Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer
File: 08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer (raw, json)
Hash identifier: yRAZaPJPVanNLa75J5jzjWHayd/4DJ6GrThTL8kNgxc=
Subject key identifier: 08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3B32A80D558B5893B70021E5BC3E2126DF686C3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.mft
caRepository: rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 04 Jun 2024 18:32:41 +0000
Certificate not after: Tue 03 Jun 2025 18:37:41 +0000
Subordinate resources: AS: 270962
IP: 187.84.120.0/22
IP: 2804:7428::/32
Validation: Failed, certificate revoked on Fri 08 Nov 2024 03:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:32:a8:0d:55:8b:58:93:b7:00:21:e5:bc:3e:21:26:df:68:6c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 4 18:32:41 2024 GMT
Not After : Jun 3 18:37:41 2025 GMT
Subject: CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:65:ee:90:08:a5:14:19:e0:20:f0:4c:51:a6:
74:ef:c7:99:7e:75:6a:5d:e0:ad:dc:c8:63:48:13:
14:4f:fd:a0:f2:ad:5c:f2:a7:c6:d9:66:9a:6d:b8:
6e:9a:7f:d7:53:55:33:ea:c8:9b:b4:e0:6d:09:3a:
70:5d:81:a2:4b:3d:3f:51:e8:c4:d8:60:7a:d8:bc:
ff:74:24:0a:c7:e0:60:67:c6:6b:18:d1:a2:23:59:
da:b8:c5:b1:3c:87:b6:c9:fd:04:45:c8:b3:a0:09:
2a:97:02:73:61:92:77:d9:9f:4b:08:81:9c:26:92:
d1:74:35:9d:35:5b:e0:42:96:e8:c8:1d:66:e3:2e:
e8:be:bd:ee:dc:d8:88:9d:3b:f0:e2:58:27:c8:a7:
95:d0:26:bf:9a:84:81:30:af:4b:cb:ce:e9:32:b9:
4b:40:d1:e4:d7:5e:c9:ca:4d:e7:1b:d5:d8:3e:0d:
90:8b:0f:af:6a:0a:75:f0:f7:17:17:67:40:27:8e:
a0:3e:4c:59:c6:66:a7:b4:03:cd:b7:ac:7f:3c:64:
21:2a:7d:4e:9f:3f:fc:b0:b9:88:c0:d4:16:f7:f0:
4f:cb:f9:ad:e4:23:97:44:d2:fa:76:30:b5:d8:73:
b4:ca:5e:51:7d:f3:87:b1:0d:0d:55:87:ad:ee:c7:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.84.120.0/22
IPv6:
2804:7428::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270962
Signature Algorithm: sha256WithRSAEncryption
29:6a:b3:68:4f:6a:b5:36:f2:e3:06:58:44:58:68:6d:b7:f7:
e6:9d:01:0d:d5:c9:4b:7d:3f:a1:68:30:9f:24:f4:65:a8:3e:
c5:1d:cf:81:0b:eb:d7:a0:39:3d:93:52:b4:9a:51:53:e4:24:
68:2d:0e:b4:ca:0f:ba:85:b2:92:67:7b:66:f4:bf:ee:7a:0c:
7f:5c:ae:93:c0:e5:8a:a6:b7:50:cc:43:c2:e6:bc:31:ac:ba:
06:07:93:73:f9:a2:d1:41:98:23:51:34:e1:77:03:b2:38:f1:
1d:59:fb:8e:c9:ff:e1:bb:51:54:af:15:01:32:40:e2:19:67:
28:45:b3:64:f1:49:ef:ba:16:ae:8e:72:b2:42:86:cd:72:16:
e6:3b:c5:1e:23:d7:33:12:dd:2a:59:92:b3:95:db:f3:58:6d:
01:26:f6:f0:96:ec:60:b9:57:11:10:35:9f:4d:f9:e0:ed:cb:
97:b4:a3:c6:96:8f:8b:23:30:e7:64:bd:90:6c:33:da:5b:ff:
5b:d0:6f:35:51:ee:d4:e6:32:db:a8:9f:32:79:46:8d:41:5e:
f7:6e:67:6f:e2:80:d7:7c:9f:2b:91:65:f9:5c:dc:02:7c:35:
40:e4:8e:5f:d8:10:d1:e9:5e:78:b7:c0:c6:5d:57:1e:04:5a:
05:3c:12:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 06:31:07 2024 by rpki-client on console-fra.rpki-client.org