Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer
File: DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer (raw, json)
Hash identifier: iqSCFMatQa584tKFlSUUFrvnqrrCaH0NGJ8jrggJBcw=
Subject key identifier: DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 19480BD05A04ED1CC2185E6E887A9F3E05F52D0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.mft
caRepository: rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 26 Apr 2024 19:29:11 +0000
Certificate not after: Fri 25 Apr 2025 19:34:11 +0000
Subordinate resources: AS: 265017
IP: 170.84.140.0/22
IP: 2804:3178::/32
Validation: Failed, certificate revoked on Fri 12 Jul 2024 17:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:48:0b:d0:5a:04:ed:1c:c2:18:5e:6e:88:7a:9f:3e:05:f5:2d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 26 19:29:11 2024 GMT
Not After : Apr 25 19:34:11 2025 GMT
Subject: CN=DE52A04E8F1F5A9955E1555E60EA1A4BF5618404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:b1:db:cd:8a:59:1f:24:69:23:ac:78:c4:
fa:42:85:64:36:ef:7f:a4:3b:f0:35:bd:c1:4c:b1:
3c:24:73:85:50:a8:74:01:54:79:ed:6a:c3:61:c3:
bc:07:31:1f:1b:ed:3c:79:32:d9:ec:30:cf:4c:8a:
41:50:a4:06:57:12:3a:6c:8f:b1:8f:4c:a7:9e:9f:
a9:3a:1f:c5:9a:32:eb:f4:31:66:2a:41:5a:26:e5:
5a:c8:3c:44:6e:89:54:6e:db:72:3d:d4:28:57:71:
5f:26:92:a9:e0:07:a3:c8:16:9e:80:52:83:9f:17:
bf:8b:f1:ac:67:ac:64:8f:f0:8e:6e:3f:bb:1d:f8:
e3:aa:f8:2b:de:2e:95:2c:cc:4c:92:bd:a5:bd:2b:
09:b1:d8:51:6e:7b:f4:af:3c:f5:2e:af:72:df:d2:
49:f8:81:0c:2b:c4:d0:8d:e3:d7:14:d5:7a:23:7c:
d4:5f:df:2a:9b:7b:93:38:e4:6b:7b:f8:42:d9:92:
31:23:f8:c2:58:76:6f:b1:1a:fb:6a:e7:31:ea:87:
f3:00:cd:1c:6e:eb:3f:8b:15:d0:f8:a9:bd:f7:c7:
c0:41:ce:3f:70:cf:6b:1f:f9:73:ff:8f:75:06:81:
38:ac:e9:7c:8e:cb:04:f1:e8:cc:59:b3:40:3d:0e:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.140.0/22
IPv6:
2804:3178::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265017
Signature Algorithm: sha256WithRSAEncryption
5f:8c:f2:38:88:ae:b3:76:a9:92:02:68:35:12:e7:15:7b:b1:
33:50:c5:03:5a:bc:3d:7b:1a:46:db:bf:0a:90:da:dd:93:cf:
21:0b:e8:50:3c:dd:bd:fb:16:ff:6d:4e:2e:b1:f4:94:7d:37:
63:d1:59:d1:06:8d:f1:3e:cb:ad:e5:7f:72:74:cc:52:08:b5:
92:39:a7:7f:74:14:58:fa:c8:7b:fc:63:de:87:07:16:85:39:
16:1d:7a:a4:56:fb:78:1f:d7:9f:cc:11:d7:59:1c:d1:e9:02:
6f:0a:27:7a:42:46:ac:69:67:e4:73:b1:2c:db:06:b0:05:d0:
cd:1a:13:99:97:3e:5b:b5:0e:c3:07:cf:3c:05:96:04:16:14:
be:16:9c:6b:71:08:9c:2e:ae:91:f1:59:ec:e5:06:8b:76:30:
5a:07:fb:8c:24:2c:57:57:57:94:7e:46:2e:28:e7:f9:76:e1:
64:37:39:87:75:31:5a:c1:19:b0:2e:a1:af:fc:c5:b1:fa:a0:
4d:d1:6a:1e:79:6c:33:31:63:c8:c5:bc:a1:c3:6b:4b:30:4d:
9d:d7:55:78:e5:d9:49:43:82:ad:3f:7a:86:47:d6:27:b0:a2:
2d:49:f0:6f:05:7d:a5:ac:b5:9e:58:11:19:de:dd:e4:0f:d8:
bb:62:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 19:09:31 2024 by rpki-client on console-fra.rpki-client.org