Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/42580E647D96523C34EBD7D8F6B91281804DC276.cer
File: 42580E647D96523C34EBD7D8F6B91281804DC276.cer (raw, json)
Hash identifier: XcdRAQU+nWSjX6oUazdXVmQa00xba4n8oLGHkDkVl4M=
Subject key identifier: 42:58:0E:64:7D:96:52:3C:34:EB:D7:D8:F6:B9:12:81:80:4D:C2:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 628D2E6B3291B496AC34B7AAC735AAF30C0DF458
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/42580E647D96523C34EBD7D8F6B91281804DC276.mft
caRepository: rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 15 Oct 2024 12:10:27 +0000
Certificate not after: Tue 14 Oct 2025 12:15:27 +0000
Subordinate resources: AS: 271582
IP: 45.165.180.0/22
IP: 2804:7dc8::/32
Validation: Failed, certificate revoked on Sun 20 Oct 2024 12:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8d:2e:6b:32:91:b4:96:ac:34:b7:aa:c7:35:aa:f3:0c:0d:f4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 15 12:10:27 2024 GMT
Not After : Oct 14 12:15:27 2025 GMT
Subject: CN=42580E647D96523C34EBD7D8F6B91281804DC276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:7c:0c:7d:71:fc:96:76:f4:65:65:b1:4e:
17:2e:cd:e5:68:d5:70:b4:b3:39:02:c5:c0:38:1f:
48:88:01:26:34:2b:fa:9c:e9:e4:dd:70:e7:4b:f7:
6f:16:d8:da:5f:58:f8:0a:42:f5:80:bc:6e:be:82:
dc:1e:07:d9:00:55:46:ff:da:64:06:9a:e2:84:13:
85:b2:a6:c4:35:6d:c8:14:13:09:24:31:e8:3d:99:
e9:6c:d5:24:1f:4b:3b:e7:32:18:c5:8d:41:c2:88:
58:e3:5a:67:61:c1:4c:b1:aa:65:af:fe:f3:35:98:
e8:c8:ca:d0:01:f1:d5:2e:1b:b9:a6:c2:5d:5d:40:
c6:b9:99:79:9b:25:3f:b1:8c:da:44:28:91:a5:66:
91:df:94:b6:7e:94:2c:27:ce:a2:f3:67:dd:32:31:
48:ab:dc:5d:f8:f9:47:25:3d:99:6c:c4:54:7d:45:
f1:9f:ae:3d:60:ef:86:29:23:c1:37:ea:95:9a:93:
63:5a:fe:3b:1f:45:cb:30:4d:3c:b6:da:e1:0c:f4:
66:81:a4:02:e1:2f:1f:e8:15:6b:21:31:c1:5f:40:
ab:73:6e:49:9d:40:5f:ca:c2:7d:8b:4a:2b:0e:9e:
c5:be:97:49:5c:69:33:4f:20:0f:be:c5:e8:2c:f8:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
42:58:0E:64:7D:96:52:3C:34:EB:D7:D8:F6:B9:12:81:80:4D:C2:76
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/42580E647D96523C34EBD7D8F6B91281804DC276.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.180.0/22
IPv6:
2804:7dc8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271582
Signature Algorithm: sha256WithRSAEncryption
72:f2:f6:22:88:d6:4e:8c:dd:be:f3:fe:68:2b:87:0a:6b:dc:
ce:11:a8:4d:4a:ae:8c:11:f0:6d:6e:0f:f6:f7:ff:25:34:7e:
7a:c8:76:70:cc:63:ca:c0:ca:9a:ee:3f:43:cc:66:c3:f9:96:
69:37:83:30:51:78:9a:65:47:0d:27:36:8e:61:d8:65:54:00:
ca:ec:4d:9c:f1:9e:61:e9:97:df:2c:2d:96:30:08:12:a9:68:
37:60:c6:bd:7b:7d:52:13:c9:cc:67:8f:0d:15:0e:ee:22:d3:
a7:8d:53:dd:eb:d6:0f:10:12:8f:70:b6:ca:dd:7e:ab:5f:5e:
53:62:c9:dd:f4:db:31:b4:9b:56:2c:ab:45:ce:62:e7:4e:2d:
65:ee:99:7d:e6:a9:b3:51:76:cc:b6:30:9e:4b:9e:c9:5f:86:
7d:a2:e5:45:76:02:fa:c5:5a:d9:ee:d6:1d:d2:55:84:aa:19:
97:cb:74:ef:ae:93:09:3b:b5:4d:ac:ac:e0:fd:d7:36:4d:14:
90:9a:e1:62:2e:fc:35:3d:70:8b:2c:db:fa:07:2b:99:bf:47:
85:58:df:eb:eb:c3:85:d3:f2:40:92:49:25:bb:db:35:34:0d:
6c:c8:fa:b7:56:b8:c5:e9:bb:07:c7:df:11:e0:1a:a8:6a:16:
c3:a7:de:a8
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUYo0uazKRtJasNLeqxzWq8wwN9FgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMTUxMjEwMjdaFw0yNTEwMTQxMjE1MjdaMDMxMTAvBgNV
BAMTKDQyNTgwRTY0N0Q5NjUyM0MzNEVCRDdEOEY2QjkxMjgxODA0REMyNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPj3wMfXH8lnb0ZWWxThcuzeVo
1XC0szkCxcA4H0iIASY0K/qc6eTdcOdL928W2NpfWPgKQvWAvG6+gtweB9kAVUb/
2mQGmuKEE4WypsQ1bcgUEwkkMeg9mels1SQfSzvnMhjFjUHCiFjjWmdhwUyxqmWv
/vM1mOjIytAB8dUuG7mmwl1dQMa5mXmbJT+xjNpEKJGlZpHflLZ+lCwnzqLzZ90y
MUir3F34+UclPZlsxFR9RfGfrj1g74YpI8E36pWak2Na/jsfRcswTTy22uEM9GaB
pALhLx/oFWshMcFfQKtzbkmdQF/Kwn2LSisOnsW+l0lcaTNPIA++xegs+ElhAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCWA5kfZZSPDTr
19j2uRKBgE3CdjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVzhi
NzhGWHZrUVdBdWgxNWdpaHByOVhScm0zSkFFN2JqSE1pWkwxRFl3QS8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVzhi
NzhGWHZrUVdBdWgxNWdpaHByOVhScm0zSkFFN2JqSE1pWkwxRFl3QS8wLzQyNTgw
RTY0N0Q5NjUyM0MzNEVCRDdEOEY2QjkxMjgxODA0REMyNzYubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi2ltDANBAIAAjAHAwUAKAR9yDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEJN4wDQYJKoZIhvcNAQELBQADggEBAHLy9iKI1k6M3b7z/mgr
hwpr3M4RqE1KrowR8G1uD/b3/yU0fnrIdnDMY8rAypruP0PMZsP5lmk3gzBReJpl
Rw0nNo5h2GVUAMrsTZzxnmHpl98sLZYwCBKpaDdgxr17fVITycxnjw0VDu4i06eN
U93r1g8QEo9wtsrdfqtfXlNiyd302zG0m1Ysq0XOYudOLWXumX3mqbNRdsy2MJ5L
nslfhn2i5UV2AvrFWtnu1h3SVYSqGZfLdO+ukwk7tU2srOD91zZNFJCa4WIu/DU9
cIss2/oHK5m/R4VY3+vrw4XT8kCSSSW72zU0DWzI+rdWuMXpuwfH3xHgGqhqFsOn
3qg=
-----END CERTIFICATE-----
Generated at Sun Oct 20 14:49:46 2024 by rpki-client on console-fra.rpki-client.org