Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.cer
File: 89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.cer (raw, json)
Hash identifier: c0/XcOywbF4RNQ8y8U/7cS11L8hnpqxh5EPyOnPFQn0=
Subject key identifier: 89:F1:5B:D3:96:CA:E9:4A:71:3E:7A:CE:40:89:9E:FC:B3:FE:A7:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0A30849B9D1D3A41B64FF8F957AE52D358DC81AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1/89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.mft
caRepository: rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 03:27:02 +0000
Certificate not after: Thu 03 Apr 2025 03:32:02 +0000
Subordinate resources: AS: 53159
IP: 201.49.144.0/21
IP: 2801:80:d20::/44
Validation: Failed, certificate revoked on Thu 12 Sep 2024 19:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:30:84:9b:9d:1d:3a:41:b6:4f:f8:f9:57:ae:52:d3:58:dc:81:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 03:27:02 2024 GMT
Not After : Apr 3 03:32:02 2025 GMT
Subject: CN=89F15BD396CAE94A713E7ACE40899EFCB3FEA71C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:27:82:4b:eb:c8:60:51:cf:bb:e4:fe:e6:
2b:91:2c:ca:96:5c:29:e9:95:06:ea:9a:aa:cb:08:
e5:d8:0e:0d:e9:36:ad:33:ed:69:ce:be:83:29:a0:
28:2e:78:29:7b:b7:4c:08:7d:77:d8:8c:ea:b6:ae:
98:63:25:a1:e5:4c:c4:49:c0:47:29:cb:9d:9b:19:
7c:6f:41:54:f0:25:85:15:53:3d:e2:b3:69:c4:6e:
4f:20:52:20:71:5b:67:8f:82:32:a0:64:55:b6:43:
76:1e:49:a4:45:54:92:66:4f:f1:21:bf:33:67:25:
70:45:6b:2d:ab:d8:49:d9:5a:c1:01:00:97:5e:2b:
bb:48:7f:12:fb:f9:48:ae:ee:cb:35:cd:c7:48:5c:
2d:3f:c6:7f:31:9b:a5:53:b3:3e:b3:a8:b3:5c:03:
c1:5a:fa:dc:de:7a:ca:88:84:ee:7c:3f:4f:36:be:
50:2b:83:bc:a9:ee:1e:a6:aa:68:88:4a:b5:67:46:
b6:cc:36:df:bd:2f:5c:bc:e5:de:f0:cc:ee:5e:09:
b7:9d:3b:ac:68:a1:db:20:b6:24:bd:c8:a3:2a:00:
70:27:85:25:e4:3b:5a:82:e0:83:f2:de:66:35:9b:
ab:e5:73:3b:e8:46:cf:c0:5e:50:cb:04:40:c3:f9:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
89:F1:5B:D3:96:CA:E9:4A:71:3E:7A:CE:40:89:9E:FC:B3:FE:A7:1C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1/89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.144.0/21
IPv6:
2801:80:d20::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53159
Signature Algorithm: sha256WithRSAEncryption
12:2b:f8:46:af:7c:93:b4:2c:f9:65:8d:ba:cd:1f:a4:c2:32:
7b:74:08:91:14:41:f6:da:e2:90:1e:e8:06:01:9c:24:8c:5a:
b9:14:8d:3e:3a:10:1e:ab:42:cc:17:63:e6:48:4a:df:2e:f8:
e1:19:9a:83:84:a2:57:7b:c7:c0:ab:24:5b:45:fc:79:a4:2c:
cc:44:34:16:fe:a9:c7:2f:d5:a9:ef:3b:8d:e3:86:c5:02:5d:
0b:1d:e9:4c:25:a5:d0:86:65:c2:3b:f6:65:fc:bd:d6:38:e4:
7d:57:78:ac:b7:5d:a5:e9:ce:e7:10:54:2d:b5:95:88:b9:ac:
20:4d:90:82:51:06:a4:6e:0c:0a:1f:5a:25:ea:8e:a4:3d:7b:
b1:f6:2a:91:5a:a5:24:60:54:22:32:bf:5d:f3:34:83:cb:96:
31:a5:26:2c:d8:33:9a:63:fc:8c:d3:80:71:9e:2d:48:af:a4:
e7:73:d6:e7:1a:d2:37:83:81:4c:08:d8:c3:87:8e:05:e7:7c:
8b:e4:45:92:c4:f1:21:a0:67:b4:19:50:53:52:bf:cd:05:e9:
8d:84:7c:1a:f1:77:5d:26:ce:a8:63:6f:64:4f:e0:28:55:74:
a1:fa:52:5b:59:8e:1b:ba:29:d5:d7:1e:bf:f9:d5:53:e9:c5:
05:db:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 20:32:23 2024 by rpki-client on console-fra.rpki-client.org