Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer
File: 1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer (raw, json)
Hash identifier: h2m5M0hjCdwncDuMsV14pvWYF4KYNaWbJ0jffFcbrE0=
Subject key identifier: 1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 201F2D1B42A1CCC1FD16BAE7E3D90B86F1A26C63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.mft
caRepository: rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 02:56:20 +0000
Certificate not after: Thu 03 Apr 2025 03:01:20 +0000
Subordinate resources: AS: 267952
IP: 45.166.48.0/22
IP: 2804:55b8::/32
Validation: Failed, certificate revoked on Wed 05 Jun 2024 13:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1f:2d:1b:42:a1:cc:c1:fd:16:ba:e7:e3:d9:0b:86:f1:a2:6c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 02:56:20 2024 GMT
Not After : Apr 3 03:01:20 2025 GMT
Subject: CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:38:42:44:ac:3a:21:51:f4:c1:c0:b3:96:
05:9e:66:83:a2:c3:72:7f:1e:4c:d0:9a:b6:bd:b8:
4e:df:e2:ea:98:8f:d1:a9:70:d4:33:3e:d1:97:42:
b9:b4:4f:30:22:86:32:f0:f8:bc:83:5f:88:3f:b9:
aa:b3:97:8b:b2:40:5c:9c:c2:e4:d4:66:a3:db:15:
bc:49:10:00:1a:6d:47:4e:95:73:47:a9:f4:90:ad:
7c:cf:31:cc:0e:20:df:8a:87:a0:5e:92:fc:dc:0b:
0c:31:ae:0e:dd:e6:88:5e:cb:59:b3:04:eb:6c:23:
00:ee:d1:b7:44:01:45:bd:77:21:54:a1:2f:c2:f9:
e4:c2:33:25:e8:2d:ac:83:3e:20:ff:cb:a0:7d:7a:
76:91:41:e4:06:63:f1:ca:b6:e9:ef:72:12:d3:87:
76:cc:77:f4:a3:ee:5e:e0:67:ea:8b:50:42:7d:f6:
c0:18:41:c3:66:79:d8:19:5f:0c:68:5b:e3:df:0d:
af:97:7c:72:81:bd:f0:17:9f:1d:f4:f8:30:d3:35:
06:8d:fa:fe:57:b0:d5:19:c9:e5:88:ad:ce:1a:f5:
2e:90:19:a3:7c:51:ef:da:a8:d8:25:3a:5f:ec:0b:
2e:ef:49:22:4e:32:8b:53:6a:3e:56:77:06:eb:ca:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.48.0/22
IPv6:
2804:55b8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267952
Signature Algorithm: sha256WithRSAEncryption
38:cc:92:16:17:ae:0d:97:97:31:f2:19:9b:4c:49:13:58:1a:
75:18:d9:ff:6c:74:74:8d:9a:1c:93:d2:28:71:a8:bd:59:1d:
d1:dc:85:f1:50:72:62:04:48:5a:c9:45:6d:26:5e:49:c5:ab:
fe:75:6c:a8:01:08:80:7e:a9:ac:06:90:bd:ea:3a:76:7e:e5:
71:83:52:4d:f9:15:a3:84:bf:dc:ad:2b:32:f4:7d:aa:47:35:
c6:6c:6a:01:de:65:b1:88:81:bc:f6:af:cb:ab:95:50:fd:97:
22:d8:70:a5:1f:ee:76:ee:a4:2d:23:7d:24:42:96:9d:2a:b8:
8d:09:88:b9:30:46:f3:83:98:bd:a3:d3:81:e2:6a:f2:b8:04:
11:c7:93:41:5a:ef:af:7b:dc:a5:a4:eb:c1:76:4f:40:7f:7d:
c3:b1:7b:1d:f5:cc:70:d4:67:aa:56:62:f4:7e:e4:8f:39:7d:
cf:d8:29:9b:d0:cb:ce:34:30:70:b3:a3:db:d0:9c:2f:a7:18:
d4:f2:1d:c7:ba:d6:f3:35:0b:b9:38:2a:07:b4:e1:59:6b:1e:
6b:52:14:e4:58:3e:62:96:56:94:37:d4:40:b1:3b:ff:02:93:
0c:42:41:26:7d:ad:c0:cd:44:7e:ef:57:39:07:92:f9:86:3f:
75:5b:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org