Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.cer
File: F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.cer (raw, json)
Hash identifier: fKme0dhCMr5TiNJSPCHhHv+nOiUBJMSelqGvLtNfNBc=
Subject key identifier: F5:55:F0:7E:CB:5B:B2:9A:57:C2:CD:48:AB:80:59:1E:9C:AF:E2:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1A900271318D9BDF1C339D5A224D2103726CF0ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.mft
caRepository: rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 17:35:21 +0000
Certificate not after: Thu 03 Apr 2025 17:40:21 +0000
Subordinate resources: AS: 265239
IP: 167.250.252.0/22
IP: 170.239.176.0/22
IP: 2804:2cb8::/32
Validation: Failed, certificate revoked on Thu 02 May 2024 04:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:90:02:71:31:8d:9b:df:1c:33:9d:5a:22:4d:21:03:72:6c:f0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 17:35:21 2024 GMT
Not After : Apr 3 17:40:21 2025 GMT
Subject: CN=F555F07ECB5BB29A57C2CD48AB80591E9CAFE297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:71:9b:7c:4e:85:12:ca:06:fd:71:50:49:
d3:59:4f:8d:48:fe:00:2d:1e:02:98:dd:43:61:b9:
19:82:69:1a:32:73:cf:d3:2b:46:0f:9c:b2:03:b0:
4f:fc:13:90:22:af:67:52:ca:c9:83:6c:a5:f0:14:
bc:7d:33:e9:e4:04:71:02:c9:44:10:37:c5:0d:9b:
7c:ea:a8:c2:c9:29:40:33:6a:c4:3a:2f:6e:f7:28:
14:9c:15:2b:93:bd:0c:5e:b7:f0:0d:18:9b:11:6c:
fc:6f:ec:32:85:85:92:7f:03:f8:b7:1c:7a:b6:3a:
77:2e:df:bd:0b:f5:d2:e1:d2:10:74:26:69:07:62:
eb:53:41:24:0a:f7:44:ca:b2:99:1f:80:90:3c:43:
77:c1:cf:1c:9a:e7:5d:d6:a9:2a:b1:55:93:53:27:
30:18:55:31:76:a7:f6:f2:9e:e0:e0:0f:c5:36:60:
b3:11:3c:b3:d5:f3:8a:a2:84:08:1d:be:c2:65:14:
6d:0b:25:d1:f6:ae:cc:35:20:65:fa:c1:74:3f:d4:
0d:58:51:f4:5c:50:9f:7c:78:ad:a9:5c:f5:b3:51:
3a:6b:af:86:1e:18:fb:7c:78:84:55:d9:b8:23:c7:
e1:5b:26:04:1e:65:b1:4d:75:4a:67:39:c8:3f:cd:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F5:55:F0:7E:CB:5B:B2:9A:57:C2:CD:48:AB:80:59:1E:9C:AF:E2:97
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.252.0/22
170.239.176.0/22
IPv6:
2804:2cb8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265239
Signature Algorithm: sha256WithRSAEncryption
43:0e:2d:27:bd:90:f2:3c:0c:54:c8:6e:e0:46:fc:3a:c4:33:
02:39:b1:7f:77:5a:c0:61:88:4e:db:30:dc:f1:14:70:08:10:
ba:b0:59:b2:c4:8c:35:35:67:3c:36:41:53:a3:9b:d7:77:e8:
5b:7d:7f:78:8c:9f:cf:80:09:10:09:e5:54:58:b5:6e:44:6a:
79:be:0f:3f:ad:f9:9c:0b:f3:25:f1:25:15:da:b1:58:9a:a5:
f9:ed:76:15:ca:57:01:ea:c5:8c:11:7a:41:91:fe:35:3b:66:
10:ba:bb:b0:fa:09:35:23:e8:05:95:e1:e6:c1:5a:cf:f1:34:
56:15:3a:cd:5e:34:94:f6:7e:ad:b9:56:e9:03:16:64:2f:16:
72:1a:02:be:9c:98:8f:15:bd:46:c0:5b:5e:24:19:43:49:d4:
40:b2:69:97:b2:b2:e0:79:13:d7:b5:20:e0:f1:d1:79:fd:af:
42:f7:34:ce:1f:b7:42:c2:99:50:22:5d:5c:ca:9e:24:7b:32:
0e:4d:30:24:4a:a5:a6:70:e4:f6:ad:11:b9:36:c7:87:b2:43:
ef:b2:5d:ca:1f:f1:a5:51:37:a4:5e:b6:07:21:cd:ee:20:3e:
a1:5f:df:d5:29:9b:17:05:9d:5c:00:8d:9b:2b:70:2b:55:8a:
cc:63:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org