Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.cer
File: D7F2FAC1B5025CADC06EADA362B65D3C990ED062.cer (raw, json)
Hash identifier: 3VbEyi8En6oP3cBeRIBV5ViY2yGbglr+Wfey86JWgfg=
Subject key identifier: D7:F2:FA:C1:B5:02:5C:AD:C0:6E:AD:A3:62:B6:5D:3C:99:0E:D0:62
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0FD8E2C36C6D727A5BEB2965DD952262CFB8207D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.mft
caRepository: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 17 May 2024 14:00:56 +0000
Certificate not after: Fri 16 May 2025 14:05:56 +0000
Subordinate resources: AS: 61784
IP: 138.186.184.0/22
IP: 201.55.200.0/22
IP: 2804:1948::/32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 22:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d8:e2:c3:6c:6d:72:7a:5b:eb:29:65:dd:95:22:62:cf:b8:20:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 17 14:00:56 2024 GMT
Not After : May 16 14:05:56 2025 GMT
Subject: CN=D7F2FAC1B5025CADC06EADA362B65D3C990ED062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:65:62:31:f2:e4:26:b1:d6:09:75:e9:d2:
a9:9d:46:22:d1:61:f2:64:8d:cc:f0:7a:29:ce:d4:
6d:7e:82:13:34:e9:7c:f3:ed:c4:49:c0:f5:e6:47:
11:97:e1:8b:ca:30:9b:62:a4:7d:4b:e7:57:de:a5:
34:7a:74:61:df:64:8a:fd:fd:ed:aa:ef:5f:36:50:
69:44:80:34:02:67:82:59:22:9a:fc:62:3e:36:98:
06:13:a7:69:72:d4:09:94:1b:fc:06:e5:42:ea:de:
af:1c:97:bf:cd:a2:bc:d8:0b:4c:ab:0c:86:89:85:
7e:1b:87:49:3f:72:5c:34:fe:ce:b9:b5:c2:66:f6:
39:f0:0c:50:ba:dd:5b:a7:ae:ec:00:a1:84:f8:f6:
49:c4:7e:f0:50:8f:ed:13:48:96:be:7e:87:5a:f9:
5b:05:b3:7d:b0:11:15:4b:c8:c5:b9:c9:52:fa:a5:
54:72:84:1b:b9:fa:c4:1b:43:2a:95:bf:d0:0c:6d:
00:73:b3:df:ed:dd:3a:b9:6b:62:42:86:6c:b7:e0:
e1:a7:e0:86:81:d5:3e:66:c7:90:ff:9f:72:21:89:
c9:d9:3f:42:28:d2:18:26:5b:75:9f:dd:a8:2d:e0:
6d:45:5e:13:6e:f2:85:69:f0:15:9e:86:74:22:7f:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:F2:FA:C1:B5:02:5C:AD:C0:6E:AD:A3:62:B6:5D:3C:99:0E:D0:62
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.184.0/22
201.55.200.0/22
IPv6:
2804:1948::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61784
Signature Algorithm: sha256WithRSAEncryption
b6:08:ad:73:06:a1:6e:8d:db:df:74:52:d0:8b:f0:51:c7:0f:
d5:ed:16:7e:c4:78:f0:dc:a0:f3:07:b6:fa:c7:ff:1d:d9:c4:
dd:f6:fc:51:c9:c5:a4:19:49:48:6f:01:6f:1f:4d:1e:5d:b5:
39:43:ec:96:d7:68:b3:41:8f:d7:92:64:3a:cc:55:17:2f:f4:
6a:bc:60:1b:b3:3d:18:1a:55:32:7f:2c:8c:04:60:06:42:5c:
bf:e9:ee:a7:4c:dc:32:55:db:c0:c8:f7:f1:19:0f:6c:0b:cc:
e7:eb:53:fa:c3:fa:21:74:b2:10:bf:d5:9d:52:88:22:cf:fa:
8d:ff:70:15:b2:4c:6b:5e:08:11:72:b3:34:f3:aa:7a:69:a7:
55:4f:1d:56:9b:2f:15:61:d5:df:a2:46:70:d3:2a:16:7f:86:
25:3b:31:10:60:8e:de:fa:23:65:78:bc:a6:6f:19:6d:5c:e6:
e0:e8:71:a5:92:17:a6:96:f5:23:db:b0:1c:eb:da:7c:f4:f0:
74:35:df:96:9e:f5:b4:0f:32:03:62:db:ae:86:a1:ce:af:c8:
82:d5:66:72:e3:3d:28:07:e5:66:14:db:31:c6:50:15:51:8c:
41:c5:71:fc:9b:e0:24:1b:88:15:ed:77:85:e4:db:30:ac:e6:
40:79:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 00:09:29 2024 by rpki-client on console-ams.rpki-client.org