Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BE90DFB20F8DA371C4554B74249DD27FB7F4485A.cer
File: BE90DFB20F8DA371C4554B74249DD27FB7F4485A.cer (raw, json)
Hash identifier: EE4Q27DoUz5nbN2pX1xOoSz0TMf5b006+AW12xkXMKU=
Subject key identifier: BE:90:DF:B2:0F:8D:A3:71:C4:55:4B:74:24:9D:D2:7F:B7:F4:48:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 56731C1C68B4DDCF7825B7B0E8AA8310D8E4A765
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/BE90DFB20F8DA371C4554B74249DD27FB7F4485A.mft
caRepository: rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 22 May 2024 17:16:43 +0000
Certificate not after: Wed 21 May 2025 17:21:43 +0000
Subordinate resources: AS: 271045
IP: 45.65.164.0/22
IP: 177.67.160.0/21
IP: 201.54.184.0/24
IP: 201.54.186.0/23
IP: 2804:756c::/32
Validation: Failed, certificate revoked on Tue 11 Jun 2024 01:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:73:1c:1c:68:b4:dd:cf:78:25:b7:b0:e8:aa:83:10:d8:e4:a7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 22 17:16:43 2024 GMT
Not After : May 21 17:21:43 2025 GMT
Subject: CN=BE90DFB20F8DA371C4554B74249DD27FB7F4485A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:6e:c6:6a:6d:63:3b:08:92:f8:e8:2a:85:
f4:4c:1e:22:c5:23:d2:b1:a3:49:b4:fa:77:15:d7:
11:98:09:64:ea:46:7a:5f:0e:d0:09:2c:5c:32:38:
b5:91:66:b7:32:48:4a:ba:e0:e0:cc:4e:5d:ad:12:
5a:ea:43:5d:13:06:bd:42:1d:6d:1d:39:e3:44:68:
c4:66:44:11:c3:bf:7f:63:f1:f9:84:18:a1:7f:9c:
2a:28:de:a1:5d:c7:b4:f2:5f:62:4d:24:0f:c5:f9:
e6:44:46:39:d1:09:df:83:e2:1c:96:da:50:ef:a9:
28:fc:38:c4:1d:75:f5:cc:1d:62:3b:52:6e:aa:0c:
3b:8f:5a:3f:30:96:5b:93:14:d1:94:ff:c9:c2:ac:
63:e0:1f:1f:a6:79:3f:5a:74:d6:fa:35:cc:29:4e:
ff:5d:50:d0:97:4d:e5:94:72:d5:7f:d2:47:0b:06:
e4:4a:a5:cc:d1:c7:c5:04:14:62:f5:eb:68:f0:35:
5f:a0:ac:d5:28:91:78:6a:09:d9:a2:73:c3:b8:86:
d0:57:b8:d0:1c:20:2f:c8:14:15:33:fa:67:76:36:
7b:6d:cc:97:8e:7e:f5:ad:6f:91:3e:42:c2:0f:1d:
8e:7d:a8:65:9a:e9:bd:bb:91:bd:0a:d1:e5:0c:50:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BE:90:DF:B2:0F:8D:A3:71:C4:55:4B:74:24:9D:D2:7F:B7:F4:48:5A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/BE90DFB20F8DA371C4554B74249DD27FB7F4485A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.164.0/22
177.67.160.0/21
201.54.184.0/24
201.54.186.0/23
IPv6:
2804:756c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271045
Signature Algorithm: sha256WithRSAEncryption
42:bf:f1:84:ae:ea:43:a5:5e:d7:4c:35:14:03:e9:90:36:42:
33:c3:66:6a:96:d8:e4:36:5f:75:b4:c5:f8:5f:b2:de:7c:54:
91:fa:44:79:ad:00:0c:27:e0:43:31:d5:41:4a:38:ff:e3:e0:
a8:8d:3b:62:e8:dc:a2:9c:57:63:26:d8:e1:a3:47:67:bf:44:
df:ac:2d:38:5f:f9:c3:92:99:3a:a7:ae:80:d1:d8:d5:53:17:
6f:6d:42:31:19:c3:fb:c8:71:91:6d:28:c4:36:cc:3c:85:f6:
42:18:03:de:a9:e3:1a:20:00:5e:1d:57:77:c5:e7:0c:9d:1f:
5c:87:06:68:a3:ef:e8:71:04:a2:d9:5a:01:b8:ab:cb:8a:f8:
70:5b:9c:eb:76:bc:0a:04:24:bd:0a:97:2f:76:69:c5:38:c7:
74:55:ff:95:1f:52:3b:83:f8:eb:79:19:7e:93:a1:26:50:06:
5d:ee:d1:99:00:73:f9:e1:c6:a1:35:61:b5:52:b6:6b:5c:c3:
f5:fe:2d:f1:6d:f5:39:e3:f2:03:50:9d:17:2b:8f:d6:46:79:
f9:30:7e:33:96:61:6d:88:d6:c2:63:b8:39:cf:c3:c2:42:30:
e5:3d:a9:8c:68:4b:ee:4d:9d:73:d3:46:d2:3e:f4:02:ae:33:
f1:dc:54:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 03:06:45 2024 by rpki-client on console-fra.rpki-client.org