Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer
File: 64EDF843BB58DCBE2014E8820AB744C627698B80.cer (raw, json)
Hash identifier: wRANwtpXZY2Cd3kW1s6OeYt1DHCQUzSDqj+JgDKEqgw=
Subject key identifier: 64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5A6B52C58A5866D0CA0D5DF6C588CFF72CABBE04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.mft
caRepository: rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 23 May 2024 13:19:51 +0000
Certificate not after: Thu 22 May 2025 13:24:51 +0000
Subordinate resources: AS: 268573
IP: 45.163.72.0/22
IP: 177.70.246.0/23
IP: 2804:5344::/32
Validation: Failed, certificate revoked on Thu 23 May 2024 16:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6b:52:c5:8a:58:66:d0:ca:0d:5d:f6:c5:88:cf:f7:2c:ab:be:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 23 13:19:51 2024 GMT
Not After : May 22 13:24:51 2025 GMT
Subject: CN=64EDF843BB58DCBE2014E8820AB744C627698B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:b0:51:67:f4:87:cb:18:b2:49:84:64:f4:
df:3a:90:49:42:d0:20:e1:eb:e0:d5:d6:5a:be:c6:
c2:b5:cd:9e:49:44:67:03:81:2c:a7:c6:70:46:06:
14:9b:b3:9b:02:e9:1f:74:47:64:ce:ad:cb:08:c3:
f0:2c:0d:ed:78:e8:2f:3c:4e:19:32:bc:68:42:85:
86:b8:93:62:92:40:11:53:60:95:72:14:30:ab:72:
6a:c4:e9:aa:d8:24:e1:c3:9b:07:1b:9e:db:06:52:
e3:64:01:e7:74:50:30:94:be:4a:cd:98:37:c5:d6:
45:18:86:ec:40:84:87:35:9e:48:d1:93:ea:e7:e2:
d2:45:c5:5d:61:e3:07:6d:a2:fc:bd:f1:64:1e:24:
36:bf:a1:37:cf:a4:c2:04:2a:ca:5e:7c:98:f1:97:
e9:f9:52:51:1b:8b:c6:b2:e3:14:18:4c:87:2f:0c:
09:e4:51:49:b7:91:1e:58:c8:df:63:a6:fc:ed:5f:
23:b0:7c:ce:9f:67:1f:df:bc:7b:95:74:1b:04:3e:
c9:ba:9c:d8:6a:9a:e4:89:57:1f:50:8b:32:d4:0b:
d8:52:e9:f0:3a:79:6e:84:9c:98:ad:99:73:62:67:
89:c2:9a:b3:3c:45:d6:ac:3d:ff:cd:c4:18:27:f1:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.72.0/22
177.70.246.0/23
IPv6:
2804:5344::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268573
Signature Algorithm: sha256WithRSAEncryption
34:16:eb:5c:48:98:aa:6d:2a:ab:fb:a6:ea:a8:52:f9:3a:17:
24:67:71:c3:83:2e:f2:1d:87:a2:e4:2c:10:ab:2b:df:c5:81:
7b:55:5d:d6:e1:be:90:ff:ae:c9:b7:8b:41:6d:2c:0e:b9:e7:
69:13:97:aa:b0:81:bf:ec:92:28:d7:26:a6:20:1f:fb:94:55:
63:8c:1c:79:0a:28:7c:16:f3:0a:af:da:25:d6:02:39:bf:31:
7a:7b:87:df:fc:bb:c2:6d:67:29:c1:2f:56:ee:ab:30:f0:fe:
b3:ba:fa:aa:1a:be:cf:01:d9:39:4f:2d:43:c4:eb:b1:ef:4d:
bc:7f:a2:0b:a3:24:ff:ca:37:e6:fd:40:02:1f:9c:1d:89:4a:
47:17:1d:df:a7:47:9c:ee:ff:7b:e9:e6:f1:04:f4:67:14:04:
6d:82:31:44:e4:12:45:72:06:9a:3a:b5:a4:74:fd:eb:98:cb:
8f:9f:5d:9d:96:ed:7e:77:b4:d3:14:45:90:b5:6e:72:c4:c7:
d9:e5:58:17:e5:40:0d:30:4a:4e:7b:5a:3f:f6:2a:68:4f:12:
80:2f:e2:12:10:15:5a:43:e3:d3:cb:26:14:7a:66:9f:ad:3b:
71:73:ec:54:aa:bb:21:7d:07:c7:3a:ad:99:80:57:ed:6c:d1:
dc:99:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org