Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/24F21D6C2CE74FB191F242BBF4C4AA044D673142.cer
File: 24F21D6C2CE74FB191F242BBF4C4AA044D673142.cer (raw, json)
Hash identifier: W4JTBJUvdFVfJFmN4n1ew0Pzd9H21OjZe8OIRzBuQSo=
Subject key identifier: 24:F2:1D:6C:2C:E7:4F:B1:91:F2:42:BB:F4:C4:AA:04:4D:67:31:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 469B8BC6268D825CCE0D716810FCE10AE4582CD9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/24F21D6C2CE74FB191F242BBF4C4AA044D673142.mft
caRepository: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 04 Oct 2024 16:55:10 +0000
Certificate not after: Fri 03 Oct 2025 17:00:10 +0000
Subordinate resources: AS: 28212
AS: 52892
AS: 268218
IP: 45.171.148.0/22
IP: 45.235.236.0/22
IP: 131.221.12.0/22
IP: 138.185.232.0/22
IP: 170.78.140.0/22
IP: 177.22.80.0/20
IP: 177.72.232.0/21
IP: 181.191.16.0/22
IP: 181.232.152.0/22
IP: 187.63.16.0/20
IP: 189.113.96.0/20
IP: 2804:1354::/32
IP: 2804:32d8::/32
IP: 2804:4dc4::/32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 18:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9b:8b:c6:26:8d:82:5c:ce:0d:71:68:10:fc:e1:0a:e4:58:2c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 4 16:55:10 2024 GMT
Not After : Oct 3 17:00:10 2025 GMT
Subject: CN=24F21D6C2CE74FB191F242BBF4C4AA044D673142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:55:19:3a:9b:54:dc:a7:60:00:64:35:c2:
89:40:5c:67:3a:84:d0:3d:ad:71:20:59:87:6f:6c:
28:3b:06:56:5a:f3:d6:a2:80:71:3f:90:04:8b:aa:
bb:03:79:70:4c:ac:69:d5:d2:9d:a3:7c:d8:4b:f2:
ad:e2:2c:35:d8:28:73:b6:ad:7d:f4:d7:34:95:5d:
a2:96:1a:6a:f6:c3:04:da:15:c9:ec:a0:74:ad:71:
38:1f:b0:0b:de:4f:8c:c7:dc:2d:a6:87:02:68:26:
ae:da:1b:34:7b:73:b9:29:68:be:00:8f:7f:09:b1:
0a:44:74:39:7b:9a:93:a1:b0:3c:24:e5:18:c2:5d:
d7:9c:2f:cf:86:91:b0:ad:50:8d:d0:c5:7a:41:69:
97:bb:f5:7f:58:6a:40:2c:63:9f:46:25:37:a1:5b:
ee:a9:b0:0f:78:13:26:6e:07:54:5a:04:85:7c:55:
0f:48:f7:15:5f:77:e5:3a:63:b6:95:da:41:fd:bb:
23:90:03:39:b7:37:3d:14:45:13:4b:65:2e:7c:89:
12:b7:3f:6e:8e:ac:57:c7:66:e0:eb:c0:8d:b9:c5:
f9:e4:79:fc:cd:c1:89:20:b2:5f:22:e0:93:9b:ce:
37:69:6f:7e:5e:8f:79:cf:48:65:be:b6:9d:94:df:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
24:F2:1D:6C:2C:E7:4F:B1:91:F2:42:BB:F4:C4:AA:04:4D:67:31:42
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/24F21D6C2CE74FB191F242BBF4C4AA044D673142.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.148.0/22
45.235.236.0/22
131.221.12.0/22
138.185.232.0/22
170.78.140.0/22
177.22.80.0/20
177.72.232.0/21
181.191.16.0/22
181.232.152.0/22
187.63.16.0/20
189.113.96.0/20
IPv6:
2804:1354::/32
2804:32d8::/32
2804:4dc4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28212
52892
268218
Signature Algorithm: sha256WithRSAEncryption
a5:25:af:f8:85:ca:f5:c4:2d:79:7f:8a:2b:e1:6f:7b:ac:28:
3a:b9:9a:a3:ed:3a:74:a7:f2:a8:ad:8a:93:7c:5c:94:3b:27:
d0:ae:84:15:20:de:5c:f9:87:b2:0d:a2:76:15:31:1e:93:00:
71:cc:25:f9:95:4e:77:b9:83:00:23:24:2f:09:3e:3f:cf:d8:
41:9a:69:63:ee:2d:2f:11:66:99:33:09:87:c6:7f:f5:b4:c2:
40:c1:c2:e3:a5:b7:e9:d2:c0:f4:b6:ce:0d:55:93:12:0f:ca:
7a:6f:cc:70:0f:a3:0e:1d:6c:bb:bf:0a:67:7c:88:7a:b0:1e:
38:2a:fe:c8:87:d3:09:b7:24:fb:ad:3a:35:34:9b:a1:d0:3c:
52:0d:2e:bd:b5:08:a0:61:20:de:c6:80:19:13:a8:ce:1b:90:
33:37:52:68:28:ba:26:31:e8:40:e9:fe:d8:d8:51:3d:5e:b1:
55:65:c3:a8:97:bd:22:82:ef:f4:d0:16:8d:d7:f9:35:5a:0b:
9c:6d:c0:c6:5a:98:0a:c8:5d:58:eb:7b:ed:77:26:ea:dc:4a:
61:2a:e9:20:62:38:94:ea:9c:e4:e5:8f:17:f3:e8:f3:f1:84:
64:d3:20:8f:e3:51:4a:1d:9c:4d:6c:01:f0:cc:61:a6:a4:50:
be:f0:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 21:03:38 2024 by rpki-client on console-fra.rpki-client.org