Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68EB6F8E6E8C354013C6D0A7A05AFFFF4018D4C4.cer
File: 68EB6F8E6E8C354013C6D0A7A05AFFFF4018D4C4.cer (raw, json)
Hash identifier: vlg64DNHdLT0B3419tghhae7N6F4OX9yDViT6+u9G2s=
Subject key identifier: 68:EB:6F:8E:6E:8C:35:40:13:C6:D0:A7:A0:5A:FF:FF:40:18:D4:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5AC06D1CFDA20B2812CADC59A17744A7C9A40DD4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/68EB6F8E6E8C354013C6D0A7A05AFFFF4018D4C4.mft
caRepository: rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 10 Jul 2024 23:18:59 +0000
Certificate not after: Wed 09 Jul 2025 23:23:59 +0000
Subordinate resources: AS: 268257
IP: 45.236.240.0/22
IP: 177.92.162.0/23
IP: 2804:4e60::/32
Validation: Failed, certificate revoked on Fri 30 Aug 2024 13:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c0:6d:1c:fd:a2:0b:28:12:ca:dc:59:a1:77:44:a7:c9:a4:0d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 10 23:18:59 2024 GMT
Not After : Jul 9 23:23:59 2025 GMT
Subject: CN=68EB6F8E6E8C354013C6D0A7A05AFFFF4018D4C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:39:3c:f6:bc:c2:34:2b:85:c4:f3:b1:bf:
20:46:63:70:91:3d:8c:f1:4b:07:bf:ed:13:82:ca:
5f:89:32:07:1b:f6:ce:67:58:83:d0:66:e3:88:47:
8b:5e:a7:1f:fd:57:79:c1:25:f6:4f:55:8a:d6:4b:
f5:7c:d0:af:6a:82:e9:dd:90:d1:32:14:d0:f9:91:
55:16:11:40:19:b5:ac:9e:02:7b:b2:63:05:0e:63:
c4:e4:aa:27:88:fc:3d:d8:74:e8:25:41:eb:71:28:
6f:18:36:d4:0c:a8:0e:62:12:d4:58:99:4e:ee:2c:
34:9b:d1:52:19:45:06:39:fb:ec:53:89:25:87:18:
47:7d:b7:e6:4c:bc:97:65:13:8a:3e:6e:89:21:af:
c0:f4:1b:50:99:18:7b:c9:4a:3f:ba:d5:1d:b3:bb:
38:56:fc:54:32:fe:2f:9b:65:b3:ad:59:a1:7f:31:
e9:69:4f:7e:d7:e0:88:3f:c5:b9:56:94:52:b1:57:
75:0f:e2:9c:22:44:7b:8d:5a:c9:ff:6c:db:7f:37:
5d:91:96:e3:64:d7:71:e5:2d:45:9b:ae:fe:ca:3f:
bb:c6:2b:3a:49:47:58:87:05:02:e8:31:46:17:d3:
aa:f3:21:e8:7f:2c:54:bd:8a:4b:d4:ae:28:fc:8f:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
68:EB:6F:8E:6E:8C:35:40:13:C6:D0:A7:A0:5A:FF:FF:40:18:D4:C4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/68EB6F8E6E8C354013C6D0A7A05AFFFF4018D4C4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.240.0/22
177.92.162.0/23
IPv6:
2804:4e60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268257
Signature Algorithm: sha256WithRSAEncryption
49:04:7f:32:9b:7a:cc:ef:e9:5d:56:4c:26:61:de:b5:34:b3:
7e:28:cd:ba:e8:a5:0b:27:6e:2a:d2:41:81:7e:56:c6:3a:8d:
5b:52:f6:39:e4:3b:b5:5b:3a:a7:fc:9c:cb:64:41:56:df:3c:
00:5a:90:de:64:3e:f3:e0:4d:ce:78:8d:ba:79:47:2a:4b:9d:
15:de:58:44:8f:05:a1:b2:b4:59:66:4a:66:3b:01:1a:e6:33:
20:30:99:49:cf:0f:05:71:13:36:61:0d:f9:49:32:90:51:ee:
e3:e1:e7:65:c0:47:97:21:f9:d7:f6:35:d6:67:65:7a:80:04:
1f:84:d3:bf:ab:38:22:dc:6c:df:7a:b5:e4:31:8f:52:92:2e:
81:0f:07:99:80:d9:a7:b3:f2:07:2d:64:3c:03:12:db:f0:61:
dd:d0:3b:16:10:9f:31:3f:fc:6f:e8:ea:d8:89:fe:1a:c8:3d:
e4:bc:d3:bc:8a:30:cc:95:b9:24:d2:a1:2e:65:f1:cd:83:d6:
9b:8a:b7:a8:4d:da:c0:71:e9:7b:ce:11:9a:e3:e4:c4:c0:2e:
b4:a0:7a:68:d2:e5:ec:3b:4f:0a:3e:be:cc:c8:10:8e:12:c3:
98:c0:38:1d:5e:a1:8a:ce:0b:da:71:6b:af:1b:06:a6:5b:45:
46:66:04:a3
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUWsBtHP2iCygSytxZoXdEp8mkDdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MTAyMzE4NTlaFw0yNTA3MDkyMzIzNTlaMDMxMTAvBgNV
BAMTKDY4RUI2RjhFNkU4QzM1NDAxM0M2RDBBN0EwNUFGRkZGNDAxOEQ0QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRTk89rzCNCuFxPOxvyBGY3CR
PYzxSwe/7ROCyl+JMgcb9s5nWIPQZuOIR4tepx/9V3nBJfZPVYrWS/V80K9qgund
kNEyFND5kVUWEUAZtayeAnuyYwUOY8TkqieI/D3YdOglQetxKG8YNtQMqA5iEtRY
mU7uLDSb0VIZRQY5++xTiSWHGEd9t+ZMvJdlE4o+bokhr8D0G1CZGHvJSj+61R2z
uzhW/FQy/i+bZbOtWaF/MelpT37X4Ig/xblWlFKxV3UP4pwiRHuNWsn/bNt/N12R
luNk13HlLUWbrv7KP7vGKzpJR1iHBQLoMUYX06rzIeh/LFS9ikvUrij8j2BNAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRo62+Obow1QBPG
0KegWv//QBjUxDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTFl
NEtiRmJtVHpwRTNkNEhWU0sxRjloVzlwOXpTMjhTd2ppVGd1MkxRblgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUx
ZTRLYkZibVR6cEUzZDRIVlNLMUY5aFc5cDl6UzI4U3dqaVRndTJMUW5YLzAvNjhF
QjZGOEU2RThDMzU0MDEzQzZEMEE3QTA1QUZGRkY0MDE4RDRDNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCLezwAwQBsVyiMA0EAgACMAcDBQAoBE5gMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQX4TANBgkqhkiG9w0BAQsFAAOCAQEASQR/Mpt6
zO/pXVZMJmHetTSzfijNuuilCyduKtJBgX5WxjqNW1L2OeQ7tVs6p/ycy2RBVt88
AFqQ3mQ+8+BNzniNunlHKkudFd5YRI8FobK0WWZKZjsBGuYzIDCZSc8PBXETNmEN
+UkykFHu4+HnZcBHlyH51/Y11mdleoAEH4TTv6s4Itxs33q15DGPUpIugQ8HmYDZ
p7PyBy1kPAMS2/Bh3dA7FhCfMT/8b+jq2In+Gsg95LzTvIowzJW5JNKhLmXxzYPW
m4q3qE3awHHpe84RmuPkxMAutKB6aNLl7DtPCj6+zMgQjhLDmMA4HV6his4L2nFr
rxsGpltFRmYEow==
-----END CERTIFICATE-----
Generated at Fri Aug 30 15:58:43 2024 by rpki-client on console-fra.rpki-client.org