Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.cer
File: 3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.cer (raw, json)
Hash identifier: SNJmfCFRrZ3wGkd/9Zlom3z6mnFf2xVzdwvtvJs/HHE=
Subject key identifier: 3D:DB:32:FD:8D:43:D6:6A:02:BF:AD:FC:FB:7E:1A:9F:F3:91:26:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2F82BEA60485E664BE9732851F743DECCF65FCFD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.mft
caRepository: rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 08 Nov 2024 00:52:00 +0000
Certificate not after: Fri 07 Nov 2025 00:57:00 +0000
Subordinate resources: AS: 268973
IP: 45.176.252.0/22
IP: 2804:5d74::/32
Validation: Failed, certificate revoked on Fri 08 Nov 2024 18:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:82:be:a6:04:85:e6:64:be:97:32:85:1f:74:3d:ec:cf:65:fc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 8 00:52:00 2024 GMT
Not After : Nov 7 00:57:00 2025 GMT
Subject: CN=3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:44:36:5e:dd:68:a1:6a:11:5e:8b:86:27:
be:36:0a:23:e4:74:79:3e:16:ae:04:00:9f:26:ca:
7e:97:51:3d:b6:04:21:37:df:d1:7e:ad:0d:f9:5b:
ef:1e:b6:6b:f9:37:b4:f6:fa:a8:43:ec:d5:a3:83:
ef:85:28:6b:97:7f:e0:b6:25:1d:02:e2:42:f6:32:
c1:1f:7f:42:1a:1f:a2:d3:e7:f4:a0:77:b7:0a:59:
e5:18:d7:6f:91:e2:c4:67:1a:b7:38:65:f8:40:15:
39:41:3d:43:88:da:e7:01:06:ed:3e:93:ef:a4:0a:
9a:9e:f4:10:04:1a:6f:8d:59:fa:59:6b:e6:c5:b3:
77:fc:c1:62:84:bc:99:75:ba:c0:7e:cb:c6:e6:99:
99:3c:a3:7c:d3:a4:f0:48:95:33:ec:21:ca:b0:c2:
13:fe:ae:3e:6f:b9:d4:bc:4a:b9:5e:df:bd:f4:28:
9e:91:e3:ae:9f:b5:5a:aa:1b:eb:66:3d:7c:3c:cc:
b0:c7:15:a1:68:b6:7f:cf:e7:76:e2:a3:a3:dc:d0:
9c:40:cb:dd:2d:9f:ca:21:4b:8d:e2:a5:d9:be:11:
87:5f:ba:6f:e0:24:f0:e1:5e:c8:71:2c:12:1b:f9:
e1:02:cd:07:98:45:a4:99:f7:52:ae:16:33:3d:0c:
60:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3D:DB:32:FD:8D:43:D6:6A:02:BF:AD:FC:FB:7E:1A:9F:F3:91:26:DC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.252.0/22
IPv6:
2804:5d74::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268973
Signature Algorithm: sha256WithRSAEncryption
16:e8:47:9b:51:1d:d1:dc:56:58:9d:32:96:f3:5b:be:30:68:
ac:ee:2e:fd:97:3f:7b:e6:92:99:54:de:3d:b7:90:0d:41:f2:
f6:f6:dd:28:93:30:b2:15:af:ec:32:91:5a:cd:f6:0e:92:1c:
74:41:ed:aa:6d:2a:53:02:c4:a8:e6:41:7b:3e:b3:7d:ed:5b:
c9:d8:43:6e:5c:0e:af:ea:83:0a:cf:f4:91:56:9b:34:7e:4b:
92:99:47:40:ee:fa:0a:00:0c:d2:87:43:89:c5:fb:06:2d:95:
cc:0f:95:16:de:3b:aa:99:c8:38:38:28:17:88:6d:c5:26:1e:
f2:3c:11:56:fa:fb:94:e6:13:30:11:83:56:13:b2:7f:be:fc:
e4:fd:1a:9c:44:e7:88:49:a7:15:e5:64:52:0d:69:5d:8c:10:
17:ac:a3:1f:48:8c:60:b2:b9:be:4a:cc:2f:03:c3:59:17:91:
2f:cf:16:07:99:d5:5b:f4:8f:67:4e:c7:b4:ad:e4:6e:34:47:
1a:3a:f8:bd:f7:57:15:34:92:22:5d:d4:56:4f:2d:25:02:ed:
3f:b1:14:3a:62:b3:62:c6:94:56:40:f8:53:28:a5:f6:ef:45:
b2:af:08:7f:2b:cc:28:81:10:5d:4f:84:23:a1:49:10:89:8d:
4c:e4:6b:cd
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUL4K+pgSF5mS+lzKFH3Q97M9l/P0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDgwMDUyMDBaFw0yNTExMDcwMDU3MDBaMDMxMTAvBgNV
BAMTKDNEREIzMkZEOEQ0M0Q2NkEwMkJGQURGQ0ZCN0UxQTlGRjM5MTI2REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgO0Q2Xt1ooWoRXouGJ742CiPk
dHk+Fq4EAJ8myn6XUT22BCE339F+rQ35W+8etmv5N7T2+qhD7NWjg++FKGuXf+C2
JR0C4kL2MsEff0IaH6LT5/Sgd7cKWeUY12+R4sRnGrc4ZfhAFTlBPUOI2ucBBu0+
k++kCpqe9BAEGm+NWfpZa+bFs3f8wWKEvJl1usB+y8bmmZk8o3zTpPBIlTPsIcqw
whP+rj5vudS8Srle3730KJ6R466ftVqqG+tmPXw8zLDHFaFotn/P53bio6Pc0JxA
y90tn8ohS43ipdm+EYdfum/gJPDhXshxLBIb+eECzQeYRaSZ91KuFjM9DGAtAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ92zL9jUPWagK/
rfz7fhqf85Em3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkFZ
UzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6azcvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkFZ
UzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6azcvMS8zRERC
MzJGRDhENDNENjZBMDJCRkFERkNGQjdFMUE5RkYzOTEyNkRDLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAItsPwwDQQCAAIwBwMFACgEXXQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBqtMA0GCSqGSIb3DQEBCwUAA4IBAQAW6EebUR3R3FZYnTKW
81u+MGis7i79lz975pKZVN49t5ANQfL29t0okzCyFa/sMpFazfYOkhx0Qe2qbSpT
AsSo5kF7PrN97VvJ2ENuXA6v6oMKz/SRVps0fkuSmUdA7voKAAzSh0OJxfsGLZXM
D5UW3juqmcg4OCgXiG3FJh7yPBFW+vuU5hMwEYNWE7J/vvzk/RqcROeISacV5WRS
DWldjBAXrKMfSIxgsrm+SswvA8NZF5EvzxYHmdVb9I9nTse0reRuNEcaOvi991cV
NJIiXdRWTy0lAu0/sRQ6YrNixpRWQPhTKKX270Wyrwh/K8wogRBdT4QjoUkQiY1M
5GvN
-----END CERTIFICATE-----
Generated at Fri Nov 8 21:15:25 2024 by rpki-client on console-ams.rpki-client.org