Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer
File: 09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer (raw, json)
Hash identifier: rhrMT1fUAt2T5yE0i2MoaWPIxaWjd/YQ0V577vQ5M6g=
Subject key identifier: 09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 42B7C723BD252FA0FDE5F720D536FF2FCC7035D9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.mft
caRepository: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 20:19:22 +0000
Certificate not after: Wed 02 Apr 2025 20:24:22 +0000
Subordinate resources: AS: 268155
IP: 45.170.152.0/22
IP: 2804:58e0::/32
Validation: Failed, certificate revoked on Thu 02 May 2024 11:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b7:c7:23:bd:25:2f:a0:fd:e5:f7:20:d5:36:ff:2f:cc:70:35:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 20:19:22 2024 GMT
Not After : Apr 2 20:24:22 2025 GMT
Subject: CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:dc:55:b2:e0:20:1b:5b:f6:89:69:2e:3e:
50:81:f9:1f:43:d4:c9:ad:10:7a:fa:ea:c6:f5:9a:
37:0a:bb:cb:cd:fc:89:68:e2:58:99:ad:92:f8:f5:
61:e3:aa:c5:6d:02:e4:5f:48:2f:7c:0c:10:b8:af:
e4:e9:26:dc:32:a8:7b:e6:75:c1:a3:1a:ce:28:94:
cd:34:7a:e6:00:5b:33:56:08:3e:09:d7:dd:16:b2:
af:bc:bd:bc:83:06:d3:2d:d0:a1:b1:40:60:40:78:
d9:4e:bb:3a:c1:c7:3b:28:45:55:f2:25:70:60:d2:
76:c3:bf:71:3e:69:89:44:9a:ea:62:9a:2f:49:d7:
33:85:2d:57:3d:78:e6:65:d0:e5:fc:cb:81:8a:9b:
1d:ab:33:58:69:6c:55:9d:71:54:38:67:05:8e:7b:
82:15:e8:ea:e3:ed:7f:84:50:ed:8c:0d:ec:3c:d5:
6f:76:f3:db:19:96:3b:b8:3d:b6:67:e7:3f:b4:13:
5a:38:75:8f:a0:02:32:d8:db:40:ab:5c:ed:27:9f:
6b:68:26:07:ca:46:99:69:38:a0:9e:fe:4a:89:17:
19:a0:ce:c3:0f:07:35:fc:bf:18:6f:34:6e:73:59:
08:3d:45:84:f6:e2:1d:eb:e2:c3:e2:a7:3a:cd:b9:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.152.0/22
IPv6:
2804:58e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268155
Signature Algorithm: sha256WithRSAEncryption
63:1a:d8:e1:a7:35:8f:5c:65:f3:05:ec:a0:be:e0:04:b4:df:
04:e8:80:ae:48:f1:a5:cd:1e:6f:2d:bc:e1:41:ed:66:43:83:
4c:a6:a0:a1:f6:e3:0d:c2:77:09:b6:78:2e:f4:93:1b:d9:8d:
f6:86:f3:07:4d:d6:1c:a3:2d:4f:cd:b8:b2:5f:a7:ff:ad:0c:
8c:71:a8:03:7d:a0:20:c8:40:82:5f:f0:60:d5:3c:ed:bf:ab:
5b:e1:6a:91:67:27:ed:ec:53:07:e8:43:86:a4:e4:ec:62:5e:
11:b4:79:df:cc:3c:6a:f5:3f:3c:ea:69:f4:e3:e0:fc:04:63:
50:7c:61:2f:96:f5:d6:fc:96:88:c3:de:3e:76:92:8b:39:81:
e1:10:dc:13:34:61:b3:4e:e1:06:09:90:a5:08:02:8b:4a:fb:
21:5c:ea:7a:1d:4f:54:c7:e4:4e:e5:ec:99:8f:ac:1a:b4:b9:
7b:db:17:8b:fe:57:77:ef:9a:ba:fc:c3:64:13:6d:af:37:a8:
3d:55:7d:9b:19:87:b4:88:2c:03:6e:58:bf:b8:b9:84:c5:03:
06:db:59:06:0f:11:a9:ff:4d:2e:f0:4b:74:42:31:19:c6:cb:
97:eb:d4:10:58:34:09:f5:b1:9b:f4:4f:af:da:7a:44:23:3e:
ff:1f:16:65
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUQrfHI70lL6D95fcg1Tb/L8xwNdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMDE5MjJaFw0yNTA0MDIyMDI0MjJaMDMxMTAvBgNV
BAMTKDA5Qjg1RkE3NzI2QkRERjcxNzgyN0YzQjA2Q0M1QTMxMTNEN0QyMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/dxVsuAgG1v2iWkuPlCB+R9D
1MmtEHr66sb1mjcKu8vN/Ilo4liZrZL49WHjqsVtAuRfSC98DBC4r+TpJtwyqHvm
dcGjGs4olM00euYAWzNWCD4J190Wsq+8vbyDBtMt0KGxQGBAeNlOuzrBxzsoRVXy
JXBg0nbDv3E+aYlEmupimi9J1zOFLVc9eOZl0OX8y4GKmx2rM1hpbFWdcVQ4ZwWO
e4IV6Orj7X+EUO2MDew81W9289sZlju4PbZn5z+0E1o4dY+gAjLY20CrXO0nn2to
JgfKRplpOKCe/kqJFxmgzsMPBzX8vxhvNG5zWQg9RYT24h3r4sPipzrNuT8jAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJuF+ncmvd9xeC
fzsGzFoxE9fSAjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHVS
V1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgzcnAvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHVS
V1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgzcnAvMS8wOUI4
NUZBNzcyNkJEREY3MTc4MjdGM0IwNkNDNUEzMTEzRDdEMjAyLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAItqpgwDQQCAAIwBwMFACgEWOAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBd7MA0GCSqGSIb3DQEBCwUAA4IBAQBjGtjhpzWPXGXzBeyg
vuAEtN8E6ICuSPGlzR5vLbzhQe1mQ4NMpqCh9uMNwncJtngu9JMb2Y32hvMHTdYc
oy1PzbiyX6f/rQyMcagDfaAgyECCX/Bg1Tztv6tb4WqRZyft7FMH6EOGpOTsYl4R
tHnfzDxq9T886mn04+D8BGNQfGEvlvXW/JaIw94+dpKLOYHhENwTNGGzTuEGCZCl
CAKLSvshXOp6HU9Ux+RO5eyZj6watLl72xeL/ld375q6/MNkE22vN6g9VX2bGYe0
iCwDbli/uLmExQMG21kGDxGp/00u8Et0QjEZxsuX69QQWDQJ9bGb9E+v2npEIz7/
HxZl
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org