Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.cer
File: D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.cer (raw, json)
Hash identifier: NqSevTYWGsgE5aF5HzDduCQcnFfgp9uO1DkJxbU8niQ=
Subject key identifier: D5:FB:8D:06:FF:1C:66:FE:44:3F:2C:40:C3:00:A3:BD:D4:A1:D3:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 44CED49FCA1C3A080501A6B7407BA6B0A774F67A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.mft
caRepository: rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 13 Jun 2024 21:55:45 +0000
Certificate not after: Thu 12 Jun 2025 22:00:45 +0000
Subordinate resources: AS: 28587
IP: 177.128.184.0/21
IP: 2804:da0::/32
Validation: Failed, certificate revoked on Mon 24 Jun 2024 21:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ce:d4:9f:ca:1c:3a:08:05:01:a6:b7:40:7b:a6:b0:a7:74:f6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 13 21:55:45 2024 GMT
Not After : Jun 12 22:00:45 2025 GMT
Subject: CN=D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:39:78:43:ba:cc:6f:5c:d2:96:a7:e1:16:fe:
8e:ce:96:9a:e9:f9:75:92:01:53:fb:93:36:7b:82:
7d:c7:21:24:18:b0:a4:b4:31:d8:5b:e0:8d:9b:a6:
27:0a:28:0f:a4:04:06:b8:a0:bd:f9:5d:0b:42:17:
4f:0d:bb:c0:f6:bf:d0:b5:a6:32:39:8e:14:24:70:
10:6a:e1:d6:0c:9b:b8:87:52:bc:bf:be:eb:a5:7a:
92:30:0c:21:90:c8:68:3b:e6:1f:e5:67:66:98:62:
48:ac:f7:83:0d:1d:f4:f3:46:ea:09:40:9c:3c:d4:
0f:fa:4a:75:f9:fb:3e:4b:dd:12:d6:1e:37:55:b6:
22:ab:3a:ec:38:53:d0:25:03:f3:87:12:fb:93:9b:
eb:3c:94:de:97:e8:e8:ce:cd:6e:ac:3e:63:be:7f:
ae:4b:d5:9d:57:6c:5f:7d:b3:e5:a8:c9:71:0a:40:
f3:53:d7:ae:eb:1d:de:f3:a4:0b:d5:f4:75:e6:51:
34:88:00:1f:fd:fb:b9:93:a0:9d:b7:5f:f3:bc:36:
58:54:99:db:89:bb:b3:90:01:1f:52:1f:cb:9d:01:
67:21:06:84:f2:1c:a4:c9:23:e8:1b:af:b4:40:7e:
c0:65:6e:5a:bb:d4:b1:48:ac:b8:d6:eb:40:dc:66:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D5:FB:8D:06:FF:1C:66:FE:44:3F:2C:40:C3:00:A3:BD:D4:A1:D3:D1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.184.0/21
IPv6:
2804:da0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28587
Signature Algorithm: sha256WithRSAEncryption
75:a8:e3:5d:1b:0b:05:d9:26:15:d7:aa:75:8b:f0:65:e8:3e:
5c:58:ab:3f:a8:4a:70:5c:eb:9c:5b:ab:2b:8f:5a:a0:3f:2d:
34:18:03:88:6a:bc:4a:42:4e:28:67:a5:2d:62:1b:12:f7:09:
83:7f:62:48:8c:49:cf:56:12:d1:1b:76:a4:ba:3e:88:5a:23:
c1:6a:9e:7f:d5:13:76:67:a9:a4:5c:6e:ac:6f:34:b8:89:e7:
05:5c:52:84:10:7c:58:b6:5e:dc:18:a5:44:ca:a9:92:bc:24:
87:64:b4:73:28:03:f9:fc:6b:38:cd:1e:75:34:c7:d6:51:28:
ce:b5:97:4b:a6:df:f6:49:10:b8:d2:0b:13:58:51:77:47:13:
ab:f6:ba:aa:28:ab:9d:d1:fb:83:2a:ef:32:4a:21:08:83:9f:
75:4e:22:2c:76:d0:71:1f:ef:75:ce:d0:7a:4a:dc:7f:61:7a:
3a:10:0b:be:37:b4:0c:97:05:f9:88:f1:fb:53:ad:cb:94:61:
9b:bf:a3:ee:88:97:92:e7:05:87:ef:05:b5:47:ec:00:2c:10:
cf:75:e0:a6:d2:69:99:d2:83:a1:3e:c0:39:a1:d3:28:f4:24:
35:58:b6:fc:25:7b:81:f9:10:a9:b7:96:95:02:7a:c9:5c:de:
a2:3a:13:3f
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIURM7Un8ocOggFAaa3QHumsKd09nowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MTMyMTU1NDVaFw0yNTA2MTIyMjAwNDVaMDMxMTAvBgNV
BAMTKEQ1RkI4RDA2RkYxQzY2RkU0NDNGMkM0MEMzMDBBM0JERDRBMUQzRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyOXhDusxvXNKWp+EW/o7Olprp
+XWSAVP7kzZ7gn3HISQYsKS0Mdhb4I2bpicKKA+kBAa4oL35XQtCF08Nu8D2v9C1
pjI5jhQkcBBq4dYMm7iHUry/vuulepIwDCGQyGg75h/lZ2aYYkis94MNHfTzRuoJ
QJw81A/6SnX5+z5L3RLWHjdVtiKrOuw4U9AlA/OHEvuTm+s8lN6X6OjOzW6sPmO+
f65L1Z1XbF99s+WoyXEKQPNT167rHd7zpAvV9HXmUTSIAB/9+7mToJ23X/O8NlhU
mduJu7OQAR9SH8udAWchBoTyHKTJI+gbr7RAfsBlblq71LFIrLjW60DcZoAXAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTV+40G/xxm/kQ/
LEDDAKO91KHT0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnBF
ZUJpM0R4NGZScU5iRmJiUFc0NVNzcUNDQk1TTTdmQmt5R1FOSEN5M3ovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJw
RWVCaTNEeDRmUnFOYkZiYlBXNDVTc3FDQ0JNU003ZkJreUdRTkhDeTN6LzAvRDVG
QjhEMDZGRjFDNjZGRTQ0M0YyQzQwQzMwMEEzQkRENEExRDNEMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsYC4MA0EAgACMAcDBQAoBA2gMBkGCCsGAQUFBwEI
AQH/BAowCKAGMAQCAm+rMA0GCSqGSIb3DQEBCwUAA4IBAQB1qONdGwsF2SYV16p1
i/Bl6D5cWKs/qEpwXOucW6srj1qgPy00GAOIarxKQk4oZ6UtYhsS9wmDf2JIjEnP
VhLRG3akuj6IWiPBap5/1RN2Z6mkXG6sbzS4iecFXFKEEHxYtl7cGKVEyqmSvCSH
ZLRzKAP5/Gs4zR51NMfWUSjOtZdLpt/2SRC40gsTWFF3RxOr9rqqKKud0fuDKu8y
SiEIg591TiIsdtBxH+91ztB6Stx/YXo6EAu+N7QMlwX5iPH7U63LlGGbv6PuiJeS
5wWH7wW1R+wALBDPdeCm0mmZ0oOhPsA5odMo9CQ1WLb8JXuB+RCpt5aVAnrJXN6i
OhM/
-----END CERTIFICATE-----
Generated at Tue Jun 25 03:16:33 2024 by rpki-client on console-ams.rpki-client.org