Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8.cer
File: EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8.cer (raw, json)
Hash identifier: hfdzcYYQQMestrj7K/p4gwxJ0AXWhsXH9ush8uIAyio=
Subject key identifier: ED:DD:DF:E4:9B:BF:50:6D:DE:4C:0D:F6:33:7B:E4:A0:5D:CD:12:B8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 620F9AC9A50C9307F4A92F5B1543BFD358FAD598
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8.mft
caRepository: rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 12 Jun 2024 12:58:36 +0000
Certificate not after: Wed 11 Jun 2025 13:03:36 +0000
Subordinate resources: AS: 28263
IP: 187.17.160.0/20
IP: 201.49.64.0/19
IP: 2804:4f8::/32
Validation: Failed, certificate revoked on Fri 12 Jul 2024 23:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0f:9a:c9:a5:0c:93:07:f4:a9:2f:5b:15:43:bf:d3:58:fa:d5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 12 12:58:36 2024 GMT
Not After : Jun 11 13:03:36 2025 GMT
Subject: CN=EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:68:c3:ec:62:73:97:87:35:60:c1:6b:60:
33:c4:59:71:d3:15:e8:db:04:53:81:b2:8d:69:fc:
50:54:e1:da:47:5f:b4:05:b0:db:aa:cc:b5:d5:30:
ca:65:1b:a9:10:e0:1c:dc:b3:90:36:8e:ff:08:6c:
7e:d9:85:f6:e9:af:12:82:16:62:3d:e8:37:5d:a5:
f6:26:e9:f8:f5:e1:18:c2:67:bd:6a:39:e1:c6:49:
88:07:1b:6c:7c:2a:8b:e4:8b:c5:23:67:22:56:0f:
bb:ed:d5:54:5e:e8:00:5e:6e:be:35:c9:fe:b8:53:
b9:ce:e6:12:8d:17:cb:19:55:6b:f4:7a:70:eb:f5:
7a:00:48:c5:77:ac:14:1f:0e:6f:0b:b8:5d:de:c8:
a2:59:de:55:f1:31:58:7b:a2:1b:c8:6c:41:2b:69:
54:ad:91:06:cf:50:ab:ad:27:ee:f6:9f:0c:d8:c3:
39:a3:53:84:f2:b7:ae:39:42:89:48:31:04:53:e9:
2b:4c:07:ff:6e:b8:a2:d4:68:d7:ba:ac:49:e6:5a:
a8:11:8f:49:71:93:35:70:9b:7e:2c:27:1c:2a:a8:
63:1b:a4:77:28:82:d5:95:92:1a:69:35:45:09:09:
0f:ba:20:04:3d:d1:d2:c9:15:e6:9e:3d:a8:5e:b8:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
ED:DD:DF:E4:9B:BF:50:6D:DE:4C:0D:F6:33:7B:E4:A0:5D:CD:12:B8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.17.160.0/20
201.49.64.0/19
IPv6:
2804:4f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28263
Signature Algorithm: sha256WithRSAEncryption
bb:c3:63:8e:1c:59:00:b0:60:97:53:58:a7:c4:c2:3f:74:9c:
3f:7a:40:37:66:09:b2:87:bf:1e:22:42:5f:69:83:79:c1:c3:
a1:87:ee:9b:68:1c:eb:06:32:72:3e:e9:35:59:d2:2a:fb:ba:
73:8f:bd:6c:57:9e:13:79:09:f3:a2:a1:ae:0b:6e:bc:9d:93:
1c:0f:55:d4:1e:94:d1:09:72:89:19:3e:59:f5:ea:5d:4a:71:
30:f0:f4:26:24:74:5b:f3:ea:5c:2b:92:30:da:17:58:82:63:
e8:3e:ea:45:70:d8:df:15:40:22:fe:74:a4:b8:02:53:c1:db:
3d:7f:d8:5f:68:9a:f3:3c:5c:ae:73:c5:bb:13:b2:95:af:83:
be:8c:32:e4:43:fb:b2:27:88:cb:b0:59:86:dc:20:9a:8e:a0:
47:27:62:6a:36:7f:17:dd:e4:a8:af:54:8d:e1:b8:99:43:79:
7e:18:a5:4a:38:8b:06:12:80:10:8a:b5:d9:18:c9:63:e8:ce:
84:3e:3d:85:44:ca:1b:0b:dd:f5:3e:cf:a2:8e:31:91:4e:a9:
69:19:e5:bc:b7:67:37:12:00:5d:96:ef:fc:28:ce:c1:85:30:
7a:e6:8c:d0:a3:fb:c3:61:45:a8:e3:17:6e:13:9b:54:4b:bc:
72:1a:6b:d1
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUYg+ayaUMkwf0qS9bFUO/01j61ZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MTIxMjU4MzZaFw0yNTA2MTExMzAzMzZaMDMxMTAvBgNV
BAMTKEVERERERkU0OUJCRjUwNkRERTRDMERGNjMzN0JFNEEwNURDRDEyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QmjD7GJzl4c1YMFrYDPEWXHT
FejbBFOBso1p/FBU4dpHX7QFsNuqzLXVMMplG6kQ4Bzcs5A2jv8IbH7ZhfbprxKC
FmI96DddpfYm6fj14RjCZ71qOeHGSYgHG2x8Kovki8UjZyJWD7vt1VRe6ABebr41
yf64U7nO5hKNF8sZVWv0enDr9XoASMV3rBQfDm8LuF3eyKJZ3lXxMVh7ohvIbEEr
aVStkQbPUKutJ+72nwzYwzmjU4Tyt645QolIMQRT6StMB/9uuKLUaNe6rEnmWqgR
j0lxkzVwm34sJxwqqGMbpHcogtWVkhppNUUJCQ+6IAQ90dLJFeaePaheuHyhAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTt3d/km79Qbd5M
DfYze+SgXc0SuDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmY3
ZVk3a3JYdHJON2h2dDN4SzNwNnNmNGtEcFZDQnZUZG9YdnJBY1RLVDYvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJm
N2VZN2tyWHRyTjdodnQzeEszcDZzZjRrRHBWQ0J2VGRvWHZyQWNUS1Q2LzEvRURE
RERGRTQ5QkJGNTA2RERFNEMwREY2MzM3QkU0QTA1RENEMTJCOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQEuxGgAwQFyTFAMA0EAgACMAcDBQAoBAT4MBkGCCsG
AQUFBwEIAQH/BAowCKAGMAQCAm5nMA0GCSqGSIb3DQEBCwUAA4IBAQC7w2OOHFkA
sGCXU1inxMI/dJw/ekA3Zgmyh78eIkJfaYN5wcOhh+6baBzrBjJyPuk1WdIq+7pz
j71sV54TeQnzoqGuC268nZMcD1XUHpTRCXKJGT5Z9epdSnEw8PQmJHRb8+pcK5Iw
2hdYgmPoPupFcNjfFUAi/nSkuAJTwds9f9hfaJrzPFyuc8W7E7KVr4O+jDLkQ/uy
J4jLsFmG3CCajqBHJ2JqNn8X3eSor1SN4biZQ3l+GKVKOIsGEoAQirXZGMlj6M6E
Pj2FRMobC931Ps+ijjGRTqlpGeW8t2c3EgBdlu/8KM7BhTB65ozQo/vDYUWo4xdu
E5tUS7xyGmvR
-----END CERTIFICATE-----
Generated at Sat Jul 13 01:43:24 2024 by rpki-client on console-fra.rpki-client.org