Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E.cer
File: C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E.cer (raw, json)
Hash identifier: aY04OkaO8OM/airlF4XR88dr7K7n6xrgnwMN25daE0w=
Subject key identifier: C5:CF:0F:FB:94:D7:93:A1:2D:FD:8C:35:BB:92:BB:DB:B1:6F:52:2E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 17021CC3A29FBCFCF5F88AE9D2B3A99D32501E78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E.mft
caRepository: rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 29 Oct 2024 22:31:25 +0000
Certificate not after: Tue 28 Oct 2025 22:36:25 +0000
Subordinate resources: AS: 271422
IP: 181.189.68.0/22
IP: 2804:7b48::/32
Validation: Failed, certificate revoked on Sun 10 Nov 2024 06:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:02:1c:c3:a2:9f:bc:fc:f5:f8:8a:e9:d2:b3:a9:9d:32:50:1e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 29 22:31:25 2024 GMT
Not After : Oct 28 22:36:25 2025 GMT
Subject: CN=C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:24:b9:d6:a4:a1:8c:bd:6c:e3:c0:55:30:
14:b7:1d:fd:18:b9:7f:62:82:82:ed:db:38:32:cd:
df:50:07:f0:a3:b9:c9:67:76:5e:73:4a:fe:b0:9b:
6e:80:d8:4b:67:e9:89:2c:c6:86:d5:f8:97:f8:ec:
7c:46:35:03:21:ab:3d:b0:ac:89:06:79:2f:c2:c1:
d8:00:a2:ea:01:5a:8a:6e:7e:1e:e3:56:5f:ac:9b:
e8:e0:9f:fe:b0:bc:39:58:ca:8e:4f:81:a7:25:82:
e6:30:8f:db:3c:b4:6e:45:3f:b5:c3:43:9e:db:a6:
77:a8:ef:1d:86:dc:83:88:f2:f2:20:2c:f5:bd:2c:
0a:42:73:8c:7d:c3:c5:70:f7:17:c4:c2:00:79:46:
ad:7b:6a:4e:ee:49:00:ad:04:58:8d:45:b8:54:b3:
74:7b:8b:76:99:0c:5a:78:a2:2e:93:df:c6:73:5d:
74:7e:f4:ce:3c:6f:85:98:05:fa:5c:6a:57:fa:b4:
12:a9:10:56:85:ee:60:03:43:17:5a:70:15:91:a7:
df:91:e5:f3:33:0a:82:e9:bf:55:d1:42:e6:af:5c:
3b:74:77:a0:c2:c2:79:95:a9:ab:41:f9:0e:d7:d9:
28:ce:ab:06:7f:ab:79:59:77:27:b1:d4:da:4b:ca:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C5:CF:0F:FB:94:D7:93:A1:2D:FD:8C:35:BB:92:BB:DB:B1:6F:52:2E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.68.0/22
IPv6:
2804:7b48::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271422
Signature Algorithm: sha256WithRSAEncryption
7c:93:a3:6d:c6:58:bc:29:f3:73:7e:c1:e8:49:3b:a1:59:dc:
46:9d:a6:23:92:61:f5:39:c8:00:7d:9f:55:69:c7:fb:36:70:
b0:58:da:49:92:e8:22:9b:ee:f0:b2:80:17:4c:33:ed:bf:0f:
87:22:69:33:3e:26:6e:55:41:33:db:25:d7:c6:7d:3c:42:20:
9c:c8:63:08:86:8d:0a:e8:b0:7d:a8:2b:40:53:1f:36:af:3f:
1a:8e:7f:9d:9f:16:19:1f:9e:f7:11:32:66:4e:01:58:fc:58:
df:9b:37:0d:61:48:2c:74:f5:af:b5:81:d8:cd:cf:3f:0c:c8:
77:03:b3:8c:45:ce:03:f2:8d:df:44:9a:0b:a1:a5:51:65:bf:
58:a1:79:9e:89:8c:43:13:06:6e:82:9c:b8:40:3e:48:4f:bc:
1f:7b:61:fd:4d:d2:35:54:8c:ae:e0:0d:f4:b5:f7:1e:ac:86:
74:cd:20:ab:68:03:cf:e6:e1:81:2a:29:31:d3:1b:8d:0e:d0:
cc:76:0c:4f:08:cd:c6:5a:8a:e5:69:32:5f:3d:4d:cd:c1:a2:
db:f1:b0:83:c6:01:69:fb:9b:dc:ac:20:bb:ff:7b:9c:9f:fe:
54:6a:85:5e:9a:04:1c:eb:49:be:15:65:7f:ba:ff:42:69:ba:
20:84:0c:5a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUFwIcw6KfvPz1+Irp0rOpnTJQHngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMjkyMjMxMjVaFw0yNTEwMjgyMjM2MjVaMDMxMTAvBgNV
BAMTKEM1Q0YwRkZCOTRENzkzQTEyREZEOEMzNUJCOTJCQkRCQjE2RjUyMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcliS51qShjL1s48BVMBS3Hf0Y
uX9igoLt2zgyzd9QB/Cjuclndl5zSv6wm26A2Etn6YksxobV+Jf47HxGNQMhqz2w
rIkGeS/CwdgAouoBWopufh7jVl+sm+jgn/6wvDlYyo5PgaclguYwj9s8tG5FP7XD
Q57bpneo7x2G3IOI8vIgLPW9LApCc4x9w8Vw9xfEwgB5Rq17ak7uSQCtBFiNRbhU
s3R7i3aZDFp4oi6T38ZzXXR+9M48b4WYBfpcalf6tBKpEFaF7mADQxdacBWRp9+R
5fMzCoLpv1XRQuavXDt0d6DCwnmVqatB+Q7X2SjOqwZ/q3lZdyex1NpLyttHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTFzw/7lNeToS39
jDW7krvbsW9SLjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjNZ
TkxZNnByOUhFTVpnRlIxRmFnVk5oTkp6REJiRUZ1VDE0UzNzWlo5YVQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Yz
WU5MWTZwcjlIRU1aZ0ZSMUZhZ1ZOaE5KekRCYkVGdVQxNFMzc1paOWFULzAvQzVD
RjBGRkI5NEQ3OTNBMTJERkQ4QzM1QkI5MkJCREJCMTZGNTIyRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtb1EMA0EAgACMAcDBQAoBHtIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQkPjANBgkqhkiG9w0BAQsFAAOCAQEAfJOjbcZYvCnzc37B
6Ek7oVncRp2mI5Jh9TnIAH2fVWnH+zZwsFjaSZLoIpvu8LKAF0wz7b8PhyJpMz4m
blVBM9sl18Z9PEIgnMhjCIaNCuiwfagrQFMfNq8/Go5/nZ8WGR+e9xEyZk4BWPxY
35s3DWFILHT1r7WB2M3PPwzIdwOzjEXOA/KN30SaC6GlUWW/WKF5nomMQxMGboKc
uEA+SE+8H3th/U3SNVSMruAN9LX3HqyGdM0gq2gDz+bhgSopMdMbjQ7QzHYMTwjN
xlqK5WkyXz1NzcGi2/Gwg8YBafub3Kwgu/97nJ/+VGqFXpoEHOtJvhVlf7r/Qmm6
IIQMWg==
-----END CERTIFICATE-----
Generated at Sun Nov 10 09:36:25 2024 by rpki-client on console-fra.rpki-client.org