Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/898E588412C1929215CB06A7332E64A4CD55DA0F.cer
File: 898E588412C1929215CB06A7332E64A4CD55DA0F.cer (raw, json)
Hash identifier: wqS8KXC/q8Zjexwu+6R2l12mfqY1fmcElY89bEJ4aE8=
Subject key identifier: 89:8E:58:84:12:C1:92:92:15:CB:06:A7:33:2E:64:A4:CD:55:DA:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 240D51580631A192851192F4155A2FCC1BBA1D84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/898E588412C1929215CB06A7332E64A4CD55DA0F.mft
caRepository: rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 10 Oct 2024 14:06:11 +0000
Certificate not after: Thu 09 Oct 2025 14:11:11 +0000
Subordinate resources: AS: 262593
IP: 170.247.24.0/22
IP: 177.84.224.0/22
IP: 2804:2e40::/32
Validation: Failed, certificate revoked on Tue 22 Oct 2024 10:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0d:51:58:06:31:a1:92:85:11:92:f4:15:5a:2f:cc:1b:ba:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 10 14:06:11 2024 GMT
Not After : Oct 9 14:11:11 2025 GMT
Subject: CN=898E588412C1929215CB06A7332E64A4CD55DA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:0d:f1:21:1f:c4:c7:87:7b:14:b6:81:38:
ef:e9:d6:77:1c:a3:d6:65:23:1f:60:d9:f0:83:e9:
13:12:b5:1b:b8:ee:69:96:fb:8e:19:7e:b4:cd:29:
57:a6:58:29:ea:98:d0:b5:d0:66:8d:c8:51:dc:18:
de:7e:7e:83:2a:52:2e:a8:5b:22:7b:49:77:19:b3:
47:4f:0d:5a:0d:54:41:a1:23:b3:0d:45:8c:16:4e:
de:c2:17:04:41:5d:32:14:ce:f9:ef:1b:f9:cf:5b:
98:6f:61:05:fb:fc:08:f2:bd:c9:ef:78:ad:c6:79:
52:ad:a8:fd:0d:67:d6:e2:f3:ea:38:4f:1b:ac:2f:
7b:99:f5:db:af:2f:19:cf:4e:5c:e3:21:97:8b:12:
2c:0b:c9:d8:ee:3e:7e:5f:cc:53:c5:a4:f0:8a:90:
29:18:4a:f4:b5:31:2c:61:80:31:81:d3:38:39:36:
21:0c:12:0b:73:dd:1e:79:ed:4f:9f:99:2c:b7:1c:
ea:ba:82:11:09:0c:48:22:37:44:22:16:dd:93:bb:
89:24:fa:1b:35:b3:ae:83:9f:fc:0b:20:8b:b1:8f:
ec:4c:d4:de:0c:69:e3:2f:84:f6:71:ce:c8:f2:23:
e9:49:5e:44:e7:ad:14:9b:e0:e2:3a:98:f3:0d:a7:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
89:8E:58:84:12:C1:92:92:15:CB:06:A7:33:2E:64:A4:CD:55:DA:0F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/898E588412C1929215CB06A7332E64A4CD55DA0F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.24.0/22
177.84.224.0/22
IPv6:
2804:2e40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262593
Signature Algorithm: sha256WithRSAEncryption
d5:bc:17:0d:0b:43:1e:90:a3:84:e0:93:5a:cd:59:ce:8a:71:
d4:7c:bd:29:c9:a4:ff:41:0a:05:fa:b9:d3:e5:cb:9a:3e:58:
46:34:a3:3c:1b:2a:d9:e0:32:08:0b:8d:d4:04:34:09:d1:d4:
ee:e2:f4:51:86:09:ff:ba:13:d3:67:6b:c0:28:57:ba:98:c9:
7d:d5:c5:48:10:5a:e0:f9:3e:28:c3:fd:ff:12:cf:0b:50:bb:
1b:99:22:1f:12:3a:6f:8d:ad:ea:7f:f7:1c:25:ca:56:80:88:
e3:1d:e5:63:91:1c:63:eb:8a:b8:f5:fa:af:af:fa:42:f6:ba:
0a:cc:ca:11:48:58:ee:7a:2f:0f:87:9f:e8:71:48:01:c5:7f:
4a:ae:92:75:60:bd:a1:40:d0:56:4a:2c:ea:48:e0:37:46:11:
4f:8d:91:3a:8f:35:0a:1c:77:12:5e:88:1d:5b:7a:6b:31:d3:
64:9a:10:6c:f2:e8:7f:3a:55:bd:8c:76:07:a0:c1:6b:f2:1d:
12:60:30:cd:35:53:99:72:79:5e:be:36:87:e7:ad:90:59:f1:
8f:b3:61:d5:eb:58:f5:40:62:f1:76:26:3e:f3:dd:69:66:74:
83:c4:f3:c5:37:c4:df:33:aa:1d:2e:21:5a:3c:d3:f5:72:da:
fd:da:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:52:11 2024 by rpki-client on console-fra.rpki-client.org