Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/63EB8E29CBF1DCC57D732C82D8EDE4E81ED2E8DD.cer
File: 63EB8E29CBF1DCC57D732C82D8EDE4E81ED2E8DD.cer (raw, json)
Hash identifier: GbevNC6cWHi/zFSacRIIjgl45WhlubgJr+EHYPqG1YU=
Subject key identifier: 63:EB:8E:29:CB:F1:DC:C5:7D:73:2C:82:D8:ED:E4:E8:1E:D2:E8:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 05BAD42E4C2FD6E260BEC7FBB1B134911AC17159
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/1/63EB8E29CBF1DCC57D732C82D8EDE4E81ED2E8DD.mft
caRepository: rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:25:37 +0000
Certificate not after: Wed 02 Apr 2025 18:30:37 +0000
Subordinate resources: AS: 52940
AS: 53171
AS: 61844
AS: 265974
IP: 45.177.252.0/22
IP: 45.179.20.0/22
IP: 138.118.92.0/22
IP: 138.255.212.0/22
IP: 164.163.212.0/22
IP: 168.227.76.0/22
IP: 170.244.164.0/22
IP: 177.11.92.0/22
IP: 177.87.16.0/21
IP: 186.224.224.0/20
IP: 191.7.28.0/22
IP: 201.148.124.0/22
IP: 2804:1424::/32
IP: 2804:1a30::/32
IP: 2804:24e8::/32
IP: 2804:40ac::/32
Validation: Failed, certificate revoked on Fri 03 May 2024 20:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ba:d4:2e:4c:2f:d6:e2:60:be:c7:fb:b1:b1:34:91:1a:c1:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:25:37 2024 GMT
Not After : Apr 2 18:30:37 2025 GMT
Subject: CN=63EB8E29CBF1DCC57D732C82D8EDE4E81ED2E8DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:16:47:22:ba:3c:21:2c:6c:78:52:65:b6:
63:e0:e4:3b:50:05:a2:32:7e:1f:11:a8:b9:6f:72:
50:75:6f:2b:59:25:ea:2d:48:b9:6f:82:fa:fd:68:
30:e7:4c:74:ad:dd:47:11:8d:fc:8c:07:cc:e4:e6:
b7:3e:e7:2f:5d:49:45:6a:37:97:10:03:30:2b:3b:
4b:4d:56:4f:7b:29:63:2b:dd:39:2c:81:3a:19:8d:
f8:b4:e8:38:0f:d2:60:f0:15:ac:6b:6b:2c:d7:e7:
6d:bf:4f:77:bc:60:a5:c7:ac:ca:e5:9a:77:74:88:
05:34:bf:65:a1:27:23:50:a3:6e:db:83:b8:f3:98:
96:83:43:5e:2b:c1:ff:42:40:6c:69:61:34:d0:10:
58:d1:47:07:cc:0f:2d:e4:0e:1c:91:00:b1:8f:25:
96:f2:40:de:40:bc:ff:53:ff:24:ce:f7:d2:fe:2a:
70:f7:03:cb:70:75:0c:b1:c2:06:9e:b7:d0:69:cb:
51:78:88:2f:1d:bb:2e:ef:2e:b1:4c:21:3c:c4:42:
74:e0:39:7d:59:c9:84:ce:ca:55:81:a2:4f:31:99:
34:87:ab:48:04:90:a3:7d:b5:e6:cc:e4:b4:ac:d4:
ea:da:aa:5c:fb:6d:b3:53:38:6a:98:fc:b2:9f:22:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
63:EB:8E:29:CB:F1:DC:C5:7D:73:2C:82:D8:ED:E4:E8:1E:D2:E8:DD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/1/63EB8E29CBF1DCC57D732C82D8EDE4E81ED2E8DD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.252.0/22
45.179.20.0/22
138.118.92.0/22
138.255.212.0/22
164.163.212.0/22
168.227.76.0/22
170.244.164.0/22
177.11.92.0/22
177.87.16.0/21
186.224.224.0/20
191.7.28.0/22
201.148.124.0/22
IPv6:
2804:1424::/32
2804:1a30::/32
2804:24e8::/32
2804:40ac::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52940
53171
61844
265974
Signature Algorithm: sha256WithRSAEncryption
1f:cc:47:e9:02:28:fc:cd:a8:5c:99:28:7a:94:c5:40:2f:20:
17:39:41:84:70:86:76:ff:d5:60:1f:b7:9a:88:d6:a6:ff:73:
3c:4a:52:26:de:90:fe:51:6b:3a:a5:f4:71:88:ed:db:11:e0:
48:f7:ca:5d:07:48:23:8b:72:a5:88:5b:69:eb:d4:37:52:c4:
1f:fc:9b:78:9d:2c:dd:05:8e:56:92:3a:a7:d1:b6:42:fd:2d:
b0:7b:e9:54:98:7c:9a:fb:6f:45:db:23:48:15:01:3a:68:91:
8e:b0:06:e7:c4:99:c8:0c:63:db:9e:d9:de:da:ca:c6:3f:67:
41:d1:27:7c:b7:eb:ca:4e:b6:bf:7b:57:04:e3:21:61:05:6e:
2f:6f:87:9a:d0:45:06:a5:f5:72:c2:0a:02:28:10:da:47:d1:
5d:0a:8a:4c:6f:34:21:56:5a:63:9d:c4:bd:d4:4f:6a:6a:c6:
5b:38:3e:dd:d0:52:b7:37:7a:a3:d8:9d:16:88:0d:7f:16:44:
25:0a:29:aa:17:60:e5:ba:2a:57:4f:70:c2:77:c1:37:b9:a2:
37:ea:68:a4:bd:47:2f:12:77:34:42:37:45:8c:26:ce:24:aa:
9a:7d:28:11:b6:f7:c6:39:6c:a0:e3:c4:d5:29:c9:71:06:b1:
3f:bd:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org