Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.cer
File: 3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.cer (raw, json)
Hash identifier: fis7ap5ZoaDB/MYbIL5pbkcNqSA4xZI3W+b5haMVx8A=
Subject key identifier: 3E:CD:C4:CE:C2:FF:EA:F1:DD:22:BE:FA:32:E6:5C:4B:5C:12:8B:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 41CCCEA6D1476347FC08ECBBF51444598D3B598F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.mft
caRepository: rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 03:24:32 +0000
Certificate not after: Thu 03 Apr 2025 03:29:32 +0000
Subordinate resources: AS: 265093
IP: 170.233.104.0/22
IP: 2804:32b0::/32
Validation: Failed, certificate revoked on Sat 25 May 2024 03:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:cc:ce:a6:d1:47:63:47:fc:08:ec:bb:f5:14:44:59:8d:3b:59:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 03:24:32 2024 GMT
Not After : Apr 3 03:29:32 2025 GMT
Subject: CN=3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:cc:02:92:5d:fb:4d:02:98:d4:9e:e3:42:
dd:a4:5b:bc:82:65:71:b7:fd:07:e1:9e:03:5a:9e:
cc:26:ed:63:90:ec:2b:58:be:7b:b8:86:97:ff:34:
a7:56:c5:3a:97:e3:0b:0e:37:31:c9:7c:ac:fc:b6:
af:84:a1:10:59:d3:1e:18:e7:cb:c8:3a:93:b9:b6:
d2:52:4e:32:b7:d5:db:75:be:30:ac:07:15:04:3c:
73:ef:00:f8:eb:39:c3:17:5c:d4:ad:d7:d9:c7:d3:
83:a6:2c:a1:65:c2:5e:bb:8e:a7:84:e4:04:eb:9c:
b4:e8:94:f4:d2:f8:ac:7d:86:04:69:9b:87:7e:94:
73:13:cd:f6:c1:86:56:6b:ad:40:de:85:07:97:95:
c0:91:56:39:2a:d8:07:1c:5c:c9:50:f2:68:61:0c:
78:29:9a:8c:d7:55:ed:e7:13:09:02:9a:73:d5:7e:
14:bf:2a:34:be:74:c2:2a:87:4a:df:0c:92:93:72:
4c:25:2a:87:6d:96:b2:fe:b1:c0:f2:6b:fe:d2:a8:
e6:35:e8:50:d4:42:59:96:44:1b:3f:b3:b3:11:4a:
02:e3:12:7e:45:c4:ce:93:a9:f9:e3:03:d7:b9:1d:
e8:7c:87:1c:db:0f:a2:dd:dc:14:1b:81:47:f2:b0:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3E:CD:C4:CE:C2:FF:EA:F1:DD:22:BE:FA:32:E6:5C:4B:5C:12:8B:50
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.104.0/22
IPv6:
2804:32b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265093
Signature Algorithm: sha256WithRSAEncryption
68:be:2b:6d:38:56:9c:e9:c7:cd:95:42:e3:c9:78:a3:ce:4e:
2d:00:1a:84:bf:1b:ef:a2:ea:f7:1c:eb:2d:0a:ad:ae:2e:44:
42:d9:c4:6e:12:86:4b:ac:d0:ae:36:69:97:79:ab:eb:97:3c:
bf:ac:e8:6e:df:7f:5f:65:34:e7:e8:9f:2c:ec:23:4f:53:d7:
83:63:40:6c:9a:04:cf:3b:ed:8e:61:fc:20:05:ba:9b:a8:5e:
67:f4:83:88:f7:17:c1:1f:74:b1:23:1b:1a:de:64:95:5b:b9:
c4:cb:6f:eb:28:62:1a:9f:c5:56:43:a9:c0:de:26:eb:42:c6:
1e:48:b8:07:a3:66:96:78:60:6f:ba:e6:7f:c0:7c:0b:2d:b7:
cc:c9:26:8d:79:79:65:a7:38:67:c1:67:50:f3:5f:5e:e8:61:
4c:a7:46:f6:44:0b:76:76:6d:d3:70:bf:89:b5:c8:7f:c7:08:
bc:7b:79:f6:6a:50:fa:8e:f6:16:ea:d3:d1:54:78:35:ca:d7:
87:aa:70:5a:59:4c:22:72:24:cb:16:7b:38:5d:48:25:7f:11:
28:15:33:46:41:cb:e7:63:81:93:88:df:ed:d2:14:2a:24:c3:
63:91:7e:dc:b7:53:d9:14:4c:26:2d:f7:34:be:50:30:af:5d:
b2:17:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 05:08:51 2024 by rpki-client on console-ams.rpki-client.org