Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1F8CB944B2B1D6FE87A33063025ACC8AE1770F42.cer
File: 1F8CB944B2B1D6FE87A33063025ACC8AE1770F42.cer (raw, json)
Hash identifier: QqFhvrfsfjXpG01DunI7ZqpI14lx/QTEh9XLzByqWWo=
Subject key identifier: 1F:8C:B9:44:B2:B1:D6:FE:87:A3:30:63:02:5A:CC:8A:E1:77:0F:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 744FDD4FE9F7F0B94EADDA58209D4CD302FDEB7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/1F8CB944B2B1D6FE87A33063025ACC8AE1770F42.mft
caRepository: rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Sep 2024 17:34:53 +0000
Certificate not after: Wed 03 Sep 2025 17:39:53 +0000
Subordinate resources: AS: 262550
IP: 143.0.40.0/22
IP: 168.197.4.0/22
IP: 177.72.168.0/21
IP: 2804:28e0::/32
Validation: Failed, certificate revoked on Thu 12 Sep 2024 02:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:4f:dd:4f:e9:f7:f0:b9:4e:ad:da:58:20:9d:4c:d3:02:fd:eb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 4 17:34:53 2024 GMT
Not After : Sep 3 17:39:53 2025 GMT
Subject: CN=1F8CB944B2B1D6FE87A33063025ACC8AE1770F42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:b5:cb:45:dd:d2:9e:41:4b:90:ee:18:af:
c1:67:4f:40:66:7a:e4:18:1c:57:05:87:65:08:a8:
cb:52:75:0a:b8:cb:36:9b:d1:08:0c:17:8c:ee:53:
32:5c:cc:21:cd:2e:01:9a:f7:b7:88:9d:95:af:74:
66:46:fb:fe:5e:60:62:25:5a:94:b9:71:6e:c1:c0:
34:8f:74:4c:15:90:77:68:b8:2f:22:46:4e:40:72:
ae:d8:43:10:42:e2:db:b5:9c:e6:84:c7:3e:4d:40:
4c:bd:11:be:89:44:95:fc:30:5b:51:d2:0a:90:38:
ce:7d:50:10:ac:59:c6:30:b6:fc:15:eb:2f:9b:32:
8f:44:b8:45:39:1f:3f:78:2c:72:4b:53:71:f0:8d:
0a:28:d0:3b:7d:e9:10:79:74:ae:57:59:a2:2c:46:
b9:27:8e:43:df:d3:34:14:de:34:16:c3:9e:7a:b2:
a0:c8:9e:7c:4a:31:fd:5c:33:58:e1:57:70:85:e5:
26:f0:c5:ba:cf:f8:1a:dc:ea:31:47:5a:83:53:2b:
20:9c:49:a9:44:03:20:08:58:af:c0:c3:11:9d:e4:
02:5b:fd:1b:47:32:d8:6b:fa:c0:2b:0d:7f:45:ca:
e6:3d:59:16:5f:9c:41:73:5f:75:bd:89:29:53:fb:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:8C:B9:44:B2:B1:D6:FE:87:A3:30:63:02:5A:CC:8A:E1:77:0F:42
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/1F8CB944B2B1D6FE87A33063025ACC8AE1770F42.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.40.0/22
168.197.4.0/22
177.72.168.0/21
IPv6:
2804:28e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262550
Signature Algorithm: sha256WithRSAEncryption
7f:60:37:ce:95:28:20:fc:67:14:98:17:72:e4:9d:8a:d4:f7:
8e:3c:b3:d1:b4:d7:65:3f:6c:a3:8e:94:d6:8c:39:45:10:07:
b3:4c:c9:26:3b:15:ae:ff:eb:a6:82:f1:37:17:96:bd:a2:8e:
ef:9b:f9:0a:59:bd:78:cb:c9:16:d4:49:5b:e7:5f:02:be:dc:
e9:a3:36:cd:37:c0:e3:46:e3:60:7e:eb:a1:93:32:73:c0:00:
a0:ff:ce:1f:07:1a:32:c6:96:a0:90:a2:c6:c6:14:61:e6:b2:
06:14:23:64:32:0a:32:db:34:ca:9d:26:42:5b:f9:b2:74:98:
fb:8b:a2:9c:93:e5:2b:c4:a9:19:1e:68:1e:04:3f:7b:3e:c9:
70:cb:b4:ff:ee:a4:b0:7a:e2:b5:1b:5e:85:ae:96:11:15:ed:
07:57:0d:89:9a:8d:0f:39:7c:e6:ba:0b:71:14:d9:3e:81:91:
29:3c:ca:b7:a3:44:8c:58:c2:b5:b0:c4:56:ca:ea:24:7b:05:
b9:ef:59:bd:fd:cc:a6:7b:ee:b6:14:9c:8e:35:b4:7f:db:2f:
b3:6f:b4:6b:ae:65:eb:6f:50:27:1f:6c:77:16:e7:ab:05:b2:
73:a2:5e:af:19:24:a2:4e:c6:1b:87:1f:a5:17:c8:13:26:00:
9a:2d:0d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 05:18:55 2024 by rpki-client on console-ams.rpki-client.org