Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/18500688094D67F8EEF3BD385887A8CE57B63966.cer
File: 18500688094D67F8EEF3BD385887A8CE57B63966.cer (raw, json)
Hash identifier: MR2Fh7peNLpwyMBorK/WiX+a8kN17w8DjxOkA9SMdec=
Subject key identifier: 18:50:06:88:09:4D:67:F8:EE:F3:BD:38:58:87:A8:CE:57:B6:39:66
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2C19BF90322C8AC33C001154B06BFD3E38587176
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/18500688094D67F8EEF3BD385887A8CE57B63966.mft
caRepository: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:26:28 +0000
Certificate not after: Wed 02 Apr 2025 18:31:28 +0000
Subordinate resources: AS: 10906
AS: 11284
AS: 11431
AS: 11644
AS: 11752
AS: 12136
AS: 13874
AS: 14026
AS: 14650
AS: 20121
AS: 22548
AS: 26162
AS: 28345
AS: 53035
AS: 61580
AS: 263044
IP: 45.6.52.0/22
IP: 45.184.144.0/22
IP: 45.227.0.0/22
IP: 168.181.20.0/22
IP: 177.52.38.0/23
IP: 187.16.192.0/19
IP: 189.76.96.0/19
IP: 200.160.0.0/20
IP: 200.189.40.0/22
IP: 200.192.104.0/24
IP: 200.192.108.0/22
IP: 200.192.232.0/22
IP: 200.194.128.0/19
IP: 200.219.130.0/23
IP: 200.219.138.0 -- 200.219.141.255
IP: 200.219.143.0 -- 200.219.148.255
IP: 200.219.154.0 -- 200.219.159.255
IP: 200.229.248.0/23
IP: 2001:12f8::/48
IP: 2001:12f8:2:: -- 2001:12f8:d:ffff:ffff:ffff:ffff:ffff
IP: 2001:12fe::/31
IP: 2801:80:1700::/40
IP: 2801:80:1e00::/40
Validation: Failed, certificate revoked on Mon 15 Apr 2024 17:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:19:bf:90:32:2c:8a:c3:3c:00:11:54:b0:6b:fd:3e:38:58:71:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:26:28 2024 GMT
Not After : Apr 2 18:31:28 2025 GMT
Subject: CN=18500688094D67F8EEF3BD385887A8CE57B63966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:8d:bd:44:2b:fc:80:c0:a2:3e:9a:de:9b:
b8:59:ce:a9:10:0b:9f:3f:5c:a0:c9:d4:83:4e:a1:
4f:c0:03:d7:f7:21:25:65:d5:89:43:fb:aa:11:d1:
29:c5:5c:ef:f7:0c:18:32:31:5f:98:55:15:b2:9a:
f6:66:76:da:20:d5:6a:9b:41:f4:eb:fe:36:f4:d6:
87:fb:e8:27:e9:a6:cd:50:ed:f2:4c:89:1a:9d:b1:
dd:70:7b:db:41:a5:5c:d0:17:16:e0:37:bf:2a:97:
63:0d:67:22:e9:6c:8a:20:44:42:22:66:6d:07:62:
7f:6e:d9:22:d8:86:14:bf:82:4c:72:2a:36:98:c7:
b2:55:39:7c:85:83:42:56:ad:57:26:0f:71:af:00:
73:88:67:57:98:fa:62:bc:9d:d3:0c:83:1c:ef:10:
c8:67:bf:d9:d8:d5:ca:c7:93:83:cb:0b:ab:42:0a:
fc:b4:e3:1d:40:0e:b6:12:af:81:97:52:8d:65:26:
15:4f:ad:a8:c5:5d:de:4f:40:1a:c4:10:e0:07:ba:
bc:a8:4d:f8:51:45:62:f6:7c:8e:01:c5:6c:24:f2:
03:f5:6b:dc:91:b4:39:25:7d:49:17:b7:77:75:dc:
98:0f:67:c5:03:53:4f:be:38:7b:52:1a:f2:ad:01:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
18:50:06:88:09:4D:67:F8:EE:F3:BD:38:58:87:A8:CE:57:B6:39:66
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/18500688094D67F8EEF3BD385887A8CE57B63966.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.52.0/22
45.184.144.0/22
45.227.0.0/22
168.181.20.0/22
177.52.38.0/23
187.16.192.0/19
189.76.96.0/19
200.160.0.0/20
200.189.40.0/22
200.192.104.0/24
200.192.108.0/22
200.192.232.0/22
200.194.128.0/19
200.219.130.0/23
200.219.138.0-200.219.141.255
200.219.143.0-200.219.148.255
200.219.154.0-200.219.159.255
200.229.248.0/23
IPv6:
2001:12f8::/48
2001:12f8:2::-2001:12f8:d:ffff:ffff:ffff:ffff:ffff
2001:12fe::/31
2801:80:1700::/40
2801:80:1e00::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10906
11284
11431
11644
11752
12136
13874
14026
14650
20121
22548
26162
28345
53035
61580
263044
Signature Algorithm: sha256WithRSAEncryption
6b:fc:05:c9:ce:f2:a6:63:85:e1:d2:dd:54:34:40:31:3b:e9:
30:30:31:93:9b:48:9f:6a:ca:80:82:e6:9d:b1:44:14:99:00:
b1:b5:04:d3:d7:f3:2e:b6:24:8e:7d:bb:25:cd:92:06:93:1e:
42:b1:f1:70:4b:f5:46:52:46:94:5b:19:92:ad:7f:41:8a:41:
32:8a:77:26:95:33:e4:70:6c:81:fb:46:6a:b0:d9:66:30:52:
30:e5:4f:ff:c9:53:8c:3c:fa:df:da:db:8a:8f:ef:d9:b4:7a:
4a:35:43:bc:c7:e6:d4:d9:e0:a5:ca:e7:f3:c9:ca:fa:fb:36:
ba:fe:2e:b4:c9:0b:89:42:7f:07:b2:5c:ea:78:db:41:bb:46:
4a:4b:fa:b6:ba:87:56:fd:cf:7e:22:51:43:c3:08:56:e7:c0:
a3:99:35:dc:bc:3a:7f:82:5a:52:d6:7e:34:a4:6b:a1:ac:db:
94:44:bf:c9:16:4d:88:c2:db:34:1b:08:41:e3:9e:ac:52:94:
4d:b0:c6:8e:f4:c3:58:01:67:43:ad:7a:33:fa:dc:0c:34:22:
fc:c3:4d:2f:8b:21:06:4a:97:12:31:fa:72:0f:5b:29:cc:33:
49:e5:5c:38:ba:4b:5a:39:2b:92:31:2a:e8:3d:54:50:2c:37:
aa:04:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org