Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D4BCCE23EE612020578EC7354DBC1D8F01DE8DF.cer
File: 1D4BCCE23EE612020578EC7354DBC1D8F01DE8DF.cer (raw, json)
Hash identifier: 0i2mHuRABxqIzHBlzcaaOU7WqhxUEGXrTDxQF6hP2ME=
Subject key identifier: 1D:4B:CC:E2:3E:E6:12:02:05:78:EC:73:54:DB:C1:D8:F0:1D:E8:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3F58DB6E4C665BC5B94130396AF15D1CE9DC37DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/1/1D4BCCE23EE612020578EC7354DBC1D8F01DE8DF.mft
caRepository: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:25:55 +0000
Certificate not after: Wed 02 Apr 2025 18:30:55 +0000
Subordinate resources: AS: 266289
IP: 170.79.0.0/22
IP: 2804:357c::/32
Validation: Failed, certificate revoked on Wed 17 Apr 2024 17:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:58:db:6e:4c:66:5b:c5:b9:41:30:39:6a:f1:5d:1c:e9:dc:37:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:25:55 2024 GMT
Not After : Apr 2 18:30:55 2025 GMT
Subject: CN=1D4BCCE23EE612020578EC7354DBC1D8F01DE8DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:0a:f2:a4:a9:9d:08:57:76:4a:27:00:80:
3c:75:70:d9:b9:ff:b7:ca:47:bc:f9:37:c8:a8:f0:
33:11:83:b5:24:e6:5f:45:d2:d7:cc:ca:58:71:e7:
8e:68:eb:29:37:9b:81:ec:a3:7d:ce:8a:ca:82:38:
d3:87:ca:06:43:49:be:21:b1:81:d3:03:e9:9d:0e:
29:6d:2d:d0:62:e0:ce:96:0e:d4:ae:87:89:14:5a:
82:6a:e0:c7:71:b0:c8:21:b1:ac:b1:28:1f:23:fd:
b6:a7:77:c9:eb:eb:1f:85:ac:91:b2:79:56:cc:0f:
97:65:e0:ee:48:46:5d:2a:ec:d8:ec:71:fb:fe:14:
d5:77:1e:89:9d:4b:dc:a3:0c:9c:90:95:88:11:1a:
a9:a0:48:c0:08:0e:32:5f:a4:61:d8:91:5d:a8:c0:
3a:85:7c:6d:a4:f9:e3:c3:1a:c6:88:2f:a2:cf:93:
f3:6c:bf:83:a7:28:61:f3:d4:e2:97:0f:e8:cf:a6:
32:be:7a:61:be:b9:1a:83:ba:4a:93:02:2b:36:b5:
a1:12:2a:54:01:c5:34:ff:2f:2b:28:cb:4c:6f:3d:
8c:fc:fc:0b:93:4c:24:bf:05:18:ad:44:d9:8a:58:
65:f7:1e:ac:cd:b6:dc:0e:7e:3e:00:ba:fb:c8:20:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1D:4B:CC:E2:3E:E6:12:02:05:78:EC:73:54:DB:C1:D8:F0:1D:E8:DF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/1/1D4BCCE23EE612020578EC7354DBC1D8F01DE8DF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.0.0/22
IPv6:
2804:357c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266289
Signature Algorithm: sha256WithRSAEncryption
ad:3d:dc:21:3b:fa:f7:bf:3b:3a:de:e4:6c:a2:86:c1:33:43:
15:44:3d:8e:db:3f:40:5a:d8:77:51:c6:da:da:5c:11:f8:c4:
90:7c:14:83:4e:6a:db:14:43:6f:13:c5:f7:f8:f4:34:41:17:
63:67:75:72:c5:e2:3b:10:1b:e5:f7:3d:6b:da:35:b1:18:b4:
70:80:69:50:ad:ff:e4:a6:64:e5:82:0a:d7:3b:d8:a9:be:e0:
d1:8f:79:f2:2c:f0:4e:9f:5c:5c:6a:7c:7c:40:ce:72:2e:04:
3c:14:ae:10:72:ad:dd:56:64:10:cf:57:b9:97:b7:72:79:a5:
b7:5c:aa:94:a0:a5:0f:22:b0:a0:37:d1:a1:0f:7b:34:da:da:
a8:ea:cb:9b:0b:39:92:87:6c:b0:c2:f8:6c:e4:09:3b:68:a6:
d9:dd:69:af:12:ff:d5:c2:47:77:d7:cc:f9:14:f6:36:0b:f3:
b3:7a:da:f7:ba:a9:b7:d1:cb:18:e5:21:a0:cc:52:0d:97:f4:
fa:27:6f:84:98:84:b4:44:d8:c5:cd:36:82:28:4b:ba:d3:01:
9a:31:36:30:41:8d:6e:89:ed:c4:73:6a:4a:0d:d3:21:98:0d:
b0:c3:0c:3e:f9:2e:05:3b:92:7b:e2:c9:59:45:7c:50:08:e1:
39:7d:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org