Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EFED3695A1746730E4C46CE79182E9BA503A8744.cer
File: EFED3695A1746730E4C46CE79182E9BA503A8744.cer (raw, json)
Hash identifier: xYLqZ5ngI3TzL/kdQaxXEwVA0E77lvGdx0bfbZWr4Co=
Subject key identifier: EF:ED:36:95:A1:74:67:30:E4:C4:6C:E7:91:82:E9:BA:50:3A:87:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6F32FD8E3296041A5EEF9B8A8D8FA34F5A76CAFF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/EFED3695A1746730E4C46CE79182E9BA503A8744.mft
caRepository: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 20 Aug 2024 17:20:41 +0000
Certificate not after: Tue 19 Aug 2025 17:25:41 +0000
Subordinate resources: AS: 263518
IP: 168.197.84.0/22
IP: 191.243.212.0/22
IP: 2804:1324::/32
Validation: Failed, certificate revoked on Tue 20 Aug 2024 21:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:32:fd:8e:32:96:04:1a:5e:ef:9b:8a:8d:8f:a3:4f:5a:76:ca:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 20 17:20:41 2024 GMT
Not After : Aug 19 17:25:41 2025 GMT
Subject: CN=EFED3695A1746730E4C46CE79182E9BA503A8744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:a3:ce:9f:9c:71:d9:c6:dd:8d:73:d2:1f:
fa:56:96:8a:db:13:17:9f:a4:ea:7a:0f:25:4c:bf:
45:1a:8e:16:71:7a:fd:75:0b:44:be:24:44:85:7e:
84:da:83:5c:91:48:6b:bc:e6:e1:70:95:79:80:09:
82:b7:d6:67:2c:54:61:f8:a5:f3:49:35:f7:23:1f:
4c:93:fe:61:1f:95:5e:64:67:a1:4f:a3:3b:2a:1c:
a4:94:ca:fd:7f:85:b0:10:b7:f3:8e:ce:a5:19:7f:
63:29:65:33:ef:47:3f:80:8d:49:36:c6:e8:8c:c1:
88:ad:c6:e5:02:c3:0b:02:ee:d5:d9:07:ef:c2:5a:
7a:a2:c9:27:4c:f8:2d:97:e8:a8:e9:a5:a1:c8:30:
3d:09:7e:9b:c4:5d:a4:81:64:f7:4b:bd:67:42:c6:
d0:f0:65:2e:a1:58:ec:c3:5b:54:13:20:b0:b7:fc:
5e:5a:47:92:3d:fd:32:9b:f8:56:b5:16:55:76:01:
95:e6:77:f3:3d:a3:c6:85:57:c8:ae:18:cd:1a:8b:
a2:d5:81:9a:12:5d:05:ac:74:53:21:a1:9a:a6:e8:
16:a7:dd:3d:dd:9c:2c:91:ac:e9:51:f8:a3:52:9c:
ce:5f:7e:4f:76:9e:7c:2b:ab:cd:c6:e2:bb:33:8c:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EF:ED:36:95:A1:74:67:30:E4:C4:6C:E7:91:82:E9:BA:50:3A:87:44
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/EFED3695A1746730E4C46CE79182E9BA503A8744.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.84.0/22
191.243.212.0/22
IPv6:
2804:1324::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263518
Signature Algorithm: sha256WithRSAEncryption
27:26:ab:b1:70:0e:94:53:6c:03:5b:5a:77:bf:13:5b:ba:f7:
01:01:1e:44:34:32:4b:fe:fb:23:a7:3e:ec:6e:24:31:fe:98:
f3:a2:00:4a:d4:cd:3b:25:a9:be:94:1b:e1:4f:c7:8d:ef:82:
5b:1e:1e:c7:70:d5:ed:2c:b6:2d:17:ed:8d:a1:2d:8f:49:05:
09:a7:ed:6d:a8:29:ae:6b:28:18:6a:6c:fd:14:d5:d7:b6:0a:
78:4e:6d:28:de:f8:c3:f1:b1:e7:78:25:82:ca:c6:3a:70:61:
c4:26:a0:42:16:1e:9f:98:1b:39:c6:af:87:3e:85:84:c6:bb:
ba:ba:9d:06:8c:f3:d3:76:b5:c3:2c:86:c3:ff:91:4e:35:91:
be:df:c3:74:c0:f3:9e:40:a9:b4:08:94:3b:42:fe:1d:5d:cd:
bf:bb:ce:40:45:7c:2a:63:d9:04:9a:8c:4f:ff:90:89:78:7b:
3c:d5:a1:4f:47:79:ea:c0:3b:41:f6:28:1e:7d:b2:3b:c4:f0:
52:6b:69:37:5d:f1:90:dd:bc:ec:00:4b:21:c9:39:f2:9a:6a:
18:f8:03:71:21:73:01:3f:d4:9c:01:93:66:66:99:d2:18:e9:
d4:9a:5d:d6:42:88:f6:8a:25:bb:5a:01:78:d9:8d:be:44:73:
a6:2a:55:41
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUbzL9jjKWBBpe75uKjY+jT1p2yv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MjAxNzIwNDFaFw0yNTA4MTkxNzI1NDFaMDMxMTAvBgNV
BAMTKEVGRUQzNjk1QTE3NDY3MzBFNEM0NkNFNzkxODJFOUJBNTAzQTg3NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClKqPOn5xx2cbdjXPSH/pWlorb
ExefpOp6DyVMv0UajhZxev11C0S+JESFfoTag1yRSGu85uFwlXmACYK31mcsVGH4
pfNJNfcjH0yT/mEflV5kZ6FPozsqHKSUyv1/hbAQt/OOzqUZf2MpZTPvRz+AjUk2
xuiMwYitxuUCwwsC7tXZB+/CWnqiySdM+C2X6KjppaHIMD0JfpvEXaSBZPdLvWdC
xtDwZS6hWOzDW1QTILC3/F5aR5I9/TKb+Fa1FlV2AZXmd/M9o8aFV8iuGM0ai6LV
gZoSXQWsdFMhoZqm6Ban3T3dnCyRrOlR+KNSnM5ffk92nnwrq83G4rszjD7NAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTv7TaVoXRnMOTE
bOeRgum6UDqHRDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG05
OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZpVG4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ht
OTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAvRUZF
RDM2OTVBMTc0NjczMEU0QzQ2Q0U3OTE4MkU5QkE1MDNBODc0NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqMVUAwQCv/PUMA0EAgACMAcDBQAoBBMkMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQFXjANBgkqhkiG9w0BAQsFAAOCAQEAJyarsXAO
lFNsA1tad78TW7r3AQEeRDQyS/77I6c+7G4kMf6Y86IAStTNOyWpvpQb4U/Hje+C
Wx4ex3DV7Sy2LRftjaEtj0kFCaftbagprmsoGGps/RTV17YKeE5tKN74w/Gx53gl
gsrGOnBhxCagQhYen5gbOcavhz6FhMa7urqdBozz03a1wyyGw/+RTjWRvt/DdMDz
nkCptAiUO0L+HV3Nv7vOQEV8KmPZBJqMT/+QiXh7PNWhT0d56sA7QfYoHn2yO8Tw
UmtpN13xkN287ABLIck58ppqGPgDcSFzAT/UnAGTZmaZ0hjp1Jpd1kKI9oolu1oB
eNmNvkRzpipVQQ==
-----END CERTIFICATE-----
Generated at Tue Aug 20 22:44:56 2024 by rpki-client on console-ams.rpki-client.org