Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4F28333389ABBFD36DCF1B86A43B7B6623B1E1E0.cer
File: 4F28333389ABBFD36DCF1B86A43B7B6623B1E1E0.cer (raw, json)
Hash identifier: MFDAkfvcOmC9yZG9bF1ixXcHutH1dAI7FE2Ig7Ym/XE=
Subject key identifier: 4F:28:33:33:89:AB:BF:D3:6D:CF:1B:86:A4:3B:7B:66:23:B1:E1:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 49C2A688A2D9A0363EE991B6EA8591DD35040B37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/4F28333389ABBFD36DCF1B86A43B7B6623B1E1E0.mft
caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 14 Oct 2024 01:33:46 +0000
Certificate not after: Mon 13 Oct 2025 01:38:46 +0000
Subordinate resources: AS: 28220
IP: 45.4.64.0/22
IP: 138.0.100.0/22
IP: 168.227.108.0/22
IP: 168.228.68.0/22
IP: 170.82.92.0/22
IP: 177.89.0.0/16
IP: 177.137.192.0/20
IP: 179.96.192.0/21
IP: 179.96.240.0/20
IP: 179.190.128.0/17
IP: 186.192.16.0/20
IP: 186.193.96.0/20
IP: 186.208.208.0/21
IP: 186.235.0.0/20
IP: 186.236.192.0/19
IP: 186.251.112.0/21
IP: 187.49.192.0/20
IP: 187.60.64.0/19
IP: 187.61.128.0/17
IP: 187.86.96.0/20
IP: 187.87.112.0/20
IP: 187.108.64.0/20
IP: 187.109.176.0/20
IP: 187.111.224.0/19
IP: 189.45.16.0/20
IP: 189.124.128.0/17
IP: 191.241.40.0/21
IP: 200.233.80.0/20
IP: 201.148.188.0/22
IP: 2804:54::/32
IP: 2804:2140::/32
Validation: Failed, certificate revoked on Thu 07 Nov 2024 20:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c2:a6:88:a2:d9:a0:36:3e:e9:91:b6:ea:85:91:dd:35:04:0b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 14 01:33:46 2024 GMT
Not After : Oct 13 01:38:46 2025 GMT
Subject: CN=4F28333389ABBFD36DCF1B86A43B7B6623B1E1E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:e8:ce:6b:ee:93:e2:b9:ed:8c:e6:31:1e:
6d:48:bb:80:16:13:8d:9e:49:0e:15:cc:20:b2:3b:
94:73:2e:10:28:6f:93:1d:2a:d8:9a:61:bb:d8:0a:
29:ae:ca:5d:18:3c:22:23:16:61:ac:c8:71:eb:c7:
6b:0d:a7:ec:cb:5b:24:3b:60:57:0b:7d:b0:6a:36:
85:29:fd:b3:1f:ee:2d:87:23:70:04:41:cd:b1:06:
1c:b0:ca:d3:14:f0:ce:ac:fc:87:27:c9:c5:51:34:
52:0b:62:a7:10:61:d6:81:f1:4e:e1:df:85:29:29:
9e:05:95:98:04:68:71:d7:bc:0a:36:58:13:22:8e:
09:7c:24:97:67:b5:71:40:90:11:f0:05:c7:ca:a5:
54:0c:ae:dd:d8:65:30:c9:55:da:8e:d7:0e:85:cb:
98:51:6e:c7:b7:5c:53:09:79:91:23:4c:4b:4e:57:
e5:ea:30:46:71:35:52:91:38:16:0b:e5:44:8f:12:
66:59:eb:16:3e:a8:17:e9:09:17:33:14:93:f6:ec:
83:8b:4c:83:ec:34:5a:d3:9b:1e:7b:32:25:c8:37:
aa:40:11:45:e4:72:22:ad:63:4d:59:5e:6e:1e:c8:
fc:8d:72:00:81:73:91:72:2b:13:46:28:e5:07:d9:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4F:28:33:33:89:AB:BF:D3:6D:CF:1B:86:A4:3B:7B:66:23:B1:E1:E0
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/4F28333389ABBFD36DCF1B86A43B7B6623B1E1E0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.64.0/22
138.0.100.0/22
168.227.108.0/22
168.228.68.0/22
170.82.92.0/22
177.89.0.0/16
177.137.192.0/20
179.96.192.0/21
179.96.240.0/20
179.190.128.0/17
186.192.16.0/20
186.193.96.0/20
186.208.208.0/21
186.235.0.0/20
186.236.192.0/19
186.251.112.0/21
187.49.192.0/20
187.60.64.0/19
187.61.128.0/17
187.86.96.0/20
187.87.112.0/20
187.108.64.0/20
187.109.176.0/20
187.111.224.0/19
189.45.16.0/20
189.124.128.0/17
191.241.40.0/21
200.233.80.0/20
201.148.188.0/22
IPv6:
2804:54::/32
2804:2140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28220
Signature Algorithm: sha256WithRSAEncryption
9d:01:ff:4e:25:8e:23:4c:93:9f:ea:b0:ce:95:5b:a8:a8:3f:
7b:45:0a:65:ee:31:82:6a:7e:c9:0c:f9:a7:8c:e5:f0:8b:a9:
d2:9a:cf:24:fb:66:7d:bf:51:30:32:51:4d:2b:88:14:97:9f:
19:42:24:93:1b:7b:fa:e4:25:fb:3a:2c:39:e2:0e:c7:82:c3:
b8:53:25:74:df:1f:c5:0f:62:b3:87:df:7d:1c:91:96:62:b7:
43:db:18:f7:59:5e:29:3b:0a:c2:98:b7:aa:cf:80:a8:d3:d3:
73:0a:3b:12:4e:e4:74:76:97:36:43:bb:32:b3:f4:2f:cc:58:
91:02:8f:66:87:a9:b9:03:19:26:11:1e:d7:03:3d:53:01:a8:
f5:7f:0f:6c:99:9f:fc:8a:c7:01:ed:b2:31:1a:97:4a:e7:18:
fa:d4:53:14:7e:dd:9a:29:aa:b8:ba:e4:ad:32:e2:04:52:4d:
ad:77:99:00:bd:80:a3:a4:d2:cf:46:8b:ec:83:f3:28:e6:dc:
9f:ff:e6:e5:e1:b4:c1:90:fa:4e:92:0f:4c:8e:6a:5d:fc:d5:
db:f1:51:ca:63:0b:02:e4:ba:29:57:f9:89:d5:ed:a3:04:a8:
dd:ff:27:98:33:20:12:e5:bf:43:a3:cd:d6:a8:cd:28:4c:2b:
e3:96:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 21:35:34 2024 by rpki-client on console-fra.rpki-client.org