Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer
File: 670B53705B1407CC3B30DDA3548CFE22775A41B9.cer (raw, json)
Hash identifier: Bhjm0TuZFwhRSqXOiBqlOIbgaNXgqypcaUgHYLmMj7I=
Subject key identifier: 67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3DA008A385E2DFD59791329285AA41096BE26482
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.mft
caRepository: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 15:45:34 +0000
Certificate not after: Thu 03 Apr 2025 15:50:34 +0000
Subordinate resources: AS: 270305
IP: 201.216.120.0/22
IP: 2804:6a00::/32
Validation: Failed, certificate revoked on Mon 29 Apr 2024 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a0:08:a3:85:e2:df:d5:97:91:32:92:85:aa:41:09:6b:e2:64:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 15:45:34 2024 GMT
Not After : Apr 3 15:50:34 2025 GMT
Subject: CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:ca:68:78:0d:96:de:6e:07:a2:12:d7:c1:
41:15:4c:59:d8:6c:f9:0a:bf:37:b5:c6:ee:76:88:
7d:dc:a3:a8:a2:8e:42:65:3c:8e:c4:dd:bb:9b:71:
56:17:ce:aa:09:f2:41:3f:84:8c:a1:f1:21:af:f1:
64:a1:e8:fb:0e:5c:40:2f:b4:0b:d7:a8:90:18:61:
e2:b2:d0:0e:fb:09:2a:29:42:d9:b2:b5:c1:49:84:
af:7b:d2:56:55:4a:52:36:29:a7:98:12:bc:fe:23:
e2:27:eb:f0:0f:27:3c:4e:b5:6f:0e:0e:94:6b:d5:
38:16:90:2e:09:66:cd:1d:64:27:70:d6:04:2e:60:
5c:d2:41:fe:4e:2c:d0:da:57:d4:0c:6c:0a:23:8e:
43:4a:84:53:3e:85:f9:d1:72:43:46:82:7e:b0:cd:
0c:84:66:51:40:fa:8e:d2:9b:35:3b:e8:38:1e:6d:
f3:02:36:b5:10:3b:43:75:a4:ce:13:44:e8:e3:46:
32:3d:5e:f9:da:3d:53:2d:d8:5d:b0:9f:ab:0d:dd:
ba:0e:dd:01:57:7e:a6:32:c1:8b:c3:a0:1f:47:91:
7b:e6:3c:a7:98:2a:a9:db:ed:49:14:ed:fb:9f:fb:
15:27:f9:17:13:74:0a:58:62:84:87:38:76:1f:aa:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.120.0/22
IPv6:
2804:6a00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270305
Signature Algorithm: sha256WithRSAEncryption
1d:80:ec:2d:57:aa:33:38:a0:b5:1e:21:8b:df:5f:aa:74:b7:
c9:d6:5f:19:3c:6b:0f:09:97:f8:b7:d7:70:6e:1f:08:72:f8:
68:1e:ab:3e:8e:c0:85:9b:4e:e8:e0:11:9e:f3:97:3f:f9:26:
fd:6e:3a:d7:50:6b:f4:1f:49:c8:89:19:f6:24:43:0a:b8:dd:
bf:b0:21:d3:45:db:56:e3:81:86:ff:5f:e7:a8:08:db:49:40:
64:53:ad:5a:1c:ec:64:99:16:1b:f9:9a:ef:fb:6c:35:05:a1:
1c:c6:b4:82:b8:e0:03:4c:49:71:ef:2c:b2:72:31:c5:3c:6d:
ec:99:f4:b6:e8:5b:00:53:d4:7d:15:9a:6c:f9:e8:b7:69:b5:
d3:ed:07:73:b9:59:c8:4a:1b:67:59:8d:fd:df:ce:43:bf:4f:
9a:10:fa:66:bc:03:ed:d5:f0:fc:bd:47:bc:f6:ab:55:18:62:
fb:4b:90:d0:eb:dc:4d:bc:c6:66:a7:7c:59:9f:09:5e:16:64:
67:2e:fa:73:d6:77:c3:42:5a:49:08:89:2b:42:37:e1:70:2f:
b8:e3:ce:07:a7:ab:11:9a:bb:f4:6e:60:1e:21:48:98:b7:3c:
0c:ed:2e:77:32:8e:de:0b:c6:f0:75:8a:bf:ed:e7:f1:fc:00:
fa:9d:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org