Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D8EA39902F4A17533D403493176C4D0DC03805E.cer
File: 2D8EA39902F4A17533D403493176C4D0DC03805E.cer (raw, json)
Hash identifier: Wm6Z/IYPyzd9MURx88OKR4hsgKH1tYewYJMo0O90Xbo=
Subject key identifier: 2D:8E:A3:99:02:F4:A1:75:33:D4:03:49:31:76:C4:D0:DC:03:80:5E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0D4AF8B840DADBFA87B0284C4A6DFB861FFEAEF0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/2D8EA39902F4A17533D403493176C4D0DC03805E.mft
caRepository: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 07 Nov 2024 15:21:03 +0000
Certificate not after: Thu 06 Nov 2025 15:26:03 +0000
Subordinate resources: AS: 270692
IP: 177.128.52.0/22
IP: 2804:6fe8::/32
Validation: Failed, certificate revoked on Fri 08 Nov 2024 18:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4a:f8:b8:40:da:db:fa:87:b0:28:4c:4a:6d:fb:86:1f:fe:ae:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 7 15:21:03 2024 GMT
Not After : Nov 6 15:26:03 2025 GMT
Subject: CN=2D8EA39902F4A17533D403493176C4D0DC03805E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:59:c6:02:94:18:6b:eb:0a:bb:33:47:37:
2d:66:ac:26:70:7f:37:75:d5:8f:3e:8a:03:cd:3c:
a4:6b:8e:dd:13:b4:e0:32:ff:50:2d:41:ac:03:e0:
db:d4:4a:e1:a1:66:f1:3a:f0:9d:e5:b5:da:94:61:
58:ed:33:d8:c0:96:8f:f7:85:50:a9:71:e9:38:1d:
3e:1d:37:37:b1:d5:e5:f6:0d:a9:54:c7:b0:48:fb:
94:b1:86:b8:e3:1f:0b:05:04:0c:63:58:a8:bf:cd:
a6:de:3a:26:5e:ea:6d:28:9a:4f:58:e0:da:73:16:
0f:f3:7b:41:2a:3b:16:28:ad:2b:78:06:91:dd:20:
bf:bf:43:20:d4:b2:e9:14:a2:3e:8d:c8:78:3d:01:
28:10:79:2e:04:bd:05:27:a5:a1:3d:01:ae:8a:ad:
e2:6f:19:3c:3c:11:78:b5:42:0b:fd:b8:1c:d6:58:
c2:0a:dc:f2:d0:d4:58:a3:96:8a:d3:2e:78:21:04:
fa:7d:aa:d3:f0:b5:28:21:5d:23:4c:b9:6b:39:d4:
0c:c9:f6:3d:c1:bb:d0:4d:01:a6:8c:fb:4b:9d:25:
ef:fa:cb:6d:d6:3b:d2:d1:7a:92:4d:67:31:ba:be:
98:9e:80:bc:cf:35:60:6e:d9:b8:f6:ce:55:36:06:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:8E:A3:99:02:F4:A1:75:33:D4:03:49:31:76:C4:D0:DC:03:80:5E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/2D8EA39902F4A17533D403493176C4D0DC03805E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.52.0/22
IPv6:
2804:6fe8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270692
Signature Algorithm: sha256WithRSAEncryption
63:ee:47:be:bc:37:00:69:94:5c:41:a2:07:57:da:35:46:a9:
3d:02:38:07:43:b5:a2:2d:a9:08:61:8e:a6:c4:c6:17:2c:d5:
93:8b:19:a8:ef:3b:3e:f2:d1:06:45:a8:4e:1d:8f:98:6e:2e:
25:80:5a:dd:d7:23:4e:8c:f2:35:cc:dc:43:e9:1f:d0:ff:29:
8d:fa:8a:76:5e:e4:17:4e:b6:63:ea:e3:c7:88:e0:d6:f0:8f:
d2:5b:66:17:b6:1d:ce:de:81:4c:9a:ab:6b:55:14:dd:65:55:
56:eb:03:47:07:4f:4a:4d:65:15:b0:f4:81:b1:4c:30:1e:98:
eb:df:57:fe:8a:4f:5d:58:8c:37:29:87:b6:a9:64:15:de:83:
93:ad:4f:cd:95:7a:85:88:3f:c9:ad:69:9e:8a:ea:e7:b0:e3:
9b:f4:d0:6f:6a:23:74:ce:99:01:92:06:ef:37:d2:a3:bc:4b:
0d:24:88:9f:05:28:14:38:7d:02:82:13:c9:39:77:50:58:27:
71:b8:b0:b8:1e:71:3a:ae:2b:4a:df:7e:d6:ab:8d:37:f5:53:
75:24:90:4e:ce:af:a4:67:2b:36:31:6e:97:65:9d:75:9f:a9:
eb:53:56:20:8e:70:1a:4a:eb:04:88:a7:c2:05:05:56:71:bb:
87:99:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 21:15:25 2024 by rpki-client on console-ams.rpki-client.org