Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BC1D0631EF41F733F5331C74060B0BEC82595D6.cer
File: 3BC1D0631EF41F733F5331C74060B0BEC82595D6.cer (raw, json)
Hash identifier: B/IE7ctxP/ujsBaX4tzonl9tUXjsxjRTZPkDX0PitO8=
Subject key identifier: 3B:C1:D0:63:1E:F4:1F:73:3F:53:31:C7:40:60:B0:BE:C8:25:95:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 24B53E2A88D549FFB06D39EA8D003EA4F925DCB9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/3BC1D0631EF41F733F5331C74060B0BEC82595D6.mft
caRepository: rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 15:47:29 +0000
Certificate not after: Thu 03 Apr 2025 15:52:29 +0000
Subordinate resources: AS: 266160
IP: 177.85.80.0/21
IP: 192.140.12.0/22
IP: 2804:3b9c::/32
Validation: Failed, certificate revoked on Mon 03 Jun 2024 13:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b5:3e:2a:88:d5:49:ff:b0:6d:39:ea:8d:00:3e:a4:f9:25:dc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 15:47:29 2024 GMT
Not After : Apr 3 15:52:29 2025 GMT
Subject: CN=3BC1D0631EF41F733F5331C74060B0BEC82595D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:ef:fd:23:77:ea:ba:8c:3e:b1:9e:7f:5b:
53:51:cf:f4:00:15:6c:3b:13:67:4f:66:32:19:13:
87:61:0d:c7:65:0e:84:db:14:58:5a:af:85:ba:31:
77:68:58:13:c1:3c:d0:46:7d:e0:43:6f:fb:51:25:
67:1e:54:ce:3e:c8:b4:aa:14:ce:00:24:3e:f5:55:
56:f7:b6:7d:07:83:2a:e1:ff:ee:75:3f:94:2e:ee:
c2:5e:08:30:7f:78:7e:2f:21:de:50:4a:ce:54:69:
26:09:ad:90:44:18:9f:61:25:b9:67:aa:ac:b7:b7:
cf:e3:ec:91:01:25:4d:5f:df:e8:d5:a0:e7:58:e0:
6e:6e:a2:39:e2:90:5b:f5:20:2d:77:88:68:d4:0b:
33:ce:14:ee:89:6b:89:ce:8b:c0:6d:14:57:d5:70:
3c:89:9a:d9:14:14:29:d6:d8:21:9b:bc:8f:8c:ca:
2a:cc:5c:37:6b:09:96:8e:6b:fb:ad:7b:ab:be:f1:
30:27:cd:44:44:fd:14:88:60:8f:6a:f8:ae:40:fb:
11:96:24:3b:61:72:9a:6c:5a:76:f3:5f:ab:74:33:
f8:cd:08:41:bc:9c:86:b2:cd:df:ef:2f:bb:05:bf:
ca:73:24:49:b9:83:94:c3:38:7e:37:4c:bc:7f:b6:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:C1:D0:63:1E:F4:1F:73:3F:53:31:C7:40:60:B0:BE:C8:25:95:D6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/3BC1D0631EF41F733F5331C74060B0BEC82595D6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.80.0/21
192.140.12.0/22
IPv6:
2804:3b9c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266160
Signature Algorithm: sha256WithRSAEncryption
c8:d2:a6:0d:de:f0:e0:eb:40:22:bc:e3:9c:30:17:2a:e4:ef:
26:59:26:b6:92:47:52:1b:30:bd:04:eb:9f:5c:b0:2e:1d:5e:
dd:8f:05:c0:0b:70:b5:79:ef:41:fc:1c:cb:36:4b:71:1e:20:
96:86:d4:ce:9f:5e:0e:08:a4:17:6d:a7:61:7f:1f:cb:86:e7:
ed:fe:5f:cf:12:63:5f:05:e7:ae:75:70:9a:95:6d:96:01:ee:
c9:7c:c5:0b:be:68:76:60:aa:55:fb:f7:40:02:e0:83:87:3c:
72:f7:b9:49:35:25:9a:f6:73:a0:9a:10:c2:f9:57:d6:cf:52:
b2:16:53:5c:80:24:79:3b:da:b9:f6:b1:28:3b:ee:6c:75:92:
74:ba:b8:d7:57:cb:c0:56:25:c3:b3:ec:64:c4:97:e4:cb:06:
ae:aa:21:f6:43:40:88:67:47:36:9b:0c:f1:e5:04:98:b4:54:
7c:64:09:3e:5e:76:4a:99:c5:37:c3:68:73:76:87:b6:27:3e:
50:f2:5b:ec:bc:9f:b5:37:30:d9:68:4c:41:33:52:65:71:42:
ab:ed:06:e0:52:4b:8e:0b:34:db:cf:15:b0:ec:40:e3:64:4d:
3d:25:0f:db:a1:04:8d:75:af:f7:29:92:69:16:8c:31:a2:6c:
22:26:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org