Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.cer
File: FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.cer (raw, json)
Hash identifier: jIohgxG2/6ifS7kYw6XeBCg3uBBaPQaUhESNs2+S6JQ=
Subject key identifier: FD:1E:C9:07:2B:F5:14:B8:F7:BE:9A:8E:2C:1F:96:D0:8B:EF:F5:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5E0A8EFCD2AC45C76475E9D9927145F8484F48E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.mft
caRepository: rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 02:16:40 +0000
Certificate not after: Mon 30 Jun 2025 02:21:40 +0000
Subordinate resources: AS: 264910
IP: 168.227.116.0/22
IP: 2804:2fc0::/32
Validation: Failed, certificate revoked on Mon 23 Sep 2024 20:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:0a:8e:fc:d2:ac:45:c7:64:75:e9:d9:92:71:45:f8:48:4f:48:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 1 02:16:40 2024 GMT
Not After : Jun 30 02:21:40 2025 GMT
Subject: CN=FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:e4:e3:36:c1:a2:cd:4c:66:f7:93:86:5d:
7d:08:6d:3c:70:fe:25:d2:88:8a:4e:c3:1f:3a:1d:
65:c5:95:7e:2a:d9:85:7a:1d:44:ff:69:d3:98:2a:
5a:08:d6:41:64:aa:a8:38:ba:17:71:b4:bd:24:34:
62:16:be:8a:cd:fa:df:4c:ce:7d:26:ea:0f:fc:e5:
5f:3c:47:c3:b6:90:4a:d3:8f:a8:65:e9:93:68:86:
45:40:2b:b1:83:56:d5:12:e0:2f:9d:a8:d5:68:21:
3f:62:e9:e5:bd:00:5c:26:a8:20:4d:60:e1:05:e7:
8f:f3:06:8b:e5:ba:c1:8a:27:ab:df:57:3f:c2:88:
e0:f2:07:52:d8:35:eb:14:f4:36:61:88:a1:4d:0a:
cb:4c:5e:3b:dc:bd:d8:90:f7:c9:fd:57:6f:0d:f6:
96:af:9a:a0:ef:fa:c2:06:69:92:b0:8e:5f:42:88:
66:3b:e6:aa:49:cf:ad:6e:33:29:88:5b:40:2f:51:
e4:84:82:af:8f:b2:2b:5c:47:99:34:b5:70:4b:92:
d8:d8:14:d2:7e:97:ed:29:4a:cb:9a:02:d7:e5:cd:
fd:72:13:40:f4:92:fa:30:64:3d:84:b6:d0:0c:2e:
cc:db:81:0a:60:6c:37:dc:e1:31:c0:67:74:bf:1c:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FD:1E:C9:07:2B:F5:14:B8:F7:BE:9A:8E:2C:1F:96:D0:8B:EF:F5:83
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.116.0/22
IPv6:
2804:2fc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264910
Signature Algorithm: sha256WithRSAEncryption
1c:44:79:85:60:19:5e:68:40:c9:cd:15:16:9a:7d:af:23:8b:
c9:47:ea:35:27:da:c9:ae:9f:ba:a1:6e:24:ad:95:27:6f:78:
28:9d:24:67:09:91:d8:4e:fe:0d:96:16:f9:96:58:2a:c4:0c:
d4:7e:42:f3:0f:6f:92:3c:f2:ff:97:07:f0:52:25:7d:ec:0a:
df:e4:c9:92:6e:4d:73:36:0f:ac:0e:c7:62:5c:3b:aa:84:c1:
eb:12:c9:4c:62:cf:0b:5d:5e:1f:cf:ad:b4:d1:5b:d5:d3:ba:
55:d0:66:01:25:5a:9d:1d:ed:7e:32:d8:f0:57:94:d3:b8:5f:
8f:97:96:71:f2:c1:d4:0f:fd:aa:aa:47:de:ed:b6:dc:72:f2:
43:06:4f:eb:b4:79:f0:56:19:8c:3a:4e:21:3f:70:5b:49:ca:
73:61:c4:b0:fb:b1:fe:44:07:be:b3:23:07:d3:e0:04:73:d2:
ad:35:ee:df:f1:ae:d3:5c:4f:3a:66:61:5c:84:34:cd:90:57:
27:58:0d:d4:a5:be:14:36:0f:7e:c8:95:b8:ae:9b:8a:65:56:
4b:4e:7d:43:4e:a1:77:d5:6e:91:8b:c7:a4:3d:97:05:7f:cc:
a0:8f:2f:32:15:aa:44:fc:3c:e9:f4:3c:25:37:17:bc:e7:2b:
d9:c4:84:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 22:32:51 2024 by rpki-client on console-fra.rpki-client.org