Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE9CCE06E83BD5D6C431D0ABE8840F143543EDFF.cer
File: DE9CCE06E83BD5D6C431D0ABE8840F143543EDFF.cer (raw, json)
Hash identifier: XalV4NrEfSHxRG8Rc9+DNhHTxwM7jTpsUOASSxLWFs8=
Subject key identifier: DE:9C:CE:06:E8:3B:D5:D6:C4:31:D0:AB:E8:84:0F:14:35:43:ED:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4C21C9375270321E9E3B132CCF60A67016953669
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/1/DE9CCE06E83BD5D6C431D0ABE8840F143543EDFF.mft
caRepository: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:26:33 +0000
Certificate not after: Wed 02 Apr 2025 18:31:33 +0000
Subordinate resources: AS: 28165
IP: 131.255.100.0/22
IP: 138.59.148.0/22
IP: 138.204.92.0/22
IP: 170.81.168.0/22
IP: 177.184.192.0/20
IP: 177.222.16.0/20
IP: 187.62.208.0/20
IP: 191.240.144.0/20
IP: 200.229.224.0/20
IP: 2804:340::/32
Validation: Failed, certificate revoked on Sun 30 Jun 2024 11:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:21:c9:37:52:70:32:1e:9e:3b:13:2c:cf:60:a6:70:16:95:36:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:26:33 2024 GMT
Not After : Apr 2 18:31:33 2025 GMT
Subject: CN=DE9CCE06E83BD5D6C431D0ABE8840F143543EDFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:87:cb:20:9f:53:53:8b:bc:ad:df:5f:61:
9e:1d:d1:6f:35:e9:2e:1d:b5:a1:15:85:77:75:f0:
ba:c7:a8:2e:18:bb:28:a5:65:8b:6e:e5:dc:a9:26:
72:4e:bf:e2:08:45:bb:ee:a5:29:2e:35:f2:08:5b:
32:9d:83:d3:9a:2d:2f:74:b9:13:85:17:97:92:60:
78:ff:94:47:45:fe:0c:25:7c:3c:24:83:3c:ae:7f:
65:03:9b:6e:bd:c4:5a:17:9f:db:c4:bc:8d:51:1f:
e8:de:ee:1b:77:9b:b3:fd:21:7e:24:58:c0:83:0e:
4d:0a:b3:09:dd:80:b9:d6:e8:02:4e:6d:f6:ee:c8:
c6:34:79:8a:1b:79:b6:e5:39:73:61:c3:d0:d4:2b:
de:eb:79:1d:71:83:84:2a:ac:39:bc:33:91:a3:f6:
79:6b:f3:48:d4:c3:02:93:a5:bf:5b:28:43:4b:f0:
64:cb:85:a2:3b:00:cc:65:57:43:02:8b:f9:a8:a4:
cb:81:1c:4b:52:cf:e7:5c:72:b6:b0:a1:c1:16:7a:
04:58:0d:39:4c:ac:5e:83:6e:01:0f:35:c9:0f:71:
27:3e:60:01:8f:d6:ef:93:ab:25:4e:52:5a:c8:56:
e8:cf:5b:d7:bd:f5:8c:85:a0:75:2c:4a:1e:84:e1:
7f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DE:9C:CE:06:E8:3B:D5:D6:C4:31:D0:AB:E8:84:0F:14:35:43:ED:FF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/1/DE9CCE06E83BD5D6C431D0ABE8840F143543EDFF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.100.0/22
138.59.148.0/22
138.204.92.0/22
170.81.168.0/22
177.184.192.0/20
177.222.16.0/20
187.62.208.0/20
191.240.144.0/20
200.229.224.0/20
IPv6:
2804:340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28165
Signature Algorithm: sha256WithRSAEncryption
1d:f6:fa:98:a7:96:b2:cf:24:49:8b:0b:6f:fb:c0:fc:b1:1c:
0b:db:23:be:c2:db:54:c4:49:dc:a8:df:fc:8b:94:11:dd:ec:
ec:e3:da:42:f0:95:c5:7f:86:d2:3d:9c:97:b3:d3:53:f3:cb:
d9:eb:20:3e:ee:62:8f:4f:f2:bb:a4:98:49:dc:50:84:74:fa:
73:1e:00:ea:8a:d6:9b:f1:10:33:72:06:42:8b:bf:c0:17:9b:
2e:e8:f0:92:c7:fb:83:1e:1d:4e:33:78:8d:3f:43:14:00:58:
78:74:49:54:d8:d7:5b:96:20:d1:6f:3a:70:35:d7:26:8e:e2:
d6:9c:f4:6c:ca:b2:92:23:ab:58:b0:4f:91:76:5d:55:28:a2:
3b:80:c3:19:18:44:ac:31:11:6d:f0:dd:21:e4:30:11:71:82:
c1:f9:b9:26:8a:bd:57:35:05:5e:15:1d:77:44:6d:9c:6b:2f:
db:03:12:75:fa:5e:b7:11:5f:75:ff:0a:aa:fd:4e:5e:80:7a:
38:1d:15:8c:1b:6b:85:3e:12:16:f3:a5:44:b7:b2:74:64:6d:
46:f9:dc:c1:d7:da:25:ea:d8:11:68:50:d2:e8:23:a3:de:ca:
7d:dd:d0:0a:41:2f:5e:eb:8d:81:60:d9:1b:57:d2:15:1b:3a:
e2:45:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 17:34:07 2024 by rpki-client on console-fra.rpki-client.org