Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC9304FDBD672DE54D9567BE11A635EC6F389B63.cer
File: CC9304FDBD672DE54D9567BE11A635EC6F389B63.cer (raw, json)
Hash identifier: 1BUspxsbK5eXc5G9huLySTihgx0aw+7tcGLMEGnjfKo=
Subject key identifier: CC:93:04:FD:BD:67:2D:E5:4D:95:67:BE:11:A6:35:EC:6F:38:9B:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 424E434A79A572006658B9B6BB5561DC26BA2B21
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/1/CC9304FDBD672DE54D9567BE11A635EC6F389B63.mft
caRepository: rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 08:54:17 +0000
Certificate not after: Thu 03 Apr 2025 08:59:17 +0000
Subordinate resources: AS: 61857
IP: 131.0.64.0/22
IP: 170.233.20.0/22
IP: 2804:1a60::/32
Validation: Failed, certificate revoked on Mon 22 Apr 2024 20:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4e:43:4a:79:a5:72:00:66:58:b9:b6:bb:55:61:dc:26:ba:2b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 08:54:17 2024 GMT
Not After : Apr 3 08:59:17 2025 GMT
Subject: CN=CC9304FDBD672DE54D9567BE11A635EC6F389B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:a3:90:57:53:0f:b2:0b:57:a5:8e:05:1e:
81:18:9b:d3:db:98:b6:82:49:fb:72:e3:76:49:d5:
50:27:0c:ae:3b:ef:f3:11:1a:d1:cc:dd:8d:51:36:
73:28:be:57:fc:d2:10:d8:b6:87:0e:a5:57:04:6f:
0f:0b:e8:84:ff:fa:a5:d0:a6:4a:c0:db:34:e0:b8:
1f:47:dd:3c:c9:d3:78:70:22:31:d3:27:7d:83:17:
23:5c:6a:e5:0f:44:4c:fb:46:b6:8c:cd:94:b5:9e:
9b:27:d4:55:84:38:cf:1c:6b:6e:bf:4e:f7:17:f7:
87:17:ca:0c:a3:37:40:04:c6:b1:54:7c:6c:10:20:
55:6a:de:c9:65:6b:90:48:21:b9:09:4a:0b:ba:58:
78:8d:2b:9e:5d:aa:f9:e5:24:dd:af:bc:83:f9:8f:
21:9a:5d:7e:b3:3b:ad:2d:8e:2c:f1:ce:1d:44:e3:
ba:25:cd:bb:7d:3a:99:7f:89:33:b5:2c:ae:55:e1:
d4:c9:ba:0f:a3:b3:45:d9:34:c0:bf:74:25:45:4b:
4a:dd:13:0a:0b:13:91:35:37:7c:f9:e1:5e:6c:fd:
81:20:38:8b:99:2b:2e:60:59:58:7d:d3:61:80:f7:
21:c7:aa:15:d3:3f:6b:09:54:f9:8a:38:53:3e:17:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:93:04:FD:BD:67:2D:E5:4D:95:67:BE:11:A6:35:EC:6F:38:9B:63
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/1/CC9304FDBD672DE54D9567BE11A635EC6F389B63.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.64.0/22
170.233.20.0/22
IPv6:
2804:1a60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61857
Signature Algorithm: sha256WithRSAEncryption
22:b1:22:86:47:26:3e:49:3b:fc:86:34:f1:5d:ff:48:dc:47:
89:56:f0:a4:9d:16:ab:37:94:28:66:15:b4:61:28:4c:29:f8:
25:f8:ac:96:d3:93:56:fe:73:04:8f:eb:ee:90:18:b2:88:c7:
53:f5:e5:c5:e0:f5:8e:b3:ca:76:32:e3:1c:9b:80:a7:56:07:
f5:62:9a:4e:ed:00:2c:09:b0:c9:9e:84:d5:59:79:32:c5:12:
e7:a6:62:a1:5b:09:56:e7:f9:c1:95:cd:47:fe:54:36:f1:c3:
2a:8b:14:58:1c:15:90:b8:37:54:e5:71:8f:37:86:f6:73:eb:
4f:70:26:7e:ac:95:41:2c:ca:79:e2:0b:9e:30:55:9a:35:d6:
d6:90:88:e9:2a:b5:1a:18:71:19:73:0d:be:a8:59:5a:7d:33:
e3:80:59:d2:6b:14:26:2f:13:6b:3a:1e:3e:1c:bc:0c:9c:3a:
e1:fe:76:4f:aa:5a:30:b2:3f:13:cd:2f:94:42:59:6a:d4:e8:
7e:8e:b1:8e:13:d6:58:6c:ea:32:64:00:50:0c:6c:09:a7:6f:
94:45:0a:2a:b2:54:ec:f5:01:ad:44:a0:77:eb:9b:0b:9a:0c:
30:74:d5:f7:66:98:a2:74:12:8b:99:61:c4:56:7f:fc:8b:ec:
05:f6:5f:ef
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUQk5DSnmlcgBmWLm2u1Vh3Ca6KyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwODU0MTdaFw0yNTA0MDMwODU5MTdaMDMxMTAvBgNV
BAMTKENDOTMwNEZEQkQ2NzJERTU0RDk1NjdCRTExQTYzNUVDNkYzODlCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8VqOQV1MPsgtXpY4FHoEYm9Pb
mLaCSfty43ZJ1VAnDK477/MRGtHM3Y1RNnMovlf80hDYtocOpVcEbw8L6IT/+qXQ
pkrA2zTguB9H3TzJ03hwIjHTJ32DFyNcauUPREz7RraMzZS1npsn1FWEOM8ca26/
TvcX94cXygyjN0AExrFUfGwQIFVq3slla5BIIbkJSgu6WHiNK55dqvnlJN2vvIP5
jyGaXX6zO60tjizxzh1E47olzbt9Opl/iTO1LK5V4dTJug+js0XZNMC/dCVFS0rd
EwoLE5E1N3z54V5s/YEgOIuZKy5gWVh902GA9yHHqhXTP2sJVPmKOFM+F6N9AgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMkwT9vWct5U2V
Z74RpjXsbzibYzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWll
WWp2b1B2b1pibWd5c29uNkF6VEtTeFBZd0VmYVBON2FZalBUY3RjVjgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vp
ZVlqdm9Qdm9aYm1neXNvbjZBelRLU3hQWXdFZmFQTjdhWWpQVGN0Y1Y4LzEvQ0M5
MzA0RkRCRDY3MkRFNTREOTU2N0JFMTFBNjM1RUM2RjM4OUI2My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCgwBAAwQCqukUMA0EAgACMAcDBQAoBBpgMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDxoTANBgkqhkiG9w0BAQsFAAOCAQEAIrEihkcm
Pkk7/IY08V3/SNxHiVbwpJ0WqzeUKGYVtGEoTCn4JfisltOTVv5zBI/r7pAYsojH
U/XlxeD1jrPKdjLjHJuAp1YH9WKaTu0ALAmwyZ6E1Vl5MsUS56ZioVsJVuf5wZXN
R/5UNvHDKosUWBwVkLg3VOVxjzeG9nPrT3AmfqyVQSzKeeILnjBVmjXW1pCI6Sq1
GhhxGXMNvqhZWn0z44BZ0msUJi8TazoePhy8DJw64f52T6paMLI/E80vlEJZatTo
fo6xjhPWWGzqMmQAUAxsCadvlEUKKrJU7PUBrUSgd+ubC5oMMHTV92aYonQSi5lh
xFZ//IvsBfZf7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org