Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.cer
File: 89CE27D64527B101D4BBA3737DAAF6FA000F34B0.cer (raw, json)
Hash identifier: 3QYKoSdLXAXzAS3kt3v83iJWJ3gIIXQz8STG0ZCU+5U=
Subject key identifier: 89:CE:27:D6:45:27:B1:01:D4:BB:A3:73:7D:AA:F6:FA:00:0F:34:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 68B2CA1C7C3E6E7D232CBA09261AA3AAD1F1C6B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft
caRepository: rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:26:30 +0000
Certificate not after: Wed 02 Apr 2025 18:31:30 +0000
Subordinate resources: AS: 268527
IP: 45.162.172.0/22
IP: 2804:5294::/32
Validation: Failed, certificate revoked on Tue 29 Oct 2024 15:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b2:ca:1c:7c:3e:6e:7d:23:2c:ba:09:26:1a:a3:aa:d1:f1:c6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:26:30 2024 GMT
Not After : Apr 2 18:31:30 2025 GMT
Subject: CN=89CE27D64527B101D4BBA3737DAAF6FA000F34B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:92:7a:76:13:3f:ea:da:96:32:8b:25:aa:fe:
82:e1:2d:12:d1:d1:7f:3e:e0:2a:38:b2:f8:65:63:
dc:ec:72:86:0d:16:86:13:a3:54:8f:26:fc:9c:bc:
01:70:e3:a1:af:2e:9d:3e:38:17:a2:e8:5a:90:7b:
df:55:60:72:de:36:b1:c1:a2:6b:e4:58:d9:37:eb:
03:12:d2:57:36:7c:43:f8:50:7e:dd:5f:76:7d:8d:
94:a0:aa:2c:bd:7c:e1:0e:28:69:0e:af:a3:1c:b3:
67:7d:99:83:07:44:cb:07:38:e2:5e:06:bb:91:43:
d8:84:8b:49:55:ac:e8:bb:79:c3:db:45:f1:27:91:
d7:e4:6d:90:22:e4:39:e4:d0:3b:56:17:77:be:28:
0c:16:62:ca:40:b9:9f:30:8c:9d:a1:bb:e4:e9:66:
9f:a2:47:0b:04:a2:65:8a:85:f1:84:19:9b:be:94:
94:d5:45:87:f9:65:5b:4f:f3:33:29:75:f1:22:e5:
36:9a:f8:31:8e:13:1f:72:ec:7c:a8:d1:a1:b9:c9:
e6:b2:67:36:3e:35:d9:82:da:1d:13:d2:de:c3:f4:
9d:02:15:62:4b:6b:ee:a8:6a:7e:14:38:f8:67:d2:
6c:24:53:3c:4c:a0:e6:b2:79:ed:8f:15:e5:a6:a2:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
89:CE:27:D6:45:27:B1:01:D4:BB:A3:73:7D:AA:F6:FA:00:0F:34:B0
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.172.0/22
IPv6:
2804:5294::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268527
Signature Algorithm: sha256WithRSAEncryption
3f:91:41:14:6f:5d:06:ad:f5:40:23:b2:50:b1:a0:c2:96:72:
62:fa:2c:bf:dd:1b:01:9e:68:2d:d4:a4:71:f3:13:c5:7f:f4:
a8:02:d1:54:c2:f6:4a:f7:a3:5c:7b:11:a3:68:2a:e0:5a:bb:
1b:b7:40:24:1d:c8:60:3a:3f:8f:b6:ad:50:3f:c2:8f:dd:8b:
9d:13:89:12:f5:52:24:c1:7c:50:66:84:57:ff:4e:1b:96:74:
b4:72:52:22:41:77:e0:b9:f8:06:ce:55:89:f9:40:08:ec:75:
11:e4:b1:65:e4:60:fe:1e:29:5d:94:b7:bd:05:21:e7:11:94:
2f:dd:99:ca:56:19:25:d0:37:cb:6e:dd:60:73:a7:eb:e3:1c:
3e:ea:30:79:01:f6:d2:d4:10:29:f5:3f:4a:6d:7b:07:25:53:
d3:27:6d:c0:16:5a:4f:b7:c6:1c:98:e5:90:70:58:56:3b:38:
73:eb:4e:c9:1a:77:c5:97:a5:54:3a:3b:59:ec:7d:30:eb:64:
0d:c2:b9:7e:bc:10:43:83:12:2f:d1:d5:6e:1a:13:bb:d8:24:
3e:ee:5e:a4:b7:dd:05:e3:e0:ec:72:04:80:de:d0:0f:88:a6:
75:b3:66:5d:ea:07:05:83:96:09:c4:7a:d9:ed:f3:b9:f5:b1:
8d:91:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 19:20:08 2024 by rpki-client on console-fra.rpki-client.org