Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
File: D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer (raw, json)
Hash identifier: Lhoz8RULJqNT9e16tXo9Dv7+PzT4U61efuImN0kfkzo=
Subject key identifier: D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 45596D3E90D152171B33B312C0F58FAF098228C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.mft
caRepository: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 22 Sep 2024 20:41:19 +0000
Certificate not after: Sun 21 Sep 2025 20:46:19 +0000
Subordinate resources: AS: 267586
IP: 45.70.204.0/22
IP: 2804:43b8::/32
Validation: Failed, certificate revoked on Mon 21 Oct 2024 12:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:59:6d:3e:90:d1:52:17:1b:33:b3:12:c0:f5:8f:af:09:82:28:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 22 20:41:19 2024 GMT
Not After : Sep 21 20:46:19 2025 GMT
Subject: CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:1e:e2:18:e6:85:e8:9d:84:a1:ea:45:f7:
78:22:b7:b9:2e:42:76:58:67:90:2b:b1:31:a9:71:
72:10:ac:1f:13:c7:2e:b0:7c:9f:ca:f8:91:94:b1:
02:53:41:fb:fb:75:f5:98:50:7a:63:f1:40:7d:0f:
73:b7:8f:29:d5:21:95:32:f2:20:f6:4a:20:2a:40:
64:1a:18:06:d8:91:0c:fc:e4:c2:b8:61:e9:d6:03:
c9:bd:1c:f4:e4:99:0d:c9:a3:69:5e:23:e2:3e:f6:
18:01:7f:19:53:8a:bc:9d:b1:ba:e9:95:08:88:2b:
49:d8:6d:57:70:a8:15:d4:3a:61:f7:93:a2:7b:ef:
b6:79:d1:79:10:08:8c:10:4d:52:e1:34:d0:35:4f:
04:ea:c6:5f:35:bb:99:21:09:ef:28:6a:19:61:f9:
b8:bb:a4:cc:34:68:48:c9:4e:1d:25:11:f4:09:fe:
63:e0:3d:1a:72:97:b2:7a:3e:04:62:84:29:2e:95:
23:99:90:cd:f1:02:2c:38:61:b3:bb:22:a4:07:87:
ec:ab:46:79:91:91:c4:ed:cb:10:2e:c9:82:6b:ee:
36:54:4c:4b:cc:56:ea:e8:6a:64:03:c3:74:9b:58:
bc:2b:09:1f:7c:9d:d4:1a:e2:57:50:50:d2:bb:62:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.204.0/22
IPv6:
2804:43b8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267586
Signature Algorithm: sha256WithRSAEncryption
3e:fd:42:78:9c:ba:cd:a6:30:8e:47:9d:b6:f9:b7:55:92:a4:
0a:de:2d:fe:13:57:54:37:97:06:9c:85:0d:ee:db:30:14:ed:
36:91:99:bf:ff:8c:12:69:e3:98:1b:37:b8:08:44:ea:42:08:
84:b6:0e:37:30:59:8c:57:04:30:e5:16:f8:e9:0a:42:0f:30:
82:e8:da:24:bd:55:55:48:53:ad:cb:44:33:19:54:69:83:8a:
e6:d6:d6:99:a7:50:80:7b:29:79:25:3c:6e:4c:6f:9e:f5:90:
c6:69:6f:14:f5:11:36:e2:97:8f:a8:d2:f6:f7:dd:e5:0a:60:
db:55:5f:d4:15:1c:ae:35:a0:f5:cd:10:25:ca:8a:e9:c9:2d:
a2:dc:fa:4a:9f:7f:47:a6:b4:33:4f:76:4b:8c:e4:61:8f:2c:
15:7b:bd:2c:34:e4:b3:63:9d:a3:8e:87:71:e5:a6:58:62:4e:
bd:15:8c:e0:07:42:0d:90:de:db:ae:9d:6e:df:55:13:ed:82:
5d:31:bd:5f:bf:62:6c:59:f1:85:3c:09:e1:da:5e:f3:12:2a:
1d:fd:d4:21:fe:7f:ce:91:c6:97:d1:15:51:53:54:d9:66:ea:
4a:da:c1:52:61:23:db:d3:d3:4e:67:5e:e8:a3:34:5a:e8:8a:
3a:60:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 16:36:33 2024 by rpki-client on console-ams.rpki-client.org