Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4874C52FCEFEA5B543D0BC6B3FA65891A78DECE4.cer
File: 4874C52FCEFEA5B543D0BC6B3FA65891A78DECE4.cer (raw, json)
Hash identifier: EN1dFHR9w2lNsVAw9EZBQH7ObLh/ezmHJOSeGCeO0/o=
Subject key identifier: 48:74:C5:2F:CE:FE:A5:B5:43:D0:BC:6B:3F:A6:58:91:A7:8D:EC:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 79C292EF02985B0C2CEAF5EEE0A43A97BBBFC4C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/1/4874C52FCEFEA5B543D0BC6B3FA65891A78DECE4.mft
caRepository: rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:25:46 +0000
Certificate not after: Wed 02 Apr 2025 18:30:46 +0000
Subordinate resources: AS: 262587
IP: 143.255.184.0/22
IP: 177.84.144.0/21
IP: 2804:2b60::/32
Validation: Failed, certificate revoked on Tue 28 May 2024 12:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c2:92:ef:02:98:5b:0c:2c:ea:f5:ee:e0:a4:3a:97:bb:bf:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:25:46 2024 GMT
Not After : Apr 2 18:30:46 2025 GMT
Subject: CN=4874C52FCEFEA5B543D0BC6B3FA65891A78DECE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:c8:f5:ef:4d:4a:de:ea:a9:6e:a8:16:36:
b1:6d:7b:cb:a7:89:ce:cc:bf:fa:9c:24:ab:d7:a4:
0a:fa:0a:79:b9:01:f4:e2:5e:0f:cf:68:0d:c9:c9:
0e:79:cb:9a:04:21:95:90:22:7b:a7:12:eb:96:c3:
83:ac:e7:35:a4:a5:d3:56:f8:93:24:73:b6:ef:31:
55:f2:af:23:a6:d7:7b:07:df:3c:6e:c1:62:5f:d0:
34:83:19:6a:47:0a:ef:47:f0:7e:74:fb:aa:89:3f:
81:67:06:92:94:9a:08:57:24:78:c2:e7:44:1d:08:
52:39:97:a4:8b:5f:3e:e2:2f:1a:11:5d:a8:b8:37:
18:e4:ad:8e:56:d8:ae:8e:65:12:f5:34:67:09:2b:
8e:03:9e:b3:04:8e:37:83:77:44:6f:a4:3d:4e:3d:
e8:4d:58:72:19:97:19:d5:aa:67:5d:6e:c3:be:6f:
9f:ed:62:b9:aa:b0:98:69:4e:42:f8:ff:3c:d7:02:
3e:cf:13:fa:16:72:e8:39:57:f4:d5:1b:a6:13:8b:
f2:a4:42:29:2e:ed:17:6f:c4:9a:c9:df:b1:78:48:
98:3a:3f:01:e6:38:bb:65:b1:d9:45:0b:5b:75:e4:
ca:0f:82:1f:47:a2:3e:94:fe:91:e3:5e:c0:3d:77:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
48:74:C5:2F:CE:FE:A5:B5:43:D0:BC:6B:3F:A6:58:91:A7:8D:EC:E4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/1/4874C52FCEFEA5B543D0BC6B3FA65891A78DECE4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.184.0/22
177.84.144.0/21
IPv6:
2804:2b60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262587
Signature Algorithm: sha256WithRSAEncryption
cd:ee:29:b4:8b:c5:11:36:d3:94:50:05:ec:e9:db:ac:e8:85:
fd:3c:dd:5a:c4:72:eb:3a:62:88:e2:da:52:a6:91:9b:ca:eb:
33:c1:9b:27:91:e1:83:4b:b4:6a:85:89:c8:ad:9a:88:3f:20:
b6:31:50:a1:0f:ec:51:f9:6b:d2:bc:13:c8:55:a5:3f:56:81:
a3:c3:dc:6b:ac:04:47:5b:f7:b9:6d:6c:5d:e3:82:e8:14:c4:
d8:6f:a8:24:63:dc:61:e4:76:ad:b2:44:dd:a0:47:ae:56:17:
b3:de:ad:b2:f6:f1:3a:43:e1:8a:07:65:b1:d2:2c:8b:d7:a7:
54:f1:32:3e:ab:00:a7:36:23:41:fe:9d:b5:02:8d:6e:05:43:
5c:b6:05:8e:23:8b:c7:16:7b:6f:13:46:58:87:6d:5f:b6:ac:
ee:e2:7b:ef:4d:d5:53:69:6c:1c:69:c1:75:b8:7f:e9:35:2e:
1a:a9:d6:a7:d6:71:07:3b:23:88:f2:5d:19:00:95:bc:6f:93:
80:9c:67:84:e1:39:8a:63:8d:d0:b0:5e:ae:6d:fd:78:bf:b2:
b9:ff:56:5a:d6:b1:0f:c1:e2:c9:e0:51:ec:c5:66:66:3c:71:
fc:d1:84:82:84:a3:77:1d:6c:1b:15:52:16:a3:93:7e:3b:95:
96:59:b5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org