Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E39B4483BB1F0BD52193F1DA831E7B82D8B5C49.cer
File: 1E39B4483BB1F0BD52193F1DA831E7B82D8B5C49.cer (raw, json)
Hash identifier: bWDcFm6qsjOKI3jn7lI4ARWIDBktxz/ICefxvTBFhGg=
Subject key identifier: 1E:39:B4:48:3B:B1:F0:BD:52:19:3F:1D:A8:31:E7:B8:2D:8B:5C:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0D4BB895FF04C72C2DE9F7E16690F92B9EA8E366
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/1/1E39B4483BB1F0BD52193F1DA831E7B82D8B5C49.mft
caRepository: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:25:09 +0000
Certificate not after: Wed 02 Apr 2025 18:30:09 +0000
Subordinate resources: AS: 263470
IP: 170.83.200.0/22
IP: 191.242.48.0/21
IP: 2804:1254::/32
Validation: Failed, certificate revoked on Wed 15 May 2024 18:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4b:b8:95:ff:04:c7:2c:2d:e9:f7:e1:66:90:f9:2b:9e:a8:e3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:25:09 2024 GMT
Not After : Apr 2 18:30:09 2025 GMT
Subject: CN=1E39B4483BB1F0BD52193F1DA831E7B82D8B5C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:a2:4d:85:53:91:f7:1f:f8:ed:36:2e:c8:
65:fa:40:41:89:40:ca:ad:db:b9:6e:53:66:e3:1e:
97:a3:84:b9:8b:f4:e5:72:e0:53:e5:ca:c7:ac:fc:
37:88:50:ac:45:2d:01:4d:2b:9d:d5:dc:bc:7b:11:
78:5a:29:e8:6d:75:20:e9:f1:5d:4d:d6:a1:35:f9:
8f:ee:2e:05:54:13:10:3b:0f:5a:39:ec:67:4e:ee:
39:93:08:a5:60:a8:96:b6:ad:84:01:89:1c:d4:4a:
ef:f1:53:50:c4:b8:09:3f:49:e8:cd:47:4b:a0:53:
06:3d:19:6c:88:60:24:8a:d0:1b:46:8f:9b:83:3d:
0d:6a:28:62:8f:7f:34:66:d2:d1:73:e5:65:ab:45:
c3:a1:2d:74:08:ae:fb:76:36:e2:e1:e9:81:3a:b0:
00:c2:14:0c:28:1b:cd:fd:35:81:0c:f9:9d:e0:5b:
28:ce:94:df:72:37:02:1e:98:21:3d:d6:da:0f:e0:
6d:dd:be:b8:8a:6c:e1:c0:ac:0a:2b:1e:06:04:69:
c9:df:12:80:07:d3:5f:9b:d0:c9:9b:2a:34:11:23:
ff:2a:87:ae:36:17:0d:6f:90:b9:dd:5b:6e:76:7d:
27:44:42:b7:0f:0d:48:f4:c6:f9:e2:8f:64:af:8d:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1E:39:B4:48:3B:B1:F0:BD:52:19:3F:1D:A8:31:E7:B8:2D:8B:5C:49
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/1/1E39B4483BB1F0BD52193F1DA831E7B82D8B5C49.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.200.0/22
191.242.48.0/21
IPv6:
2804:1254::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263470
Signature Algorithm: sha256WithRSAEncryption
d6:29:17:8c:c2:29:88:c0:73:87:07:c6:f7:6d:f9:bb:2b:ea:
03:66:ae:6d:15:fb:c1:39:ad:58:c8:92:67:a8:ea:65:18:59:
8a:f4:e0:98:c2:b6:c5:d5:0a:ac:d0:fe:d9:78:37:03:47:e1:
2a:73:4f:99:1c:fe:e7:fd:fc:5b:ba:cc:b3:b0:2c:30:b0:36:
f5:87:e9:e9:10:f2:d7:ed:2e:e2:5d:22:e9:94:b8:b5:47:a4:
b4:d3:16:ea:68:58:d7:62:cd:a4:9f:e5:ec:58:29:1d:79:76:
ea:01:33:e8:5d:76:5b:16:3d:18:ef:35:4b:75:ec:c2:5e:63:
22:a0:20:7e:09:22:a3:e7:fb:6e:f3:02:48:69:01:3b:d1:81:
1f:65:d5:af:10:d6:03:f0:0b:67:09:4c:ae:42:54:ad:9b:43:
cc:b7:23:cc:72:7d:49:24:d6:0d:24:3d:22:db:c0:a5:3d:26:
23:0f:a4:2e:bc:93:1c:89:b8:1e:ac:e6:cb:a3:b8:69:95:2d:
ec:98:39:18:28:09:fc:12:ab:69:fc:79:9b:f7:dc:45:ea:e0:
62:0a:8c:6e:88:54:5d:4b:96:62:68:43:92:b8:7a:b6:bc:7f:
b4:38:3f:9a:0e:76:eb:77:1d:71:40:dc:60:79:21:54:63:80:
c8:24:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org