Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3CB8F4AF64439840F44546B93A23D726DC02C7BE.cer
File: 3CB8F4AF64439840F44546B93A23D726DC02C7BE.cer (raw, json)
Hash identifier: z5f8pKFn6GXT1L3y0w0L9hT6yxt4qfPGv00VfoOaMiI=
Subject key identifier: 3C:B8:F4:AF:64:43:98:40:F4:45:46:B9:3A:23:D7:26:DC:02:C7:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4C1D614910DBAB780F06B8CF28E038A694B7A366
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3CB8F4AF64439840F44546B93A23D726DC02C7BE.mft
caRepository: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 04 Nov 2024 20:59:07 +0000
Certificate not after: Mon 03 Nov 2025 21:04:07 +0000
Subordinate resources: AS: 61621
AS: 267420
IP: 45.235.160.0/22
IP: 170.231.208.0/22
IP: 177.23.252.0/22
IP: 186.209.123.0/24
IP: 186.209.222.0/23
IP: 2804:4d3c::/32
Validation: Failed, certificate revoked on Tue 12 Nov 2024 07:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:1d:61:49:10:db:ab:78:0f:06:b8:cf:28:e0:38:a6:94:b7:a3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 4 20:59:07 2024 GMT
Not After : Nov 3 21:04:07 2025 GMT
Subject: CN=3CB8F4AF64439840F44546B93A23D726DC02C7BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:45:5c:5b:43:5f:81:11:37:39:86:e3:e2:
98:5e:20:46:c2:3f:78:ae:ee:4b:e1:99:5f:dc:5b:
f5:01:e9:12:a2:77:8b:2e:97:e0:bf:41:89:63:22:
0f:9e:8a:dc:7f:b3:89:de:32:22:c5:1b:cc:84:7b:
45:11:c9:ee:43:84:e4:e4:f0:d7:36:ef:fb:08:c6:
15:a8:d6:30:a2:1b:79:3b:f2:9d:a3:9b:ba:29:3c:
74:4c:f2:27:cd:c3:c6:38:55:1b:10:0c:21:4e:79:
2a:87:ea:df:25:e7:04:28:ea:6b:e3:42:11:ab:90:
89:16:03:39:c9:dd:f6:3b:58:e6:24:5f:43:f7:1b:
c8:dd:5b:86:2b:22:67:81:68:90:2a:59:79:df:5b:
ab:3e:07:76:43:12:06:5f:a0:0d:41:d3:b8:1c:d4:
20:04:ab:b3:02:4c:9a:61:68:48:d7:e7:20:c8:1f:
32:c6:0e:9f:99:c1:e7:e9:8f:19:9a:3f:49:6b:32:
8a:bf:60:19:5c:65:4d:98:99:50:49:a8:eb:00:21:
f8:77:d5:3c:2b:e1:cb:f9:de:48:b7:56:52:b5:3a:
c5:1c:dc:72:ce:37:af:dd:6c:09:70:26:c3:87:51:
7b:f4:d2:0e:95:07:cf:9d:07:3f:d6:b4:bd:68:68:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3C:B8:F4:AF:64:43:98:40:F4:45:46:B9:3A:23:D7:26:DC:02:C7:BE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3CB8F4AF64439840F44546B93A23D726DC02C7BE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.160.0/22
170.231.208.0/22
177.23.252.0/22
186.209.123.0/24
186.209.222.0/23
IPv6:
2804:4d3c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61621
267420
Signature Algorithm: sha256WithRSAEncryption
21:bb:60:ef:d8:25:16:20:00:62:da:13:ea:e3:ee:ff:c2:32:
a9:70:9f:81:c4:3d:06:d9:27:81:08:48:e3:8a:59:35:67:e9:
7a:71:d8:28:4f:53:c9:ab:05:3f:96:4f:c3:55:5f:a5:86:a5:
4a:f7:ff:b8:e2:7e:37:8a:7c:38:fb:b1:19:20:a3:ed:d3:df:
5f:6f:d9:38:b3:fc:d6:aa:31:cf:f9:35:42:61:98:78:8d:c9:
e7:8f:72:4c:3a:37:27:6f:a8:5a:90:6d:be:60:b2:98:f7:e3:
0f:4a:16:ca:d3:d2:05:60:76:b5:de:44:89:03:d3:2c:63:f3:
3f:1f:3c:9a:95:c7:0b:aa:44:a5:35:ce:32:ac:03:29:ed:19:
4e:f8:3a:3e:36:e7:b0:f6:53:1d:90:12:1b:af:6f:30:71:f4:
1e:68:a5:9e:c5:ef:e5:5d:f3:4b:fd:e5:2c:72:ce:33:88:7c:
cf:1e:d6:0e:e6:b0:05:19:b0:e9:57:a9:ee:49:60:df:eb:60:
24:2d:eb:bd:25:a3:6a:d6:b2:c1:10:b9:30:28:fe:e2:34:26:
02:0c:36:37:44:f4:98:04:92:e5:d1:b4:cb:07:f2:3e:40:90:
11:36:23:d1:ef:c4:b5:24:9f:49:60:28:b6:44:83:7f:26:30:
d4:08:b1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 10:08:33 2024 by rpki-client on console-fra.rpki-client.org