Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D84003289183B3DF8458686396FD00BFCE74A0DA.cer
File: D84003289183B3DF8458686396FD00BFCE74A0DA.cer (raw, json)
Hash identifier: BjwO57agdDKy+fVZkV2Qa1dPq1NRaQq/Gwu090n9W9E=
Subject key identifier: D8:40:03:28:91:83:B3:DF:84:58:68:63:96:FD:00:BF:CE:74:A0:DA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1CD0C0EC8DBBE657877CFE5E5E4A671982410803
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/D84003289183B3DF8458686396FD00BFCE74A0DA.mft
caRepository: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 29 Oct 2024 12:16:48 +0000
Certificate not after: Tue 28 Oct 2025 12:21:48 +0000
Subordinate resources: AS: 52898
IP: 168.227.156.0/22
IP: 177.184.64.0/20
IP: 2804:a9c::/32
Validation: Failed, certificate revoked on Tue 05 Nov 2024 02:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d0:c0:ec:8d:bb:e6:57:87:7c:fe:5e:5e:4a:67:19:82:41:08:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 29 12:16:48 2024 GMT
Not After : Oct 28 12:21:48 2025 GMT
Subject: CN=D84003289183B3DF8458686396FD00BFCE74A0DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:64:72:03:ca:ad:db:e7:59:3c:d9:ea:88:
42:a4:ee:d8:5b:57:f2:da:31:38:ba:ac:ec:77:8c:
fb:2a:74:f5:ed:93:c3:22:69:53:33:99:65:6b:e8:
23:99:62:1d:09:80:98:33:a3:c4:e5:6b:bc:8b:4c:
33:fd:27:9f:aa:36:c0:e8:29:8e:d6:8e:06:c3:b2:
7e:f8:22:14:e4:d5:49:39:22:f8:af:c0:de:5c:93:
cc:17:f6:79:54:c3:3a:7c:bc:2c:8b:a0:74:60:f2:
8e:f6:ab:30:70:03:70:de:e1:9b:03:70:96:4a:e0:
53:e0:c0:0b:65:09:09:32:af:52:f7:80:bc:f0:c1:
fc:36:0e:60:b0:84:8c:b1:92:8c:1d:b4:88:83:5e:
1f:b4:1f:e5:b6:60:63:8e:f8:84:a8:e1:c4:ed:b4:
97:a2:f6:e2:9b:65:fe:31:27:c0:5d:8c:b1:7b:73:
e9:42:7d:8b:46:64:aa:f3:06:84:06:a5:77:5f:9d:
0e:4b:97:9a:7f:27:65:7e:05:a9:65:79:d0:33:e5:
3f:82:16:aa:b2:1e:b3:7f:0e:c5:f5:87:4c:07:aa:
97:b8:c4:5e:0b:e4:c0:f6:8b:58:29:de:da:ae:a6:
69:fa:ff:05:5a:b1:e8:35:0a:f7:1a:b6:f3:f6:93:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D8:40:03:28:91:83:B3:DF:84:58:68:63:96:FD:00:BF:CE:74:A0:DA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/D84003289183B3DF8458686396FD00BFCE74A0DA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.156.0/22
177.184.64.0/20
IPv6:
2804:a9c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52898
Signature Algorithm: sha256WithRSAEncryption
6d:02:d1:44:ab:25:1e:25:58:4f:25:d4:f9:e7:f2:55:6f:07:
1c:25:3f:49:eb:3f:57:45:e7:91:e1:ab:ca:f5:ad:1c:df:9a:
23:c9:82:79:36:b8:f3:d5:10:c0:d7:03:02:9d:ec:c4:cd:8d:
25:ea:ce:2e:19:56:b1:8b:6b:f5:9f:cd:67:39:01:76:c9:5f:
2f:1c:8b:d2:2f:68:78:0e:8b:d4:77:b9:2f:10:8f:cc:4c:54:
2b:7b:ee:46:43:50:52:89:f8:0b:6e:41:f2:d6:37:e8:f1:7d:
8e:00:e6:43:62:d6:22:60:f9:0a:01:be:19:95:6e:6c:c3:4c:
45:96:52:bc:c8:44:76:c2:4a:07:c9:bf:7e:b1:b9:1a:e0:7e:
b4:e8:de:f2:8d:6d:d0:6f:65:89:42:f9:38:31:b8:d7:53:6c:
85:f5:54:13:16:a3:24:d1:fa:12:f5:02:fd:ec:3b:7e:68:70:
fe:30:b1:eb:78:fe:54:93:68:86:6b:02:83:a0:3d:8b:0e:a0:
e9:a4:18:31:63:36:a7:e5:5a:fa:d6:55:c2:04:a9:5a:cb:7f:
3d:f0:8e:10:b2:2a:02:31:b3:c0:32:82:70:ac:dd:43:a7:4c:
42:e3:03:ce:6c:34:6c:e7:69:74:8f:33:db:e2:c3:de:b5:50:
aa:ef:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 06:48:41 2024 by rpki-client on console-fra.rpki-client.org