:e1:83:b8:8b:ef:b3:a6:57:42:2b:
02:5c:f3:66:64:8b:ee:75:07:48:d0:c8:f9:1d:a7:
03:94:7e:3a:10:c4:e0:71:76:f3:32:5d:6c:80:2c:
2b:22:ca:cf:f4:d9:b4:53:fa:c4:73:70:9b:af:a7:
20:6f:d5:e7:7f:97:93:14:ab:1d:69:89:3f:82:08:
61:68:d4:1a:0a:f2:6a:d1:d4:46:f1:70:22:af:2d:
b0:5b:1e:b2:ab:b5:32:ef:b5:77:16:c7:33:2e:84:
f8:e7:50:4b:ff:f3:a0:ae:82:7b:26:15:65:6a:a4:
6b:9e:7a:e5:3d:d8:38:52:80:75:37:9c:f2:2c:e9:
43:6e:33:1c:56:ec:18:89:f8:9e:89:6e:50:23:7d:
20:28:72:00:1f:44:38:63:a0:d0:eb:68:45:09:80:
9b:26:35:14:44:03:21:a8:b5:e1:1e:64:15:da:36:
1d:79:7e:e0:2d:ee:9b:08:cf:28:b3:ec:c4:ea:f5:
6d:7b:79:8c:89:98:90:ab:89:67:dc:ed:25:24:8f:
3b:5d:f0:3a:70:a4:ad:3b:a4:90:db:1d:f8:a8:c5:
af:5e:74:97:31:5b:05:e7:58:84:1e:96:0e:3d:b4:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
01:5A:9A:92:93:3E:65:53:55:1B:87:5A:4E:CE:FC:62:C4:FB:1B:38
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/1/015A9A92933E6553551B875A4ECEFC62C4FB1B38.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.80.0/22
200.229.156.0/22
IPv6:
2804:1998::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61805
Signature Algorithm: sha256WithRSAEncryption
87:36:6c:e2:c4:7e:b8:22:5e:40:45:a3:ff:25:2c:ef:8e:2e:
ed:e6:79:ac:ff:a3:98:8a:a7:7d:6f:33:46:40:bd:0e:08:95:
f8:41:c3:db:e2:d4:0c:c8:2f:8f:75:56:93:e6:73:5c:39:59:
0d:55:41:83:3c:23:78:60:67:58:3e:30:b9:13:9c:d8:ed:13:
64:54:78:c4:9d:76:9c:92:6c:e7:0c:a8:be:a2:94:01:30:49:
aa:ae:44:9d:e1:9c:e5:52:ff:86:0b:13:9e:fa:9d:a0:1f:2e:
17:82:bc:e2:eb:40:d4:0c:78:23:b0:80:b7:fa:07:2d:82:1f:
b0:36:39:d7:c0:54:de:73:d1:01:82:76:d0:3b:6f:4a:a6:67:
1c:2c:1a:e5:89:7f:bd:e3:cf:8e:0c:03:5c:c0:a9:94:64:96:
b2:22:ca:01:ee:b8:dc:c0:30:24:e7:69:32:c7:3c:b0:7c:6d:
4f:9c:7d:35:cb:e1:bd:c9:3e:96:24:4b:52:02:e4:d7:65:f7:
26:4c:39:41:ae:5a:6f:d9:33:d5:86:bd:a9:3f:4b:db:e5:c4:
af:1c:d7:b0:37:cc:c2:aa:26:19:f4:e7:0b:b0:05:1f:a7:88:
e0:5f:bb:44:66:e5:c6:e5:2f:ba:4f:f3:c8:26:0e:8a:16:66:
bc:ff:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org