Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE250A3B28B47B4A9763FD31E0A088FAC16F5B4F.cer
File: AE250A3B28B47B4A9763FD31E0A088FAC16F5B4F.cer (raw, json)
Hash identifier: OGu+N3rJYXIZCJ338egxTOzuz00YEpIaFasN53NmNkg=
Subject key identifier: AE:25:0A:3B:28:B4:7B:4A:97:63:FD:31:E0:A0:88:FA:C1:6F:5B:4F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0DCB1CFC83F035FD21128EEBB353A8D37E407409
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/AE250A3B28B47B4A9763FD31E0A088FAC16F5B4F.mft
caRepository: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 24 Jul 2024 18:47:09 +0000
Certificate not after: Wed 23 Jul 2025 18:52:09 +0000
Subordinate resources: AS: 273663
IP: 177.8.71.0/24
IP: 2804:8a58::/32
Validation: Failed, certificate revoked on Sun 25 Aug 2024 21:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:cb:1c:fc:83:f0:35:fd:21:12:8e:eb:b3:53:a8:d3:7e:40:74:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 24 18:47:09 2024 GMT
Not After : Jul 23 18:52:09 2025 GMT
Subject: CN=AE250A3B28B47B4A9763FD31E0A088FAC16F5B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:31:b5:a4:1a:4c:a9:90:ca:d9:7a:f5:f9:
de:7c:f9:14:c0:eb:1b:a5:ae:dc:12:00:cb:88:f6:
47:e5:86:1c:9a:7c:28:57:d0:cd:40:2a:be:60:ec:
48:fc:90:bf:f3:f3:da:12:2f:01:98:20:6f:48:b5:
d6:2a:bd:1e:36:2b:b5:14:65:f9:6f:bd:e2:c1:44:
ab:dd:74:07:62:8e:22:f6:09:ca:c9:cf:4f:34:76:
10:dd:59:3f:c0:79:31:90:cf:ff:43:03:24:a1:6c:
e7:b1:e0:48:5b:66:0d:af:4a:73:06:b2:2d:d0:e8:
98:fa:9e:84:50:64:5f:50:53:e3:5d:13:4b:9c:ac:
b6:37:3a:96:d6:cd:40:96:c8:6f:3c:a5:58:1c:c6:
42:13:bd:eb:10:86:17:92:d6:e0:47:28:a4:af:23:
47:a7:99:99:05:8d:8e:fc:db:3f:dc:39:d2:79:06:
1e:1d:bb:63:ae:f2:86:06:ea:1f:ff:cb:44:05:cc:
03:3a:8f:9e:ee:11:63:2a:d2:dd:c2:12:92:22:d1:
f3:4b:12:92:f5:63:7a:3e:84:82:c5:1d:89:64:ab:
db:d1:1f:08:3d:0d:82:16:c2:e7:e3:89:0e:28:8e:
b5:6f:20:ac:bf:b4:c6:f3:f7:a3:cc:c3:3f:b8:e2:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AE:25:0A:3B:28:B4:7B:4A:97:63:FD:31:E0:A0:88:FA:C1:6F:5B:4F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/AE250A3B28B47B4A9763FD31E0A088FAC16F5B4F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.71.0/24
IPv6:
2804:8a58::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273663
Signature Algorithm: sha256WithRSAEncryption
d6:90:15:f0:bd:c7:6a:62:34:d5:9f:ba:6b:af:93:fd:74:b3:
ca:73:0b:0e:a9:cc:a2:a4:b0:58:cc:91:70:f4:dc:ad:c3:cb:
54:a3:0e:b2:6a:66:bb:5c:9c:77:81:de:29:81:da:02:0f:4a:
14:8b:9f:56:1c:31:66:bc:a2:ec:df:c0:3a:90:2e:0b:ba:72:
b5:84:dd:32:2b:1a:1f:15:6d:83:09:3f:bf:f6:8c:27:c9:d6:
00:78:d7:69:66:ab:a4:20:1c:a7:cf:a1:43:37:22:02:2c:af:
9a:1f:b8:9f:08:c0:1a:fb:a8:7f:4d:48:d5:2f:6d:db:18:46:
2b:cf:fc:ac:bb:cd:35:f4:45:25:7a:2a:fe:ca:98:31:46:00:
a8:0c:6b:ab:58:14:66:0a:cc:a0:1e:90:9a:31:08:da:06:2b:
ae:be:c3:9c:7b:ab:c9:5e:09:f4:7c:63:9b:03:b6:79:26:36:
1b:b8:c3:8e:a9:8c:0e:3e:a4:61:c3:71:3a:6b:d9:a8:e8:01:
f5:42:8a:ab:3f:07:58:c6:ca:e2:3d:b5:44:e6:f2:6e:3b:06:
d6:94:65:54:4e:f8:fd:63:17:32:10:1d:69:a8:16:d0:d4:98:
67:e7:c1:67:9d:40:2b:cf:1f:d0:f0:30:77:2a:c1:5f:d7:5e:
9f:b6:93:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 23:33:36 2024 by rpki-client on console-fra.rpki-client.org