Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.cer
File: 60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.cer (raw, json)
Hash identifier: sGRncLsByjLCk005KH5apZfuA9sidZatEeolqxsqsug=
Subject key identifier: 60:BB:75:6D:09:DF:DF:9D:3E:BB:8F:BC:11:62:CF:32:3F:C1:BC:3C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5B3D890C8E8E49F5C13B7BDFE9A95F25D02D7D30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.mft
caRepository: rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 23 Oct 2024 11:44:32 +0000
Certificate not after: Wed 22 Oct 2025 11:49:32 +0000
Subordinate resources: AS: 265102
IP: 170.254.96.0/22
IP: 2804:32e0::/32
Validation: Failed, certificate revoked on Tue 19 Nov 2024 13:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:3d:89:0c:8e:8e:49:f5:c1:3b:7b:df:e9:a9:5f:25:d0:2d:7d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 23 11:44:32 2024 GMT
Not After : Oct 22 11:49:32 2025 GMT
Subject: CN=60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9f:3f:7b:f8:22:78:d8:87:3c:f6:cb:c1:71:
cc:4b:49:7e:28:c4:48:a4:e9:7e:c0:d4:ba:b6:0c:
2c:a4:6a:93:88:8e:be:f3:4f:2a:f3:af:a1:e3:7a:
9d:4b:f2:95:0e:d0:be:0b:85:31:6a:b3:d4:44:ed:
36:f9:e9:15:6a:51:5b:36:65:03:dd:5c:29:5f:98:
e3:09:8c:00:5d:1e:c2:34:95:f0:bf:4c:e6:e7:82:
ec:7d:d0:43:2c:ff:87:2f:cf:c3:31:c1:91:05:8e:
49:56:b2:72:71:a2:3e:c8:4c:da:87:16:e9:3d:d1:
ee:24:21:c6:8a:62:8d:11:66:d4:92:ec:0f:02:62:
e9:20:37:70:12:e8:44:43:d8:e9:d9:79:a9:b1:6b:
40:77:e2:07:32:10:c7:0d:4f:c5:96:21:f4:e8:d0:
85:a5:d5:09:b2:a5:56:c9:1d:4b:00:9a:c6:31:a6:
cf:fb:7f:f1:5d:b4:bc:c2:9f:6d:d5:64:83:33:f8:
aa:38:80:d8:64:c8:9a:0b:1b:c9:2b:cf:bf:92:fb:
4d:d3:ee:b8:0c:5f:e5:d9:c9:57:b7:b0:77:eb:dc:
52:35:a5:01:55:60:02:04:f1:75:0d:af:d4:52:2e:
3c:5b:c2:0d:8d:fb:1b:b4:11:8a:58:61:70:ab:3a:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
60:BB:75:6D:09:DF:DF:9D:3E:BB:8F:BC:11:62:CF:32:3F:C1:BC:3C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.96.0/22
IPv6:
2804:32e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265102
Signature Algorithm: sha256WithRSAEncryption
d5:a9:9d:52:c2:5d:7c:fb:64:e5:f8:bc:df:d6:65:24:36:bb:
49:31:97:37:84:48:6b:4b:c3:de:47:cf:74:5b:48:2d:61:70:
19:91:1a:a1:81:66:1f:a7:2a:d1:95:71:11:c8:d5:07:30:24:
4f:c3:fa:47:21:c3:5f:ee:ce:f2:b0:34:f0:cc:f3:40:c0:b0:
50:a6:61:6f:8f:b6:f5:0a:b9:8b:79:4d:9c:bb:a2:72:c6:77:
65:12:27:0f:52:07:f1:26:fc:78:29:2f:21:61:25:f4:0b:f0:
bc:11:38:2c:95:7a:df:a9:31:91:b4:b0:1a:34:b5:77:7c:c8:
73:31:ab:20:5d:75:78:2e:1f:72:42:27:9c:69:6b:54:06:f1:
9b:62:36:06:fb:7f:eb:23:22:00:84:55:b7:a7:41:16:da:bf:
13:6d:e4:9b:32:d5:a3:67:54:b1:8f:fb:37:98:dd:8d:86:2a:
62:6e:80:dc:cb:41:09:3a:f3:45:b8:d4:3b:0b:f0:ca:11:3f:
d7:56:fd:19:91:62:83:63:d3:83:d9:dc:1d:25:3f:8d:1d:af:
95:f5:4a:22:ce:82:3f:52:c4:d0:91:ac:c3:4c:19:6a:30:01:
ef:5b:81:07:0b:84:ef:4a:b2:ce:a5:63:14:05:7f:9b:00:ad:
58:3f:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:05:52 2024 by rpki-client on console-fra.rpki-client.org