Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.cer
File: 7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.cer (raw, json)
Hash identifier: yCBksv8jpWzqBW9epP9Sxsu5ZfJj7lcRoadSedQAWBQ=
Subject key identifier: 7A:2B:EE:AA:0E:27:59:59:36:9C:F7:B5:5C:1B:20:5A:D0:C3:CE:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 78E1B59E45461CC1F336F25E6E127D549BEFCBB5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.mft
caRepository: rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 21:52:55 +0000
Certificate not after: Wed 02 Apr 2025 21:57:55 +0000
Subordinate resources: AS: 268360
IP: 45.238.200.0/22
IP: 2804:4ff4::/32
Validation: Failed, certificate revoked on Mon 11 Nov 2024 19:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e1:b5:9e:45:46:1c:c1:f3:36:f2:5e:6e:12:7d:54:9b:ef:cb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 21:52:55 2024 GMT
Not After : Apr 2 21:57:55 2025 GMT
Subject: CN=7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:f6:ee:7e:06:50:b1:43:6c:ba:f9:da:62:
c9:70:fc:e9:2c:e7:5e:c2:0e:85:bb:a9:ee:b2:63:
73:a0:d8:1f:d0:4e:be:2b:78:09:ef:53:da:37:00:
15:50:31:a0:82:20:49:d7:7f:9c:1c:2d:39:bd:dd:
00:0c:3b:8d:00:04:ad:ae:88:32:07:b2:85:96:4a:
de:1f:45:76:12:81:99:0f:32:d2:31:52:6f:6c:71:
7d:d4:61:d8:45:7b:61:9c:94:52:01:66:5f:c0:ee:
2b:ae:dd:4a:43:5e:85:d9:f0:00:8c:26:bf:ec:27:
9d:7a:ef:ac:a2:37:e0:94:4f:19:f6:8c:7c:30:c4:
c7:8a:da:56:62:fc:bc:c0:d2:c4:b2:29:7e:8c:16:
64:e0:85:5f:1e:0f:73:9f:0d:1b:04:b5:b3:20:49:
ef:5e:72:d0:6b:f6:f1:5c:8e:7d:5b:b1:e2:d7:63:
a6:f4:40:55:e6:a6:51:1b:f5:c8:63:11:3b:2d:fe:
76:b8:d2:c6:e7:8b:bb:cc:36:b9:29:a9:bf:c1:96:
57:72:49:44:b8:b3:03:d3:7b:f7:24:cf:95:dc:53:
df:ed:5b:5e:15:e6:42:db:09:c2:e3:05:59:86:ca:
92:5b:8e:27:c5:86:73:1f:21:85:60:38:d5:5c:b7:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7A:2B:EE:AA:0E:27:59:59:36:9C:F7:B5:5C:1B:20:5A:D0:C3:CE:F6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.200.0/22
IPv6:
2804:4ff4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268360
Signature Algorithm: sha256WithRSAEncryption
1e:89:b2:45:8c:6a:26:69:cd:3f:e8:dc:49:b1:c7:10:cb:39:
15:34:8a:3a:fa:1e:2f:db:e5:22:0b:35:1e:cd:f8:ef:56:f1:
64:43:08:88:39:93:c5:5f:3c:82:74:52:a0:94:78:b5:ae:4b:
f4:b5:63:6c:72:b8:c5:bc:d0:79:f2:92:86:fa:6e:14:d8:7f:
95:49:f0:02:f8:17:6f:5b:21:24:de:14:ee:0e:06:60:43:93:
c8:18:bb:10:81:9c:d7:0a:38:1c:e6:a9:65:04:03:9f:74:9e:
5b:36:d1:c2:c1:77:46:aa:3b:0a:a1:c4:a5:ce:e7:bf:3a:a6:
3a:dd:23:71:14:7c:da:f2:af:e8:67:39:49:7a:6d:57:e3:78:
40:1e:7d:9b:63:00:76:b7:50:34:65:95:f0:19:32:02:12:19:
3e:bb:de:71:98:66:d6:a0:bc:5c:e9:8d:59:5d:d6:63:59:ad:
61:48:a4:31:4e:4f:f5:c4:fa:d5:7e:5b:76:98:95:8a:98:fb:
48:37:e5:13:77:79:23:6f:45:8d:51:ba:e8:aa:67:48:1e:a6:
e8:94:57:45:3b:20:0e:9e:a3:a1:d8:da:7b:fb:c5:e8:09:22:
75:22:ac:89:59:1a:9f:d1:58:54:2e:7e:66:3a:36:84:ed:9b:
14:22:68:0f
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUeOG1nkVGHMHzNvJebhJ9VJvvy7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMTUyNTVaFw0yNTA0MDIyMTU3NTVaMDMxMTAvBgNV
BAMTKDdBMkJFRUFBMEUyNzU5NTkzNjlDRjdCNTVDMUIyMDVBRDBDM0NFRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrf/bufgZQsUNsuvnaYslw/Oks
517CDoW7qe6yY3Og2B/QTr4reAnvU9o3ABVQMaCCIEnXf5wcLTm93QAMO40ABK2u
iDIHsoWWSt4fRXYSgZkPMtIxUm9scX3UYdhFe2GclFIBZl/A7iuu3UpDXoXZ8ACM
Jr/sJ51676yiN+CUTxn2jHwwxMeK2lZi/LzA0sSyKX6MFmTghV8eD3OfDRsEtbMg
Se9ectBr9vFcjn1bseLXY6b0QFXmplEb9chjETst/na40sbni7vMNrkpqb/Blldy
SUS4swPTe/ckz5XcU9/tW14V5kLbCcLjBVmGypJbjifFhnMfIYVgONVctzIpAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6K+6qDidZWTac
97VcGyBa0MPO9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUHpE
b1BwZVRDS3JhRktUVjZrNk1FdzZhZ0VEaURkZnVQRkhGcG9KSHNLdi8yLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUHpE
b1BwZVRDS3JhRktUVjZrNk1FdzZhZ0VEaURkZnVQRkhGcG9KSHNLdi8yLzdBMkJF
RUFBMEUyNzU5NTkzNjlDRjdCNTVDMUIyMDVBRDBDM0NFRjYubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi3uyDANBAIAAjAHAwUAKARP9DAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEGEgwDQYJKoZIhvcNAQELBQADggEBAB6JskWMaiZpzT/o3Emx
xxDLORU0ijr6Hi/b5SILNR7N+O9W8WRDCIg5k8VfPIJ0UqCUeLWuS/S1Y2xyuMW8
0Hnykob6bhTYf5VJ8AL4F29bISTeFO4OBmBDk8gYuxCBnNcKOBzmqWUEA590nls2
0cLBd0aqOwqhxKXO5786pjrdI3EUfNryr+hnOUl6bVfjeEAefZtjAHa3UDRllfAZ
MgISGT673nGYZtagvFzpjVld1mNZrWFIpDFOT/XE+tV+W3aYlYqY+0g35RN3eSNv
RY1RuuiqZ0gepuiUV0U7IA6eo6HY2nv7xegJInUirIlZGp/RWFQufmY6NoTtmxQi
aA8=
-----END CERTIFICATE-----
Generated at Mon Nov 11 21:27:32 2024 by rpki-client on console-ams.rpki-client.org