Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.cer
File: DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.cer (raw, json)
Hash identifier: YmXnrcE9URHk8Xw3kRAWoJd4aDpXUC9YoLQOVB3n0ik=
Subject key identifier: DD:BE:CC:AC:2A:F7:7D:D5:05:3A:F7:9B:57:C1:DE:38:14:E6:3E:9B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3E053FB63C2E2288435BBF21B65F7247CDE87DD4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.mft
caRepository: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 24 Sep 2024 17:57:58 +0000
Certificate not after: Tue 23 Sep 2025 18:02:58 +0000
Subordinate resources: AS: 61862
IP: 138.185.172.0/22
IP: 201.150.120.0/22
IP: 2804:1a7c::/32
Validation: Failed, certificate revoked on Mon 07 Oct 2024 04:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:05:3f:b6:3c:2e:22:88:43:5b:bf:21:b6:5f:72:47:cd:e8:7d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 24 17:57:58 2024 GMT
Not After : Sep 23 18:02:58 2025 GMT
Subject: CN=DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:ef:e2:99:29:31:e0:8f:3a:01:97:df:a6:
df:34:ae:bf:d8:84:d5:ff:2a:fe:e7:f4:63:4e:2d:
49:3e:0c:f7:3d:ae:1e:9a:35:78:28:6f:33:8a:79:
81:e5:28:6d:54:8a:90:87:d9:49:b5:2f:d1:be:1a:
74:28:a9:d1:6c:db:d4:a5:0f:f9:a5:89:6f:ac:69:
af:f9:09:f5:e5:2c:2e:53:19:74:df:4c:35:2c:26:
b8:b7:b0:a6:93:f2:49:41:cd:4a:a8:09:b5:18:1a:
f8:80:b6:67:4b:a5:4b:83:53:25:21:21:4a:13:68:
ca:b4:58:9e:35:94:b6:e9:41:3b:ac:ad:51:0c:70:
97:5b:bc:3e:78:20:c4:5b:5c:98:c1:8d:81:ee:23:
99:cc:5a:c4:63:ff:a4:23:78:54:62:40:f0:f0:b7:
28:df:20:7b:4c:06:6e:d9:8e:a7:6d:7f:af:18:14:
67:c6:49:92:0a:8f:e1:29:af:17:e0:8c:99:d7:21:
c7:5a:e0:6b:5f:e0:a0:8e:39:e9:c3:fe:54:ac:99:
b5:df:82:c6:89:b1:bd:c0:18:b7:3a:b2:fe:3e:4b:
df:a1:e9:33:93:84:44:77:8e:74:0d:5f:ce:9c:1c:
dc:d5:a5:e4:5b:c0:c2:e2:8b:e7:ce:b9:af:4a:9c:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DD:BE:CC:AC:2A:F7:7D:D5:05:3A:F7:9B:57:C1:DE:38:14:E6:3E:9B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.172.0/22
201.150.120.0/22
IPv6:
2804:1a7c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61862
Signature Algorithm: sha256WithRSAEncryption
12:d9:d5:e6:27:b9:f6:b9:d2:45:18:7e:0f:b4:cb:1c:ae:54:
d6:5f:33:cf:dc:19:df:3b:2b:34:1b:d8:3c:7c:41:47:a6:e9:
81:1c:1f:53:47:ba:15:fe:c4:33:dc:67:13:d6:a6:c6:8b:5b:
22:88:5f:f1:94:88:39:73:4d:5d:db:45:d2:41:21:5b:35:4c:
24:6c:0a:14:af:f1:53:cc:95:56:fb:27:9c:86:12:59:3c:d2:
bc:a2:df:e0:0a:4e:f1:30:b7:e1:b1:61:26:0d:79:28:e8:15:
16:76:31:28:65:ff:63:3b:17:61:7c:be:dd:81:63:80:a2:45:
a4:8e:a4:18:08:2b:53:cf:5d:e7:79:c0:8c:f8:3f:d6:02:c9:
a4:a3:e4:ed:66:3e:c9:d4:5b:c7:11:72:f7:34:55:9c:b3:c0:
f2:02:a7:3e:7d:ae:be:5f:3a:8a:7a:86:e3:6d:23:55:d6:91:
96:96:ed:4f:9f:3d:b3:92:c2:87:a0:a6:1c:4f:bd:24:e7:5b:
d1:95:c7:f3:4b:25:88:61:5f:a4:84:4b:9c:31:a0:21:ed:4f:
71:d5:6f:ab:c2:2c:f9:6b:12:dd:62:37:74:dd:d5:49:17:17:
75:69:27:c1:7b:be:09:de:5f:af:8f:ee:13:c1:49:01:1b:d8:
a5:0e:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 06:38:32 2024 by rpki-client on console-ams.rpki-client.org