Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
File: 20DE0E6E3D621F83173025848A78216A75E502CC.cer (raw, json)
Hash identifier: RFPQj1WWC4RykLxV77+IO64TRk5iL+XtdO2EfdBwkYU=
Subject key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 77A87876E903E97B49F010DC9E48C5991279EC91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.mft
caRepository: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 11 Nov 2024 20:56:23 +0000
Certificate not after: Mon 10 Nov 2025 21:01:23 +0000
Subordinate resources: AS: 262725
IP: 186.192.0.0/20
IP: 186.235.64.0/20
IP: 2804:3360::/32
Validation: Failed, certificate revoked on Tue 12 Nov 2024 16:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a8:78:76:e9:03:e9:7b:49:f0:10:dc:9e:48:c5:99:12:79:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 11 20:56:23 2024 GMT
Not After : Nov 10 21:01:23 2025 GMT
Subject: CN=20DE0E6E3D621F83173025848A78216A75E502CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:b8:4a:13:27:82:99:82:b9:63:04:c6:e1:
30:c4:e9:e0:d5:17:be:0f:b5:c3:99:0c:32:94:1f:
82:42:d3:c3:dc:e0:f0:2f:81:62:d1:7c:7a:48:46:
6c:c2:29:d9:bd:c5:86:84:76:c3:ba:1b:ea:79:6c:
63:9b:ff:97:7c:34:27:eb:f2:51:4e:52:49:86:af:
c3:29:24:74:14:50:fa:04:29:ed:b6:de:96:e4:1e:
cc:35:06:ac:2a:8d:84:7c:c7:5f:b9:df:a6:4e:bc:
b8:78:23:b5:83:2a:db:71:88:ef:40:ed:0d:16:21:
8f:24:a5:02:f8:c8:1f:a1:59:ae:b1:c8:0e:18:a4:
21:9b:0c:4c:71:89:35:df:b1:0a:52:22:4b:65:f3:
c6:0e:b2:4b:93:37:b5:87:e6:38:11:ef:5c:70:ae:
2e:fe:2a:09:14:7c:3b:9d:4f:ae:12:d6:59:0f:61:
72:e7:39:31:f5:1c:67:23:a6:46:84:d8:93:94:84:
b2:fb:8f:d3:cc:65:9e:22:5c:23:3d:df:7b:fc:cd:
a9:86:5a:2f:f7:a0:86:d4:5c:91:83:a0:8a:8b:f5:
46:5e:5c:81:f0:69:43:f4:a3:74:fb:6c:b0:8d:5f:
62:65:fd:9c:3e:83:f2:83:ab:f7:81:ef:43:bc:01:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.192.0.0/20
186.235.64.0/20
IPv6:
2804:3360::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262725
Signature Algorithm: sha256WithRSAEncryption
80:f6:4e:9c:e8:92:5b:e0:e5:d9:da:a9:5b:30:6f:64:d4:15:
4e:91:5f:a5:c1:d0:fd:c5:0e:5d:a2:13:7f:d6:8a:e8:e8:65:
7c:9e:7e:22:1d:01:56:65:70:bf:0d:42:33:3f:f0:62:78:23:
5c:2d:5c:20:e0:3c:70:52:18:d1:4c:8b:e7:07:36:83:05:7a:
1a:5d:46:d4:f7:bd:65:cf:83:0d:82:74:f1:20:44:25:8b:2a:
65:f3:69:77:33:17:60:d5:e4:28:ed:e2:f0:e5:60:16:19:e5:
87:92:af:60:39:64:bb:a8:6d:94:40:f6:05:44:b3:2a:ef:82:
92:75:74:73:4b:a6:a0:68:2b:f7:fc:b8:96:3a:db:d8:b2:be:
10:65:45:ef:75:50:af:51:e5:65:a0:9a:59:58:a1:f5:b5:82:
28:6b:86:d9:69:9c:68:34:fa:3e:f0:8c:88:fe:bd:67:7c:05:
76:39:fd:9c:b2:02:56:15:77:1d:27:e1:e3:64:b0:c0:37:10:
97:52:88:d2:54:27:6f:9e:ee:f4:1e:95:f1:2f:1b:f4:c7:ab:
2c:2a:14:e1:21:03:7f:49:4a:c2:00:79:b7:cb:f4:39:b8:de:
82:3d:51:98:b9:e9:02:06:2e:11:86:b9:c0:e1:65:a1:38:ed:
f9:c0:e8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:19:59 2024 by rpki-client on console-ams.rpki-client.org