Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.cer
File: 29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.cer (raw, json)
Hash identifier: qwVXRVfIO47/iAAHjp91aC75J/AZXsAv5S0Z91TcTQY=
Subject key identifier: 29:A3:D0:D0:AC:25:51:82:E4:AE:A9:CA:17:96:33:70:CD:63:B2:CE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7B87BE8FF0B5BA6206FE6DD2601F5CEA5C9B3CFC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.mft
caRepository: rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 28 Aug 2024 11:27:47 +0000
Certificate not after: Wed 27 Aug 2025 11:32:47 +0000
Subordinate resources: AS: 265973
IP: 164.163.204.0/22
IP: 177.221.120.0/21
IP: 186.233.128.0/21
IP: 2804:40a8::/32
Validation: Failed, certificate revoked on Wed 28 Aug 2024 13:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:87:be:8f:f0:b5:ba:62:06:fe:6d:d2:60:1f:5c:ea:5c:9b:3c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 28 11:27:47 2024 GMT
Not After : Aug 27 11:32:47 2025 GMT
Subject: CN=29A3D0D0AC255182E4AEA9CA17963370CD63B2CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:26:40:29:4a:cf:99:74:f1:31:4e:5e:44:98:
6d:9a:0a:a0:12:2b:15:54:09:f3:8c:7d:44:d5:17:
e9:41:0b:72:20:3e:42:f0:f8:98:d1:45:21:b0:65:
a7:4d:7f:87:0e:1d:0c:82:d8:92:76:39:a0:f2:73:
66:ba:fb:16:a5:56:28:a6:1d:dd:a8:52:0d:38:d4:
ce:d9:1e:9c:8a:c2:25:78:c7:af:69:ea:b5:7a:36:
53:c9:1a:ba:05:c8:f8:2e:44:70:76:96:07:5e:ed:
05:61:31:0c:82:5f:47:ef:3a:da:5a:e7:5a:cf:08:
d8:b8:ca:56:28:06:cb:28:bf:ca:e1:e7:98:17:61:
ef:8f:bb:92:20:46:eb:6c:da:8a:0e:70:7e:09:8c:
d9:ee:fd:89:cb:cc:74:e2:81:3a:75:e9:82:6a:97:
be:7a:36:b3:ff:61:ca:7d:71:fc:e1:f8:61:1e:d7:
19:f5:ec:fe:4c:92:cd:b9:f7:62:98:6f:a3:04:a2:
4a:ff:0c:62:42:e1:9f:cd:36:5b:80:6b:a3:e4:ff:
f0:dd:5e:a2:14:dd:5e:aa:ab:5e:03:30:57:01:10:
96:89:81:72:73:28:26:87:61:6c:4b:3d:c0:fa:8b:
2a:d7:74:00:6e:a7:b5:ff:70:98:c6:f6:1e:f8:48:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
29:A3:D0:D0:AC:25:51:82:E4:AE:A9:CA:17:96:33:70:CD:63:B2:CE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.204.0/22
177.221.120.0/21
186.233.128.0/21
IPv6:
2804:40a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265973
Signature Algorithm: sha256WithRSAEncryption
2a:0a:a0:f5:b0:34:08:6a:7d:14:67:5a:53:f9:bb:5f:43:d7:
a1:4f:a6:f2:b5:83:3c:d8:02:ec:3e:bf:79:62:60:0e:18:e5:
bd:a6:9f:d4:a4:9a:5c:56:47:90:da:2d:2c:0f:ef:27:a5:64:
10:10:2b:7a:dd:39:3f:46:a7:d4:b5:6d:39:a6:7b:7d:0b:ee:
75:71:7d:51:54:2f:b5:fb:df:6c:1d:85:64:41:54:22:c4:a3:
c7:e3:35:3e:05:71:54:30:4d:94:ad:36:ff:88:bc:64:7b:48:
a7:ad:3b:2e:ae:79:47:be:ee:ed:f5:f1:37:7b:fc:cf:98:7c:
60:43:09:14:31:d7:77:df:a5:e5:7d:17:74:a6:da:90:c0:94:
98:29:c2:e8:ae:24:2a:25:ce:c2:a8:1c:8e:39:d0:7d:31:03:
af:2e:52:5a:ef:30:07:6b:41:c2:36:2f:b1:f2:4d:7a:70:5f:
f7:a1:90:bc:ce:b6:38:58:98:98:38:c8:a8:31:bd:15:30:58:
26:23:28:6d:e2:04:76:68:72:19:5f:92:d1:3d:51:70:b6:85:
e7:54:e4:9b:66:5e:ab:df:50:59:09:db:ba:c2:3a:9c:fd:79:
a9:f6:c6:66:24:cc:81:62:d6:9a:92:1e:d6:0a:42:e6:8c:39:
66:95:fa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 16:05:29 2024 by rpki-client on console-fra.rpki-client.org