Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer
File: B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer (raw, json)
Hash identifier: 3d133LfRh5+M4PDJ0HrYzMvGxuJXzms5fQ4oQ5U70kw=
Subject key identifier: B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3339C38ED8A72FECD573A05C5BC5FFE7FEFCE64D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.mft
caRepository: rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 15 Nov 2024 13:53:01 +0000
Certificate not after: Fri 14 Nov 2025 13:58:01 +0000
Subordinate resources: AS: 270858
IP: 179.0.188.0/22
IP: 2804:7284::/32
Validation: Failed, certificate revoked on Thu 21 Nov 2024 10:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:39:c3:8e:d8:a7:2f:ec:d5:73:a0:5c:5b:c5:ff:e7:fe:fc:e6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 15 13:53:01 2024 GMT
Not After : Nov 14 13:58:01 2025 GMT
Subject: CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:a7:87:b7:8e:b9:03:9c:06:ed:40:bf:0c:
6d:c9:60:82:53:49:04:fb:7a:17:2f:46:ae:f1:a5:
50:98:1c:47:ba:aa:c9:fd:0a:d7:d4:9b:d8:33:0a:
7e:58:80:93:ef:4b:46:d0:06:f6:bf:49:27:a3:af:
2b:cb:30:75:71:d2:18:2e:4d:a6:c5:5c:d7:07:ac:
73:70:52:1b:a2:b3:11:e7:eb:d8:02:c1:21:7a:b3:
9a:8e:16:9a:b9:ae:e3:68:46:8b:eb:ff:23:e3:86:
35:54:6a:e4:94:d1:a7:e4:49:72:d1:17:c9:5e:09:
f3:db:70:05:c6:c9:f1:4d:9e:e3:f9:90:c9:8d:a3:
48:1d:f6:e9:e7:ea:c2:b2:60:9d:bf:0f:0b:09:1a:
0e:eb:48:90:68:3c:da:ab:76:61:66:ce:23:18:7d:
ce:70:7c:62:e8:d8:8f:d5:fe:a6:23:ca:77:52:75:
d1:16:7c:c1:10:b5:9a:c4:a8:42:43:a1:38:ce:49:
33:40:c1:0e:04:9b:91:75:1b:a2:40:0d:fe:05:c6:
de:34:ee:0c:da:19:ce:9b:7e:af:cc:70:fb:6c:24:
d0:b4:12:dd:06:9b:39:b4:a7:b5:ec:7b:11:34:6b:
00:f9:74:88:c9:c7:6a:8a:86:a6:b2:a1:6a:6d:3d:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.188.0/22
IPv6:
2804:7284::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270858
Signature Algorithm: sha256WithRSAEncryption
7a:63:8c:0d:7d:0d:44:09:a2:f7:27:16:4a:93:2d:2d:ac:02:
9d:17:d3:c8:73:e0:20:90:01:49:7f:19:3a:8f:52:c2:e7:b9:
4f:ca:54:ef:aa:06:ac:71:07:88:a3:6c:79:6b:61:9b:a0:c7:
d5:f3:59:1f:ef:29:2e:9c:24:2a:ae:64:97:16:fc:cb:2c:a4:
7e:32:56:f5:5e:94:69:9f:96:1d:0c:92:52:ea:52:96:7e:a3:
b5:65:41:1d:78:43:cc:03:e7:46:41:82:ce:1d:45:8c:86:99:
c9:38:57:61:9c:83:d1:15:73:28:a6:15:dd:47:87:13:e6:de:
dc:41:dd:eb:e1:73:7d:38:54:0a:18:c5:f0:24:eb:56:9a:7f:
b2:14:7e:8c:f6:ca:5d:82:40:7c:43:f5:36:15:d7:a4:d8:0a:
92:88:6d:00:43:61:9b:73:63:4f:8f:f2:9c:dc:86:3d:55:71:
55:8e:ee:20:37:fe:cf:cf:13:d5:7c:25:83:ea:50:93:8d:c6:
b6:56:7f:47:c7:61:81:90:57:f0:88:ac:e1:fc:71:96:66:91:
ca:89:6b:2a:a8:29:0c:de:e6:15:e0:ba:a2:a7:f8:84:46:31:
d2:21:33:b0:6e:57:c7:9d:a8:12:78:20:2c:6b:94:48:6d:96:
41:e4:c2:21
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUMznDjtinL+zVc6BcW8X/5/785k0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMTUxMzUzMDFaFw0yNTExMTQxMzU4MDFaMDMxMTAvBgNV
BAMTKEI1MkIzQjI5NUE1MEY1MDZDMEFGRDkxQ0VGRUMyQzgzQzNEQTAyMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTv6eHt465A5wG7UC/DG3JYIJT
SQT7ehcvRq7xpVCYHEe6qsn9CtfUm9gzCn5YgJPvS0bQBva/SSejryvLMHVx0hgu
TabFXNcHrHNwUhuisxHn69gCwSF6s5qOFpq5ruNoRovr/yPjhjVUauSU0afkSXLR
F8leCfPbcAXGyfFNnuP5kMmNo0gd9unn6sKyYJ2/DwsJGg7rSJBoPNqrdmFmziMY
fc5wfGLo2I/V/qYjyndSddEWfMEQtZrEqEJDoTjOSTNAwQ4Em5F1G6JADf4Fxt40
7gzaGc6bfq/McPtsJNC0Et0Gmzm0p7XsexE0awD5dIjJx2qKhqayoWptPaMXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1KzspWlD1BsCv
2Rzv7CyDw9oCATAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzR5
S1Q3dEdrYkR5dzNxVHk0RXoyN292dURxdVd3VmpmTjVBWjh3VGY2TmkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M0
eUtUN3RHa2JEeXczcVR5NEV6MjdvdnVEcXVXd1ZqZk41QVo4d1RmNk5pLzAvQjUy
QjNCMjk1QTUwRjUwNkMwQUZEOTFDRUZFQzJDODNDM0RBMDIwMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCswC8MA0EAgACMAcDBQAoBHKEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiCjANBgkqhkiG9w0BAQsFAAOCAQEAemOMDX0NRAmi9ycW
SpMtLawCnRfTyHPgIJABSX8ZOo9Swue5T8pU76oGrHEHiKNseWthm6DH1fNZH+8p
LpwkKq5klxb8yyykfjJW9V6UaZ+WHQySUupSln6jtWVBHXhDzAPnRkGCzh1FjIaZ
yThXYZyD0RVzKKYV3UeHE+be3EHd6+FzfThUChjF8CTrVpp/shR+jPbKXYJAfEP1
NhXXpNgKkohtAENhm3NjT4/ynNyGPVVxVY7uIDf+z88T1Xwlg+pQk43GtlZ/R8dh
gZBX8Iis4fxxlmaRyolrKqgpDN7mFeC6oqf4hEYx0iEzsG5Xx52oEnggLGuUSG2W
QeTCIQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 14:22:52 2024 by rpki-client on console-ams.rpki-client.org