Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer
File: E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer (raw, json)
Hash identifier: 0bqIiuaFHFCHOiPbElfUstzpU+4EExAzUcLJ9j63zMk=
Subject key identifier: E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4944A86A7379DE4BFF01F5739857C3790F1E6665
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.mft
caRepository: rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 12:03:32 +0000
Certificate not after: Thu 03 Apr 2025 12:08:32 +0000
Subordinate resources: AS: 270711
IP: 189.127.128.0/22
IP: 2804:7030::/32
Validation: Failed, certificate revoked on Mon 03 Jun 2024 13:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:44:a8:6a:73:79:de:4b:ff:01:f5:73:98:57:c3:79:0f:1e:66:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 12:03:32 2024 GMT
Not After : Apr 3 12:08:32 2025 GMT
Subject: CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:9a:9e:92:b2:2b:9e:3d:70:ac:36:8a:9c:
61:21:b3:b9:c1:8c:f9:a3:df:6d:fe:54:fb:f5:a6:
eb:31:71:e2:d6:20:2e:58:da:78:c1:ef:75:e1:c0:
88:4e:4a:f9:18:9a:06:e4:a3:7a:f6:3c:54:a3:dc:
e2:14:8f:c1:11:be:8e:f2:46:e0:3b:90:08:dd:f6:
76:b4:41:a7:97:40:49:1e:28:a1:42:11:4f:b7:14:
56:3a:eb:fe:29:8e:81:8e:45:7d:5c:16:e5:53:32:
0d:81:08:bf:7d:d3:42:32:89:d5:04:d4:1a:67:a3:
85:c5:14:6e:68:39:89:a4:53:aa:de:24:1b:17:01:
9d:e2:ba:fe:2f:75:f8:66:2c:ce:86:23:db:76:e3:
18:67:94:cf:e0:ba:59:c1:54:4f:ff:b1:71:62:ba:
cd:8b:07:98:6b:71:c6:2b:00:91:a4:9a:24:4f:01:
fd:b5:bf:8c:04:a3:6a:9a:f9:93:4e:0e:b9:3a:a3:
c0:7b:ac:65:fb:46:a6:9b:64:f9:95:cb:70:d4:a3:
a4:e8:c0:04:2a:f8:5a:ff:4a:e6:00:4a:a6:40:19:
1a:be:8e:17:ec:02:22:9d:18:7b:90:8c:71:16:d9:
12:ea:b5:e1:36:90:e0:1f:18:31:b0:5f:fb:93:19:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.128.0/22
IPv6:
2804:7030::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270711
Signature Algorithm: sha256WithRSAEncryption
17:6c:cf:e1:ce:b3:e8:af:00:44:3a:2b:06:4b:9f:f9:8d:40:
d2:6e:15:f2:6a:e4:75:c6:d5:6e:05:b5:0d:f6:d9:5e:2d:64:
66:e8:31:64:70:cf:ab:04:b4:bd:a2:2b:78:03:4a:96:6c:f2:
f2:2a:a4:e2:13:83:95:89:26:ca:09:69:06:a6:2e:ce:34:8a:
c3:86:86:f0:34:fe:d6:24:6c:39:41:a7:51:09:e9:3e:57:f8:
94:df:55:9e:61:50:75:68:39:75:af:6d:d5:11:41:5c:4f:03:
48:a1:8a:e7:23:92:92:05:e8:14:de:e1:76:1a:3e:1f:87:99:
81:47:dc:56:d0:6f:71:e9:95:82:16:1a:ba:5a:6e:e8:ab:8a:
f5:f9:e2:c0:37:77:c7:f3:49:ce:2d:64:8e:2f:21:46:88:23:
a2:6b:64:c5:4b:5e:56:0d:ac:c6:94:b4:7d:6d:85:5d:6d:d5:
28:95:db:69:7a:59:73:28:07:e3:50:17:3f:9a:3c:97:ae:8d:
e6:53:20:54:4d:5e:ed:c5:9a:7e:25:2c:7f:20:9e:fd:eb:7a:
24:f2:e6:c9:85:34:94:b7:58:bf:dd:ed:aa:5c:18:83:78:7c:
4b:c0:01:d9:b5:50:cd:12:0a:15:e6:09:e8:84:d2:b9:7d:43:
2c:3c:26:45
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSUSoanN53kv/AfVzmFfDeQ8eZmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMjAzMzJaFw0yNTA0MDMxMjA4MzJaMDMxMTAvBgNV
BAMTKEU5MjNEREIzREQ5NzEyQzU0MkJBOTFDMDQ5QzBGN0VEQURENUIzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnApqekrIrnj1wrDaKnGEhs7nB
jPmj323+VPv1pusxceLWIC5Y2njB73XhwIhOSvkYmgbko3r2PFSj3OIUj8ERvo7y
RuA7kAjd9na0QaeXQEkeKKFCEU+3FFY66/4pjoGORX1cFuVTMg2BCL9900IyidUE
1Bpno4XFFG5oOYmkU6reJBsXAZ3iuv4vdfhmLM6GI9t24xhnlM/gulnBVE//sXFi
us2LB5hrccYrAJGkmiRPAf21v4wEo2qa+ZNODrk6o8B7rGX7RqabZPmVy3DUo6To
wAQq+Fr/SuYASqZAGRq+jhfsAiKdGHuQjHEW2RLqteE2kOAfGDGwX/uTGf4XAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpI92z3ZcSxUK6
kcBJwPftrdWzMTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjR4
dFd4Y0Y4c29XdUwyeFJpYTNXWTJmYWtQOVJBQ25SU0d1ZnVtRFJXZmkvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y0
eHRXeGNGOHNvV3VMMnhSaWEzV1kyZmFrUDlSQUNuUlNHdWZ1bURSV2ZpLzEvRTky
M0REQjNERDk3MTJDNTQyQkE5MUMwNDlDMEY3RURBREQ1QjMzMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvX+AMA0EAgACMAcDBQAoBHAwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhdzANBgkqhkiG9w0BAQsFAAOCAQEAF2zP4c6z6K8ARDor
Bkuf+Y1A0m4V8mrkdcbVbgW1DfbZXi1kZugxZHDPqwS0vaIreANKlmzy8iqk4hOD
lYkmyglpBqYuzjSKw4aG8DT+1iRsOUGnUQnpPlf4lN9VnmFQdWg5da9t1RFBXE8D
SKGK5yOSkgXoFN7hdho+H4eZgUfcVtBvcemVghYaulpu6KuK9fniwDd3x/NJzi1k
ji8hRogjomtkxUteVg2sxpS0fW2FXW3VKJXbaXpZcygH41AXP5o8l66N5lMgVE1e
7cWafiUsfyCe/et6JPLmyYU0lLdYv93tqlwYg3h8S8AB2bVQzRIKFeYJ6ITSuX1D
LDwmRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org