Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
File: 43DB836C2077B43ED881A065A4DC216114503CEE.cer (raw, json)
Hash identifier: sFIuxhsKECLMQ2UW7gzDcnMB3oUavC0Odb3wpgfVirc=
Subject key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 48A2FC9C7A129061AEEE9595DDD231F8B7322152
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.mft
caRepository: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 06 Apr 2024 02:16:55 +0000
Certificate not after: Sat 05 Apr 2025 02:21:55 +0000
Subordinate resources: AS: 28360
IP: 138.94.8.0/22
IP: 177.8.0.0/19
IP: 179.124.224.0/20
IP: 189.76.208.0 -- 189.76.239.255
IP: 2804:14::/32
Validation: Failed, certificate revoked on Fri 09 Aug 2024 08:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a2:fc:9c:7a:12:90:61:ae:ee:95:95:dd:d2:31:f8:b7:32:21:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 6 02:16:55 2024 GMT
Not After : Apr 5 02:21:55 2025 GMT
Subject: CN=43DB836C2077B43ED881A065A4DC216114503CEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:24:2f:ba:4c:25:63:71:58:75:fc:4a:bb:
4f:bc:b0:66:3c:60:24:c9:98:eb:d0:d7:2e:3f:ed:
46:0b:c1:9a:d6:94:fd:07:ff:1e:92:27:59:d2:53:
b9:d3:90:c2:1d:fd:2a:2c:cd:fe:d4:95:57:82:d5:
b9:f9:e6:c1:60:05:82:dc:36:7a:73:7b:9f:d5:e5:
86:0c:96:37:62:74:7a:0c:99:1d:22:3b:4e:88:ea:
b2:43:e6:1d:8a:53:bd:fd:83:23:b8:9f:47:1b:b4:
43:18:60:7e:35:e5:41:89:06:c8:b0:b8:03:d4:f8:
03:d0:c4:8f:0b:3e:e6:a7:2a:61:2c:cc:1e:11:70:
e5:1c:c3:fa:bb:f1:74:d9:59:f6:e1:3f:78:48:08:
26:8e:dc:d5:ab:21:53:96:e6:be:3d:60:50:02:61:
5b:db:e4:d5:25:6d:54:2d:bf:00:66:10:73:ac:b8:
cf:0d:bb:99:27:88:16:4f:8f:33:88:42:6e:56:d3:
0b:87:82:e2:a6:56:43:8e:55:04:ae:4c:ae:95:ff:
6a:9c:fa:06:25:08:f1:da:d4:f1:c2:87:cf:b1:5f:
60:0c:6e:0f:a7:b2:57:ba:8e:ce:ea:d9:45:95:18:
78:12:f4:b3:a1:b5:71:d8:0a:f0:b8:61:59:3e:4c:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.8.0/22
177.8.0.0/19
179.124.224.0/20
189.76.208.0-189.76.239.255
IPv6:
2804:14::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28360
Signature Algorithm: sha256WithRSAEncryption
4a:44:4d:47:56:ee:44:9c:5d:90:a0:6e:47:8a:50:53:aa:e2:
84:2f:89:be:d0:9e:eb:eb:73:eb:d2:93:78:63:f6:fa:c3:4a:
cc:f0:d5:65:cb:89:73:0f:c6:93:7f:76:8a:38:f6:bd:b0:f6:
27:80:43:32:1b:60:b0:7c:ba:13:44:59:86:b5:d2:49:28:0b:
c0:e5:1f:f9:f8:eb:5d:11:c0:c7:ae:70:b3:24:63:65:b5:f8:
4c:f6:22:48:23:52:d0:cb:1e:90:60:f2:98:78:de:11:ee:a5:
11:83:d5:29:fe:cc:64:3f:75:cd:1a:dd:12:e6:48:14:a9:18:
7b:ab:1c:4e:19:33:51:3d:1f:93:57:aa:3f:62:c4:b9:c8:94:
8f:5a:d2:c1:8d:1e:ca:ba:0a:0f:98:89:d4:6b:c6:0d:f9:09:
4f:59:3c:38:81:c6:7c:d7:7c:f9:fd:c9:16:20:91:b3:7e:d4:
4c:89:d6:cc:45:0d:f8:37:ea:f4:a3:43:85:40:c5:8d:d2:0d:
f6:44:97:bb:86:97:92:5a:5b:4c:fb:4b:05:23:d8:d8:3e:ca:
90:27:b5:7a:9e:19:67:6e:04:6a:75:e9:74:52:d7:ca:16:ef:
82:b9:42:b4:72:f9:b0:88:a8:9c:03:3d:05:2a:62:4c:0e:c2:
f4:30:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 10:08:29 2024 by rpki-client on console-fra.rpki-client.org