Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer
File: EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer (raw, json)
Hash identifier: gXCNUBJ3SrjH2BMcMSQMsxfwfuRU2+9QMJ2IFdNKQzg=
Subject key identifier: EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2FDBE061C014DD02991B5C84A9824A2D86BCCCB9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.mft
caRepository: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Sep 2024 19:50:09 +0000
Certificate not after: Wed 03 Sep 2025 19:55:09 +0000
Subordinate resources: AS: 61621
AS: 267420
IP: 45.235.160.0/22
IP: 170.231.208.0/22
IP: 177.23.252.0/22
IP: 186.209.123.0/24
IP: 186.209.222.0/23
IP: 2804:4d3c::/32
Validation: Failed, certificate revoked on Wed 09 Oct 2024 03:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:db:e0:61:c0:14:dd:02:99:1b:5c:84:a9:82:4a:2d:86:bc:cc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 4 19:50:09 2024 GMT
Not After : Sep 3 19:55:09 2025 GMT
Subject: CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:eb:bf:46:56:89:eb:26:81:45:08:a0:8b:
06:1f:32:c1:2f:34:1d:0f:08:2e:e2:ea:4e:79:f9:
a7:03:3b:6a:cf:57:37:3f:47:fc:61:73:68:61:28:
d9:be:8a:82:d7:9b:40:b8:cb:a5:f5:cd:0b:1b:fe:
f0:c9:87:b4:90:49:03:9e:2c:c8:ba:d9:c8:2b:b9:
e9:26:b1:13:f7:63:fc:2c:d0:d9:b0:3d:bc:00:61:
76:f2:e5:b3:b1:1e:b6:4f:f2:70:9f:b2:e3:b6:7f:
5a:b2:ff:30:41:f1:5a:77:36:ec:c0:ea:ae:cd:a7:
a7:b0:e0:0c:09:9a:e4:40:66:45:90:2f:d4:65:10:
e9:d0:c0:e7:e9:03:04:cc:51:61:40:64:16:19:32:
34:46:88:fd:7d:22:9f:de:60:da:f3:3f:97:21:9d:
ac:b9:b1:1e:75:7d:d0:f7:b6:79:32:3f:f8:41:1a:
82:d0:84:a9:6c:1f:6c:46:62:4a:01:fb:87:05:98:
f6:9b:e0:a5:36:9c:fb:04:7c:e8:31:62:5c:9e:63:
1f:55:e8:46:db:2a:ae:db:c3:97:66:73:10:7b:5f:
e6:7e:0d:0d:9d:e9:3f:81:6e:9f:14:78:db:12:f2:
40:a7:cd:67:51:2b:b2:0f:02:1e:97:47:9c:75:29:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.160.0/22
170.231.208.0/22
177.23.252.0/22
186.209.123.0/24
186.209.222.0/23
IPv6:
2804:4d3c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61621
267420
Signature Algorithm: sha256WithRSAEncryption
8b:a0:13:40:3f:4d:b9:12:3a:c7:4d:bb:71:1b:2d:9d:b8:88:
67:5c:4d:69:0e:55:1f:f4:f2:01:6c:f2:fd:4e:21:e4:a9:79:
2a:04:ef:d4:2e:8a:6b:68:99:ea:0e:85:61:45:1c:80:d1:e5:
62:f0:9c:c7:aa:ee:b8:6e:77:17:fd:fb:62:e1:d5:87:1f:0a:
d5:ab:a3:3a:dd:a5:5d:c8:8e:2d:73:cb:a2:12:89:d2:9d:3d:
f7:3a:88:86:89:55:c2:fd:f4:8f:b3:3b:a4:b3:43:82:13:5d:
28:4b:d2:05:87:84:1b:f9:5d:28:a5:05:02:6b:c8:65:83:0c:
50:ad:52:61:f1:94:d7:33:ca:04:a9:41:e2:5c:44:33:c6:e1:
fc:d3:5e:60:d7:aa:3e:a0:4b:41:b4:b5:51:70:da:15:6a:fb:
c7:80:6a:59:f9:60:ee:25:89:8e:71:92:bd:44:be:dc:d7:b8:
bd:9d:65:4e:c7:58:7f:b2:48:3d:64:e3:92:fb:bd:e6:76:8d:
85:5f:fb:c2:38:dc:26:cf:6d:75:63:ea:92:20:43:8b:29:c5:
a7:4f:08:e0:bf:59:54:d9:8c:e0:4c:9c:23:58:30:d1:a0:39:
54:b0:17:c9:c3:ef:f8:8e:be:d0:fe:a4:b2:20:c2:9a:fc:b4:
08:86:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:17:45 2024 by rpki-client on console-ams.rpki-client.org