Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F4EA95982C1B851684C011C92D67897C746CB48D.cer
File: F4EA95982C1B851684C011C92D67897C746CB48D.cer (raw, json)
Hash identifier: 1JZRkTcaUsJeU5zAqcG5qBnvdHE6wN9MtSkQnbM8IE8=
Subject key identifier: F4:EA:95:98:2C:1B:85:16:84:C0:11:C9:2D:67:89:7C:74:6C:B4:8D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1EA3A563B074D0968E4AB6FD9087404B837727B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/F4EA95982C1B851684C011C92D67897C746CB48D.mft
caRepository: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 05 Jul 2024 19:53:27 +0000
Certificate not after: Fri 04 Jul 2025 19:58:27 +0000
Subordinate resources: AS: 28182
IP: 170.231.128.0/21
IP: 189.89.0.0/20
IP: 2001:1294::/32
Validation: Failed, certificate revoked on Mon 11 Nov 2024 20:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a3:a5:63:b0:74:d0:96:8e:4a:b6:fd:90:87:40:4b:83:77:27:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 5 19:53:27 2024 GMT
Not After : Jul 4 19:58:27 2025 GMT
Subject: CN=F4EA95982C1B851684C011C92D67897C746CB48D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:51:65:e4:c2:e9:39:b9:f6:dc:1a:f5:ae:
bc:93:bd:75:d7:ce:77:ec:42:be:cf:0d:bd:b7:3e:
47:1d:74:36:34:5c:6d:0f:b6:7e:35:8d:ab:a7:a6:
22:5b:b2:68:94:60:4b:30:87:e0:36:3e:51:e9:bf:
d4:df:2c:6a:77:44:7e:b8:04:f7:a0:87:10:62:3e:
1c:81:1c:41:13:ea:bc:bf:e7:f1:9c:94:b1:60:d5:
99:37:fb:af:63:7e:78:56:27:81:c8:5b:e2:68:27:
95:a4:45:e0:57:c0:55:b3:5c:08:f8:40:b6:a7:3c:
00:2e:f9:63:ef:e6:36:f9:50:17:fc:71:7f:a5:48:
51:f7:03:ef:0e:48:7f:3d:d1:78:ac:46:ae:1d:39:
f0:5e:c0:6d:8e:c9:d6:45:49:3f:83:ce:e4:b5:85:
1c:75:82:39:61:c5:33:c5:10:00:34:88:89:8b:7f:
39:30:c9:23:53:2c:e6:b4:a4:a1:28:1c:c6:2c:7c:
7a:68:e9:d0:bb:ed:c7:d0:14:2c:c4:84:4e:57:8f:
b2:f1:8c:36:2a:23:b6:42:2f:1c:dc:20:da:e4:3f:
76:3b:db:1e:9e:66:1b:9c:fa:bc:54:85:96:02:0b:
a2:17:6b:fa:fa:a3:9e:d1:44:86:41:d0:92:17:e4:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:EA:95:98:2C:1B:85:16:84:C0:11:C9:2D:67:89:7C:74:6C:B4:8D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/F4EA95982C1B851684C011C92D67897C746CB48D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.128.0/21
189.89.0.0/20
IPv6:
2001:1294::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28182
Signature Algorithm: sha256WithRSAEncryption
5c:e6:1b:51:cf:d3:5b:62:61:ff:70:5b:71:ea:00:92:5c:b1:
c0:67:42:2c:02:a6:de:92:83:5f:3e:c8:bf:e2:7f:aa:f7:7f:
36:a2:85:12:c9:42:03:15:b4:a7:7c:28:82:15:55:db:08:09:
87:8a:28:85:16:2c:05:29:81:15:97:69:8f:ca:42:18:c5:f9:
3f:c9:b0:d7:0e:56:0b:08:bd:c9:9d:45:62:30:18:62:16:f9:
72:bd:74:8b:8b:12:57:a5:bd:cf:5e:06:44:e8:56:a7:be:42:
00:47:85:be:e6:4d:54:79:c2:f7:7e:63:2c:ac:48:30:04:20:
99:97:6b:bb:ab:bb:0b:3f:cf:e3:b0:3f:06:0e:e3:81:ba:95:
31:46:e2:35:23:a5:3b:1c:88:63:c1:c1:dd:2d:3c:be:7a:56:
15:9e:6d:5f:f8:bf:9a:e8:36:0d:54:87:1a:ee:69:d1:9c:da:
7e:9b:94:8c:ac:0d:6c:ef:5c:6c:b5:0a:ba:84:83:bb:a7:ba:
fe:51:13:1f:78:40:ad:85:fd:3f:b2:43:4b:db:1c:3d:09:79:
8e:62:b2:1a:91:cd:70:73:8f:84:8e:ce:6b:4d:b6:0d:af:39:
bf:14:31:ec:40:58:7d:94:36:48:2a:5a:8b:9e:e0:b9:19:5b:
60:70:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 00:00:59 2024 by rpki-client on console-fra.rpki-client.org