Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer
File: 2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer (raw, json)
Hash identifier: EiAKfnhOMhBnW0SRestfLMAVFOputcfKcBK3A4+QqAA=
Subject key identifier: 2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4D35F8E0B2F4A82619671EA601A70F1A46078316
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.mft
caRepository: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 25 Oct 2024 19:53:08 +0000
Certificate not after: Fri 24 Oct 2025 19:58:08 +0000
Subordinate resources: AS: 262585
IP: 201.55.160.0/20
IP: 2804:8f70::/32
Validation: Failed, certificate revoked on Mon 28 Oct 2024 12:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:35:f8:e0:b2:f4:a8:26:19:67:1e:a6:01:a7:0f:1a:46:07:83:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 25 19:53:08 2024 GMT
Not After : Oct 24 19:58:08 2025 GMT
Subject: CN=2A371CF8C86799E154504B6C023890DAD3CAF1BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:38:a0:7d:dc:9c:00:70:84:90:d1:3a:f5:
83:72:2c:af:e3:5c:a9:f0:ec:63:da:b4:89:e5:c9:
2f:01:7f:03:99:d8:5f:5c:c2:db:0e:67:13:f5:08:
ba:92:62:45:14:48:c6:5e:69:d1:4e:9e:3d:3f:be:
bd:7e:0e:a0:9e:75:e9:3f:39:e6:d9:d5:4b:a6:8f:
9b:43:a0:e6:34:bc:c0:63:ae:07:7a:0c:12:18:4c:
77:0b:eb:b2:e8:32:53:58:9e:9b:4e:ea:37:a4:80:
ed:f6:48:c2:95:f0:0a:36:10:16:de:50:9c:f7:3d:
c5:e7:22:3f:4e:f3:22:c1:62:da:6f:cc:18:6a:d1:
0a:4e:22:09:36:60:db:1d:78:29:0a:fc:8d:29:f2:
a8:15:b9:2e:69:ea:00:db:5f:b9:08:55:99:b6:1a:
1a:65:7a:40:1b:e6:b3:30:21:57:66:40:1e:2e:88:
ef:7f:8f:f5:43:39:19:24:12:a8:ee:c2:78:82:13:
87:79:5d:4d:9c:25:b7:25:56:3d:5a:40:56:90:3f:
65:06:3e:b9:5a:51:21:f4:c4:ba:e2:ea:0e:da:50:
74:bd:43:88:a7:16:2c:88:38:12:0d:53:09:87:b5:
f3:10:60:7c:b3:7b:d7:ec:35:c5:8e:9d:85:b7:65:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.55.160.0/20
IPv6:
2804:8f70::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262585
Signature Algorithm: sha256WithRSAEncryption
b7:84:e9:2f:51:e7:b3:f6:3a:b2:a0:66:eb:95:45:b4:5d:02:
f4:c6:9a:6d:00:d5:a7:a8:33:be:7c:79:9a:1d:35:1b:35:98:
62:97:31:2b:38:23:b7:1c:3e:d5:00:13:8b:f7:fa:48:f0:ce:
b9:3d:c6:26:ba:10:8b:d9:5b:1a:f1:f4:79:ed:7a:1d:54:91:
3b:81:67:db:71:90:c4:99:c4:c5:b3:f5:b9:d2:20:29:b9:94:
d9:f9:08:60:f8:21:f4:5c:fb:74:54:e6:fb:de:dd:b9:30:5e:
e8:5f:de:dc:60:da:d4:5f:1b:f3:2e:a4:ee:fb:53:f9:65:94:
6a:ba:36:23:2a:ab:9f:e2:e4:64:00:80:28:7e:7c:b0:e0:7f:
c3:10:00:44:70:8c:d9:ad:59:c2:2e:53:8f:eb:24:43:13:c7:
86:09:ea:78:cb:b0:48:d6:2a:ba:55:72:93:0e:5b:da:b0:8b:
52:c8:f4:c0:4a:fb:83:e1:15:8d:65:fd:7b:b2:6f:91:fa:b0:
c7:c2:d2:bc:c8:df:fa:e1:48:3a:72:e5:da:ab:a0:ca:4a:cb:
3e:2e:d4:0c:41:09:93:68:69:41:67:93:8a:58:6f:3f:a6:3f:
cf:e3:97:23:50:4c:3a:a4:e6:42:33:a4:c5:26:dc:f2:e4:34:
1e:fb:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 14:25:16 2024 by rpki-client on console-fra.rpki-client.org