Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/950902D05DDE923B7DA014B3AA90F4258FD879B5.cer
File: 950902D05DDE923B7DA014B3AA90F4258FD879B5.cer (raw, json)
Hash identifier: zzOaVRUO6C79RxotVdpFNG/kTS+/qpyuuQS4woxx+TQ=
Subject key identifier: 95:09:02:D0:5D:DE:92:3B:7D:A0:14:B3:AA:90:F4:25:8F:D8:79:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5229E087C743451ECC037B3CB087179AEDEE3C20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/950902D05DDE923B7DA014B3AA90F4258FD879B5.mft
caRepository: rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 27 Jun 2024 20:04:51 +0000
Certificate not after: Thu 26 Jun 2025 20:09:51 +0000
Subordinate resources: AS: 270329
IP: 201.216.108.0/22
IP: 2804:6a54::/32
Validation: Failed, certificate revoked on Wed 04 Sep 2024 21:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:29:e0:87:c7:43:45:1e:cc:03:7b:3c:b0:87:17:9a:ed:ee:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 27 20:04:51 2024 GMT
Not After : Jun 26 20:09:51 2025 GMT
Subject: CN=950902D05DDE923B7DA014B3AA90F4258FD879B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bc:0e:a9:a6:cb:63:c2:f4:c5:ce:ab:75:ae:
6a:bf:58:17:2d:93:e0:82:47:02:72:11:a5:62:85:
3b:5e:93:3c:95:b6:b4:a3:c2:9b:71:d6:b1:41:2f:
ed:ae:58:fe:94:73:59:05:45:25:c2:0b:8a:f8:a5:
c8:22:6d:fa:0f:99:d9:82:93:63:63:00:f5:93:84:
29:db:3e:cc:8a:14:f7:75:8c:f1:4a:46:e2:d6:ad:
26:f6:b2:1c:57:70:e7:83:6c:3e:23:15:f3:59:8d:
c3:16:fe:1c:ae:a2:e4:b1:bb:0b:9a:dc:f3:e6:24:
97:82:7e:14:c4:af:03:7d:eb:16:e4:77:f5:f4:ee:
c0:16:f4:95:f0:24:fb:ad:f1:6d:00:50:f8:86:00:
01:68:06:f7:46:21:f2:33:27:d7:52:12:66:93:cf:
c6:84:13:81:80:f6:55:38:c3:c1:c8:9e:80:87:ea:
41:1e:9f:af:eb:96:c7:98:85:20:21:d1:b8:0b:c1:
39:dc:41:fd:37:0f:2b:4d:ec:67:26:97:2a:86:75:
40:d3:a0:98:55:e8:d8:61:5b:94:81:c4:bb:50:eb:
10:50:e4:66:26:f6:0d:27:42:88:c5:a7:9a:f7:2b:
02:c5:fa:ec:a1:d5:76:d1:0f:6e:60:fe:87:70:38:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
95:09:02:D0:5D:DE:92:3B:7D:A0:14:B3:AA:90:F4:25:8F:D8:79:B5
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/950902D05DDE923B7DA014B3AA90F4258FD879B5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.108.0/22
IPv6:
2804:6a54::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270329
Signature Algorithm: sha256WithRSAEncryption
0c:45:7f:c2:08:15:c0:85:5d:ce:d8:9b:19:85:c6:95:9d:25:
4e:20:c5:e9:a0:d4:3f:11:45:56:5e:d7:6e:c5:1c:52:fa:6a:
e2:55:dc:d2:ee:ad:46:05:4e:a1:ef:e6:ea:c0:ed:ba:71:b8:
9f:f3:00:09:00:a7:df:65:7d:82:2a:7f:c4:0c:5b:f4:bb:10:
c4:c4:d1:65:98:72:26:db:70:96:46:c8:6c:8f:77:6d:0c:b4:
ef:da:cf:14:5c:54:eb:1f:00:b8:81:1a:f7:b1:81:d8:fb:9d:
f0:82:42:58:df:c6:18:29:51:79:de:b1:df:1f:79:6f:bc:ed:
36:25:96:d8:d6:8a:7d:2d:20:8d:32:58:88:10:e1:9c:73:a3:
f3:9c:0f:b8:52:73:7b:16:7f:8c:0b:bb:ba:aa:bc:37:e6:07:
01:35:42:ba:13:31:33:61:06:16:50:a5:0c:c9:b3:70:d1:48:
35:cb:0c:6d:a8:0b:a9:e8:da:f2:c8:d3:98:f6:50:49:87:11:
9a:ec:42:e7:f5:0b:f9:5d:72:05:7e:70:1e:08:ab:56:79:15:
be:36:4e:c6:81:3e:a4:d5:dc:4e:c9:04:7f:97:19:6b:4a:f6:
f0:3c:db:89:f3:b7:62:ea:8e:0d:69:aa:3d:5c:df:61:f5:ab:
b9:34:7f:0b
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUUingh8dDRR7MA3s8sIcXmu3uPCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MjcyMDA0NTFaFw0yNTA2MjYyMDA5NTFaMDMxMTAvBgNV
BAMTKDk1MDkwMkQwNURERTkyM0I3REEwMTRCM0FBOTBGNDI1OEZEODc5QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1vA6ppstjwvTFzqt1rmq/WBct
k+CCRwJyEaVihTtekzyVtrSjwptx1rFBL+2uWP6Uc1kFRSXCC4r4pcgibfoPmdmC
k2NjAPWThCnbPsyKFPd1jPFKRuLWrSb2shxXcOeDbD4jFfNZjcMW/hyuouSxuwua
3PPmJJeCfhTErwN96xbkd/X07sAW9JXwJPut8W0AUPiGAAFoBvdGIfIzJ9dSEmaT
z8aEE4GA9lU4w8HInoCH6kEen6/rlseYhSAh0bgLwTncQf03DytN7GcmlyqGdUDT
oJhV6NhhW5SBxLtQ6xBQ5GYm9g0nQojFp5r3KwLF+uyh1XbRD25g/odwOOrFAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVCQLQXd6SO32g
FLOqkPQlj9h5tTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW9p
VjN4dWJER2FkVm1hQjF2U1p2QjZOWkNjUXpISEpCSFpaUVZrQWRhZjEvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW9p
VjN4dWJER2FkVm1hQjF2U1p2QjZOWkNjUXpISEpCSFpaUVZrQWRhZjEvMC85NTA5
MDJEMDVEREU5MjNCN0RBMDE0QjNBQTkwRjQyNThGRDg3OUI1Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBALJ2GwwDQQCAAIwBwMFACgEalQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBB/5MA0GCSqGSIb3DQEBCwUAA4IBAQAMRX/CCBXAhV3O2JsZ
hcaVnSVOIMXpoNQ/EUVWXtduxRxS+mriVdzS7q1GBU6h7+bqwO26cbif8wAJAKff
ZX2CKn/EDFv0uxDExNFlmHIm23CWRshsj3dtDLTv2s8UXFTrHwC4gRr3sYHY+53w
gkJY38YYKVF53rHfH3lvvO02JZbY1op9LSCNMliIEOGcc6PznA+4UnN7Fn+MC7u6
qrw35gcBNUK6EzEzYQYWUKUMybNw0Ug1ywxtqAup6NryyNOY9lBJhxGa7ELn9Qv5
XXIFfnAeCKtWeRW+Nk7GgT6k1dxOyQR/lxlrSvbwPNuJ87di6o4Naao9XN9h9au5
NH8L
-----END CERTIFICATE-----
Generated at Wed Sep 4 22:54:41 2024 by rpki-client on console-fra.rpki-client.org