Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
File: B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer (raw, json)
Hash identifier: DpL8WH43PwVp7nGSmgsP3uAD5qRmhDVeSsF5c80br6E=
Subject key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 673C5A438B4A8DEF1556FF68B7F8AFC3128A8F50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.mft
caRepository: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 03 May 2024 19:39:32 +0000
Certificate not after: Fri 02 May 2025 19:44:32 +0000
Subordinate resources: AS: 28669
IP: 45.234.40.0/22
IP: 168.227.12.0/22
IP: 170.238.116.0/22
IP: 177.36.160.0/20
IP: 177.107.80.0/20
IP: 177.137.64.0/20
IP: 179.189.224.0/20
IP: 186.195.144.0/20
IP: 186.225.96.0/19
IP: 187.108.32.0/20
IP: 187.111.160.0/20
IP: 189.8.80.0/20
IP: 189.28.144.0/20
IP: 191.241.224.0/19
IP: 201.46.16.0/20
IP: 2804:290::/32
IP: 2804:7cc::/32
IP: 2804:4bec::/32
Validation: Failed, certificate revoked on Tue 04 Jun 2024 02:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3c:5a:43:8b:4a:8d:ef:15:56:ff:68:b7:f8:af:c3:12:8a:8f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 3 19:39:32 2024 GMT
Not After : May 2 19:44:32 2025 GMT
Subject: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:6f:f2:7a:52:b5:c1:88:a7:3f:f4:35:46:
59:d3:27:e8:e6:ef:60:f8:e0:67:12:1d:13:40:94:
80:7d:eb:ff:f8:b6:7b:41:6f:25:42:30:cc:46:d4:
9b:b0:9a:73:ce:98:be:70:6f:80:8a:45:dc:2b:87:
89:34:a4:58:68:56:7d:22:e5:c2:a6:18:e8:8b:ac:
f7:39:16:24:0e:f6:7c:e9:41:44:aa:68:72:8b:94:
f2:f5:f2:21:a0:14:98:66:05:fc:77:ba:26:ee:d5:
f5:5a:a4:ec:e6:de:4d:d7:ab:03:7d:55:9c:90:2d:
31:73:5a:00:f1:35:84:3c:39:39:6c:1c:c2:91:15:
c4:32:a9:b5:70:93:25:f7:e6:55:61:91:3c:a3:5f:
c2:30:b1:85:27:13:6f:32:4e:3c:a3:31:1f:69:11:
2e:dd:f7:93:23:fa:90:d5:09:e4:a4:26:d1:57:1a:
bd:e5:64:3d:f7:b7:87:33:a2:df:c5:cf:59:49:77:
e8:99:09:7a:1d:47:60:1a:21:f9:87:11:30:30:d3:
b6:7c:18:e0:49:13:9b:45:93:22:4b:21:4d:06:3b:
00:18:a9:80:c7:16:32:a8:cd:2e:78:be:85:9d:9f:
01:84:ec:8a:ce:3c:73:df:16:75:11:2e:5c:61:5f:
bc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.40.0/22
168.227.12.0/22
170.238.116.0/22
177.36.160.0/20
177.107.80.0/20
177.137.64.0/20
179.189.224.0/20
186.195.144.0/20
186.225.96.0/19
187.108.32.0/20
187.111.160.0/20
189.8.80.0/20
189.28.144.0/20
191.241.224.0/19
201.46.16.0/20
IPv6:
2804:290::/32
2804:7cc::/32
2804:4bec::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28669
Signature Algorithm: sha256WithRSAEncryption
22:2c:cf:69:cc:5e:c5:8f:dd:5c:d9:e9:dd:3c:e1:a9:6c:b5:
af:8b:87:cc:d1:bf:5c:f5:06:bb:30:f7:b0:ce:14:b6:a4:39:
83:05:b6:81:c4:ed:55:49:4c:64:4f:51:db:1a:5c:ef:f6:9f:
f5:ec:e2:e1:ef:1e:aa:6a:79:57:ae:1c:b3:de:cb:71:ca:27:
df:48:a9:66:75:c0:b5:53:53:f3:7e:65:31:37:2e:12:ce:61:
7d:e6:28:c7:50:9b:97:df:26:ee:52:6a:be:4d:f4:3e:6d:a1:
fd:04:f5:ab:a4:aa:1c:0e:5a:19:cc:79:5a:61:4a:6f:3a:6d:
72:62:44:34:16:0a:04:cd:c2:ee:41:da:4e:2f:b9:4b:73:ea:
1c:08:ad:96:1b:ec:3f:66:04:d4:ba:88:ae:92:88:eb:26:d9:
f2:f0:cf:49:06:a0:32:54:ec:b0:73:4b:8a:b6:4b:ff:0f:42:
a2:95:60:63:c6:f4:16:e9:21:40:ea:7b:f4:d1:1c:46:6c:e9:
08:19:4e:85:32:c3:59:76:ce:57:9c:10:3c:89:f9:06:fc:16:
86:7b:e0:b3:70:58:57:a6:2e:86:2e:c7:fa:18:51:a9:29:3e:
b9:b9:c3:ad:a5:1f:49:b2:f5:36:a1:94:35:e5:07:91:d2:24:
59:cf:bd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org