Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09.cer
File: B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09.cer (raw, json)
Hash identifier: xKj6zGhQqKAcrF9T3ZlYG6ZMw3E4u5v6TYaGPh2YOHc=
Subject key identifier: B8:4D:B7:C8:E0:02:C7:BD:63:00:4D:52:A6:EF:D4:A7:C9:3A:5F:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 01716006E4B5C00A61C60A4950F2A82D61E7251E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09.mft
caRepository: rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 27 Jun 2024 15:43:16 +0000
Certificate not after: Thu 26 Jun 2025 15:48:16 +0000
Subordinate resources: AS: 271134
IP: 167.249.88.0/22
IP: 2804:76c8::/32
Validation: Failed, certificate revoked on Wed 11 Sep 2024 18:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:71:60:06:e4:b5:c0:0a:61:c6:0a:49:50:f2:a8:2d:61:e7:25:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 27 15:43:16 2024 GMT
Not After : Jun 26 15:48:16 2025 GMT
Subject: CN=B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f8:d4:a6:39:dc:d5:0c:3c:32:e3:df:e9:e2:
05:f3:d3:82:4e:61:f3:71:d8:c8:04:77:ca:c1:c5:
86:d8:69:b3:f6:80:62:52:a9:13:c7:14:08:f2:d6:
ba:87:d7:8b:80:d7:04:6a:e7:db:76:c5:3e:e0:7a:
b1:73:05:c0:21:1a:e6:6b:06:6b:6b:80:d4:8a:7a:
f3:f3:d0:ea:3f:0a:6f:56:e0:81:bc:08:e0:21:5c:
18:8b:35:3c:99:01:82:bf:1f:56:59:ff:3c:f3:d7:
63:79:de:0f:6b:8c:70:4c:c6:6d:81:3c:71:dd:11:
12:d6:e5:d9:75:0c:98:ff:0a:e5:24:3d:aa:8d:61:
c4:45:50:e0:ae:8e:15:1d:c7:19:47:a6:7d:74:69:
12:61:ac:35:e8:85:2e:60:2e:e1:41:c7:32:01:4b:
aa:a4:c9:28:f5:65:d8:ab:f7:4d:93:c8:6f:e4:23:
f8:99:53:22:63:81:29:31:ad:9b:47:cd:8c:1f:08:
2f:00:8b:e5:ba:2c:3a:29:b5:35:84:db:49:03:bf:
49:60:9b:1c:1b:2c:30:1e:46:31:dd:16:a6:90:65:
7f:b7:23:84:51:bb:95:98:43:02:fb:49:f5:c3:cc:
29:3f:dd:47:71:a3:20:52:f8:5c:b6:90:e3:55:07:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:4D:B7:C8:E0:02:C7:BD:63:00:4D:52:A6:EF:D4:A7:C9:3A:5F:09
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.88.0/22
IPv6:
2804:76c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271134
Signature Algorithm: sha256WithRSAEncryption
0d:8d:59:d7:41:79:76:81:b9:48:8d:2e:6b:7c:b8:6e:84:87:
64:a1:23:02:f7:e5:c7:02:c1:3c:87:6d:12:ec:46:2e:18:24:
2f:45:4e:69:d4:3a:87:8c:42:b2:e9:ae:d0:7f:70:a2:c0:2a:
ac:68:aa:34:d0:ca:d4:1a:a6:4b:1c:8b:e2:26:42:26:eb:8d:
5a:31:57:a7:bb:72:2e:86:78:bd:c1:67:d5:bf:52:75:af:ed:
e3:de:1f:59:13:94:3f:1e:ea:b4:77:2e:d7:18:0a:04:a9:c5:
31:98:b9:2f:0e:5e:fc:19:d3:a8:1a:80:31:e9:74:7d:c1:f0:
d2:75:76:2e:0c:59:d3:a7:25:53:dc:1d:36:3c:7c:bf:e0:4c:
12:14:e7:32:0c:5d:8b:bd:30:c5:27:e0:38:77:85:52:40:da:
14:e4:20:85:db:5f:8d:c9:0f:26:22:f6:c9:ff:6e:7b:4c:1b:
ef:fb:9b:3e:15:99:f0:d3:a8:80:39:c8:f5:4c:a4:45:8a:3a:
1a:af:6c:f5:d1:ce:65:ae:07:42:fc:47:52:92:4a:4b:17:08:
95:12:96:06:d5:39:7b:b9:ef:07:6f:39:34:da:08:03:00:91:
86:b9:c0:c1:2e:9f:d2:95:2d:33:01:bb:0b:05:2a:c3:d1:ac:
c2:5b:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 20:19:36 2024 by rpki-client on console-ams.rpki-client.org