Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
File: 457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer (raw, json)
Hash identifier: AWhFaB6pmR3Kvz0CGuBCiBTODrEqi1Cns63YpvbXrwc=
Subject key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6DACE5996AC3E325D5EB212B0ECA4540EDCFE127
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.mft
caRepository: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 23 Jul 2024 11:46:10 +0000
Certificate not after: Tue 22 Jul 2025 11:51:10 +0000
Subordinate resources: AS: 28667
IP: 132.255.64.0/22
IP: 143.202.68.0/22
IP: 168.196.108.0/22
IP: 170.82.56.0/22
IP: 177.8.208.0/21
IP: 177.21.192.0/20
IP: 177.71.0.0/20
IP: 177.107.0.0/20
IP: 177.184.240.0/21
IP: 186.193.192.0/20
IP: 186.236.96.0/19
IP: 186.250.208.0/21
IP: 187.19.80.0/20
IP: 187.110.240.0/20
IP: 187.121.192.0/19
IP: 189.1.176.0/20
IP: 189.76.128.0/20
IP: 191.242.128.0/19
IP: 2804:4::/32
Validation: Failed, certificate revoked on Thu 31 Oct 2024 13:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ac:e5:99:6a:c3:e3:25:d5:eb:21:2b:0e:ca:45:40:ed:cf:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 23 11:46:10 2024 GMT
Not After : Jul 22 11:51:10 2025 GMT
Subject: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:6f:8d:82:6e:a8:8c:b8:c4:ac:3c:92:87:
e1:b0:1c:f7:d0:b4:17:32:2d:0b:45:df:f4:52:dd:
16:b7:83:4a:d3:0d:9e:2d:4a:ce:68:02:4b:b7:b1:
f0:66:5d:dd:a5:41:a4:5e:55:37:6e:7a:19:d4:f7:
17:70:f4:c6:4d:9d:ff:fb:29:8d:76:aa:af:9f:4c:
e4:80:4b:4c:d5:38:88:85:5b:a2:1e:f2:ae:97:0a:
a2:cc:4d:c6:63:4f:1c:d9:0f:0b:88:7a:41:9f:f3:
5c:54:cd:d0:46:ac:07:db:af:eb:aa:34:74:03:83:
8c:08:b5:e0:96:7e:06:bf:3a:6a:39:db:5f:25:f9:
b8:0f:3e:03:29:95:4d:64:00:ce:b0:e0:b9:c2:d7:
6d:0a:85:df:5f:29:0a:e8:6b:4a:4b:bd:e0:cd:32:
ae:65:59:26:f6:ee:5a:e5:57:8a:2e:9e:40:ca:ec:
24:6c:25:52:d4:5e:11:d1:e1:24:f2:8b:82:07:9e:
9c:af:c2:c7:88:80:24:b2:21:3a:cc:ea:94:0e:4d:
9c:e7:21:f6:df:11:00:4f:8a:cd:95:a8:95:ff:73:
3e:23:87:f5:b6:47:93:5e:ef:cf:d0:83:9c:19:82:
30:78:78:b0:c5:6d:30:5a:69:d0:6f:49:df:98:79:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.64.0/22
143.202.68.0/22
168.196.108.0/22
170.82.56.0/22
177.8.208.0/21
177.21.192.0/20
177.71.0.0/20
177.107.0.0/20
177.184.240.0/21
186.193.192.0/20
186.236.96.0/19
186.250.208.0/21
187.19.80.0/20
187.110.240.0/20
187.121.192.0/19
189.1.176.0/20
189.76.128.0/20
191.242.128.0/19
IPv6:
2804:4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28667
Signature Algorithm: sha256WithRSAEncryption
5d:7e:16:83:14:b2:73:cd:d9:ee:0e:01:2d:66:63:e0:fc:d9:
f1:fe:c8:99:c6:9c:42:38:75:4f:28:ad:34:65:04:48:2d:4f:
71:02:e9:a6:0a:dd:97:3d:81:d2:82:48:82:9d:db:3e:50:91:
2b:fe:14:1f:0b:00:9b:b6:9a:0d:f1:04:1d:1d:9d:12:2f:e4:
a8:12:50:5f:51:ae:95:ce:fb:44:c2:91:86:d1:62:f1:b7:7b:
8f:5e:91:ef:89:33:48:62:65:af:00:09:04:83:9b:a4:4b:e8:
ec:29:e3:c8:fe:0d:ec:36:93:de:d0:1d:c9:f4:54:ec:26:6c:
f2:b9:a8:3f:bf:e4:70:c1:df:b7:03:b3:1a:22:6e:a2:26:1a:
e6:b9:6e:25:90:1b:ff:fe:7c:06:4f:b8:01:0d:99:8b:81:0d:
69:ec:c2:ac:b8:aa:99:04:76:63:9b:f8:c0:a7:33:7b:b9:23:
b1:db:09:1d:50:fb:f2:16:16:ce:41:ec:7d:60:63:97:36:05:
48:5c:2a:36:a6:e6:a4:1f:02:e6:76:d7:32:4e:6c:e2:44:31:
57:56:c6:fb:3a:f8:51:9b:32:c7:66:e7:65:a8:43:e1:d5:28:
e1:20:fe:3d:c5:51:ed:eb:57:d9:a6:ba:df:0b:7e:32:96:3f:
98:ef:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:33 2024 by rpki-client on console-ams.rpki-client.org