Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/425987BC2CF98B9BFA28B017233D5C66D7993B94.cer
File: 425987BC2CF98B9BFA28B017233D5C66D7993B94.cer (raw, json)
Hash identifier: YFDorUDWAZD2vXa+beEkk+OTA64sSTwXIjkU0+aHUI4=
Subject key identifier: 42:59:87:BC:2C:F9:8B:9B:FA:28:B0:17:23:3D:5C:66:D7:99:3B:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 119DDB32C76F988CACB010D29A24B404F137614F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/425987BC2CF98B9BFA28B017233D5C66D7993B94.mft
caRepository: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 26 Jun 2024 19:31:22 +0000
Certificate not after: Wed 25 Jun 2025 19:36:22 +0000
Subordinate resources: AS: 28296
IP: 187.121.224.0/20
IP: 189.36.208.0/20
IP: 2001:1298::/32
Validation: Failed, certificate revoked on Fri 13 Sep 2024 03:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9d:db:32:c7:6f:98:8c:ac:b0:10:d2:9a:24:b4:04:f1:37:61:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 26 19:31:22 2024 GMT
Not After : Jun 25 19:36:22 2025 GMT
Subject: CN=425987BC2CF98B9BFA28B017233D5C66D7993B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:0f:80:76:2f:05:27:94:d5:6e:ab:1f:3c:
9b:17:5d:27:68:09:e1:4d:8f:b0:69:2e:db:b7:45:
a9:a8:87:42:bd:90:31:30:97:6f:0e:cb:2e:bf:a1:
a9:1d:14:21:61:98:80:ee:cb:22:73:df:7b:b0:d1:
31:3f:f0:e5:d7:45:a5:8c:ef:26:6a:22:9a:38:17:
6c:b6:24:d0:27:e2:a6:80:09:d5:1b:6a:a4:36:ee:
f8:21:50:37:d1:3b:75:f2:93:ff:be:ec:21:ad:eb:
0e:5f:64:cb:26:40:d7:09:58:b7:c5:29:d8:87:1d:
a2:83:18:41:9e:79:77:3d:11:f6:e5:00:56:0a:26:
cc:c5:42:48:b2:9c:05:da:17:00:2d:bb:74:e6:64:
07:cf:8f:99:4c:a2:22:ca:38:a9:fd:41:c8:80:12:
b6:69:a8:9a:b2:08:e4:df:f4:46:04:da:db:f4:9b:
27:1c:6b:ee:d7:ac:2b:c6:d1:3d:a5:35:0e:a5:bb:
87:31:a4:34:02:08:07:81:4e:28:1f:f1:48:79:fb:
5a:32:0d:e4:82:55:2b:8b:0a:da:44:6d:f3:48:3a:
28:c2:fa:89:ea:46:04:c5:ba:50:9f:fc:01:f5:4b:
bb:80:84:79:50:21:a9:25:c4:70:82:86:b5:dd:ff:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
42:59:87:BC:2C:F9:8B:9B:FA:28:B0:17:23:3D:5C:66:D7:99:3B:94
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/425987BC2CF98B9BFA28B017233D5C66D7993B94.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.121.224.0/20
189.36.208.0/20
IPv6:
2001:1298::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28296
Signature Algorithm: sha256WithRSAEncryption
01:06:de:65:85:75:ea:47:03:af:3b:61:61:74:b1:4a:94:16:
44:86:45:85:41:63:04:4f:ce:8a:d1:82:da:a9:2c:c0:95:97:
e9:66:30:8b:e6:c3:72:a5:03:d3:ea:47:c3:fc:de:4a:76:27:
28:9d:40:61:43:e8:e8:31:bf:ee:69:bf:a9:21:c8:13:95:34:
df:99:2b:7b:e0:4b:9b:8a:1c:86:5a:d9:f0:60:64:35:2e:2d:
e7:f2:47:80:f4:5c:a0:a8:41:f7:f4:a9:7a:c0:31:c1:fe:ce:
9d:aa:28:6e:3c:d1:d2:87:cb:31:a4:4d:8b:cb:0d:47:fa:bb:
c9:9e:2a:7a:c0:22:11:35:06:ac:59:95:7b:71:df:82:b5:41:
aa:f1:17:bc:f6:c1:75:39:0e:88:50:76:e8:58:e2:5f:c4:30:
bd:76:1a:1a:85:cb:80:12:10:5d:1e:e0:77:f3:fb:f5:d9:4a:
54:1c:00:c9:e0:24:3e:ba:c5:f8:c8:d1:36:51:c2:9f:06:42:
33:6b:39:0c:b6:d5:79:c0:dc:4c:58:d0:f7:fc:6a:c7:58:9f:
98:7e:6f:06:b7:77:6c:67:ff:e5:c4:f4:7f:cc:33:09:9b:47:
ba:17:af:ca:62:1b:68:93:88:cb:30:e9:f8:9f:28:8b:5b:ae:
14:35:e0:20
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUEZ3bMsdvmIyssBDSmiS0BPE3YU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MjYxOTMxMjJaFw0yNTA2MjUxOTM2MjJaMDMxMTAvBgNV
BAMTKDQyNTk4N0JDMkNGOThCOUJGQTI4QjAxNzIzM0Q1QzY2RDc5OTNCOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35Q+Adi8FJ5TVbqsfPJsXXSdo
CeFNj7BpLtu3Ramoh0K9kDEwl28Oyy6/oakdFCFhmIDuyyJz33uw0TE/8OXXRaWM
7yZqIpo4F2y2JNAn4qaACdUbaqQ27vghUDfRO3Xyk/++7CGt6w5fZMsmQNcJWLfF
KdiHHaKDGEGeeXc9EfblAFYKJszFQkiynAXaFwAtu3TmZAfPj5lMoiLKOKn9QciA
ErZpqJqyCOTf9EYE2tv0mycca+7XrCvG0T2lNQ6lu4cxpDQCCAeBTigf8Uh5+1oy
DeSCVSuLCtpEbfNIOijC+onqRgTFulCf/AH1S7uAhHlQIaklxHCChrXd//+RAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCWYe8LPmLm/oo
sBcjPVxm15k7lDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkxh
S0ZwVWQ2Zm50NFBuNEFlZFpUUzg2U0pXcVZjSzFCenNUaEMyZFloR2UvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JM
YUtGcFVkNmZudDRQbjRBZWRaVFM4NlNKV3FWY0sxQnpzVGhDMmRZaEdlLzAvNDI1
OTg3QkMyQ0Y5OEI5QkZBMjhCMDE3MjMzRDVDNjZENzk5M0I5NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQEu3ngAwQEvSTQMA0EAgACMAcDBQAgARKYMBkGCCsG
AQUFBwEIAQH/BAowCKAGMAQCAm6IMA0GCSqGSIb3DQEBCwUAA4IBAQABBt5lhXXq
RwOvO2FhdLFKlBZEhkWFQWMET86K0YLaqSzAlZfpZjCL5sNypQPT6kfD/N5Kdico
nUBhQ+joMb/uab+pIcgTlTTfmSt74EubihyGWtnwYGQ1Li3n8keA9FygqEH39Kl6
wDHB/s6dqihuPNHSh8sxpE2Lyw1H+rvJnip6wCIRNQasWZV7cd+CtUGq8Re89sF1
OQ6IUHboWOJfxDC9dhoahcuAEhBdHuB38/v12UpUHADJ4CQ+usX4yNE2UcKfBkIz
azkMttV5wNxMWND3/GrHWJ+Yfm8Gt3dsZ//lxPR/zDMJm0e6F6/KYhtok4jLMOn4
nyiLW64UNeAg
-----END CERTIFICATE-----
Generated at Fri Sep 13 05:17:41 2024 by rpki-client on console-fra.rpki-client.org