Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
File: 1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer (raw, json)
Hash identifier: pIJPEKPM3xIKSpq8MBqtiPiLuIZoca4F9WkeLmIB3IE=
Subject key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0991C936F8C13DC6F8F4EFC999F6CA3C19F9F471
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.mft
caRepository: rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 16:07:32 +0000
Certificate not after: Thu 03 Apr 2025 16:12:32 +0000
Subordinate resources: AS: 262847
IP: 45.163.0.0/22
IP: 45.225.64.0/22
IP: 143.137.84.0/22
IP: 170.244.60.0/22
IP: 177.10.56.0/21
IP: 179.125.32.0/21
IP: 181.174.236.0/23
IP: 191.5.232.0/22
IP: 2804:2e8::/32
Validation: Failed, certificate revoked on Wed 04 Sep 2024 13:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:91:c9:36:f8:c1:3d:c6:f8:f4:ef:c9:99:f6:ca:3c:19:f9:f4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 16:07:32 2024 GMT
Not After : Apr 3 16:12:32 2025 GMT
Subject: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:d4:5a:ff:45:b0:54:3b:72:72:1d:77:59:
83:56:1b:42:ef:41:0b:03:59:ec:c9:80:27:bc:7a:
f0:c8:8c:66:5c:d4:1c:53:66:3f:07:22:57:c8:14:
ee:3d:35:5b:1d:5c:de:2d:f9:a9:96:a6:c3:38:17:
da:7c:bf:a6:fa:10:d0:cb:d8:92:49:4e:12:bc:0a:
9c:73:c1:d7:da:a8:d2:a4:04:74:07:18:3f:09:3a:
84:82:e2:99:2f:97:30:84:79:5f:c1:e3:e2:ec:64:
b6:20:86:5c:37:a6:e8:1c:b7:10:53:0f:3c:27:42:
d7:72:42:f6:63:f3:8c:82:cc:7a:50:74:01:e0:05:
2b:99:e8:14:72:aa:af:ea:76:3f:f6:ab:3f:0e:7d:
56:7c:e8:ee:98:5a:6f:f5:f3:5c:a4:bf:4b:d2:69:
19:45:f6:06:4f:a4:57:aa:34:b1:e1:6e:41:4c:3c:
11:34:0d:f5:66:04:52:f8:de:e4:88:27:85:4f:ba:
63:93:5b:c1:ad:24:47:aa:93:76:ce:61:c4:c7:1c:
27:e2:6b:af:b3:9d:b9:0f:a5:1e:08:aa:b0:aa:51:
eb:98:4c:e1:a9:d7:17:51:fb:27:0f:af:94:35:f5:
53:91:56:c2:ac:df:25:29:5d:aa:c3:c4:da:2b:2a:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.0.0/22
45.225.64.0/22
143.137.84.0/22
170.244.60.0/22
177.10.56.0/21
179.125.32.0/21
181.174.236.0/23
191.5.232.0/22
IPv6:
2804:2e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262847
Signature Algorithm: sha256WithRSAEncryption
50:48:37:36:3b:a7:51:8e:94:57:bb:cf:4e:83:75:8e:68:a1:
9f:e9:a9:62:37:62:b6:ba:bc:6b:fc:1a:27:1f:fd:f2:c0:95:
68:87:be:d0:38:e7:44:42:55:0a:bf:22:ea:ac:a6:ce:45:2a:
80:60:58:06:5f:7a:b1:d1:d5:a6:c4:30:3d:3f:a8:f8:bc:1e:
97:88:ef:b1:e8:56:de:d4:5e:cd:eb:44:e8:79:0d:a2:32:4a:
9b:53:4a:3b:7b:60:98:46:19:44:c9:0e:ad:cc:a5:8b:4e:de:
5f:0e:7c:6b:90:19:a7:b0:41:7e:d3:b0:57:c6:f9:77:44:3f:
f7:46:25:e3:df:06:51:e1:13:21:44:92:84:fc:51:14:bb:80:
e0:d7:c4:78:cf:8f:03:11:4d:c5:18:47:e3:c6:61:a3:3e:8d:
db:bc:45:19:03:e0:81:53:2f:66:65:a8:f0:90:e4:57:94:13:
b7:47:23:19:a4:07:e4:8d:a5:4b:b1:00:39:de:ee:17:df:90:
b9:07:9f:27:68:03:f3:3f:bb:40:d5:6f:dc:82:61:e2:4d:c1:
f8:62:2a:5f:a5:60:98:f0:4b:ef:cd:70:ee:54:f6:8b:1c:5a:
07:e9:0e:71:f6:e0:9d:15:1d:bb:19:7e:0f:f9:a0:ff:dc:6d:
84:17:ba:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 18:42:07 2024 by rpki-client on console-ams.rpki-client.org