Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD72CD09161DDF12B1ECEF7371C9D51F0CB8076B.cer
File: FD72CD09161DDF12B1ECEF7371C9D51F0CB8076B.cer (raw, json)
Hash identifier: hxLMDoRP9nsYEXuKGKpvhNWYM396l0CVH/oFf/qOpc4=
Subject key identifier: FD:72:CD:09:16:1D:DF:12:B1:EC:EF:73:71:C9:D5:1F:0C:B8:07:6B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3928105D1273CCEEE7EA10F91CF96B0725349202
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/FD72CD09161DDF12B1ECEF7371C9D51F0CB8076B.mft
caRepository: rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 02 Sep 2024 16:58:02 +0000
Certificate not after: Mon 01 Sep 2025 17:03:02 +0000
Subordinate resources: AS: 262828
IP: 177.155.192.0/21
IP: 186.251.96.0/21
IP: 2804:2a4::/32
Validation: Failed, certificate revoked on Mon 02 Sep 2024 18:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:28:10:5d:12:73:cc:ee:e7:ea:10:f9:1c:f9:6b:07:25:34:92:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 2 16:58:02 2024 GMT
Not After : Sep 1 17:03:02 2025 GMT
Subject: CN=FD72CD09161DDF12B1ECEF7371C9D51F0CB8076B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:eb:cd:1c:f9:89:40:aa:a4:0f:9e:c9:c2:
7a:18:02:9b:3c:f3:07:99:99:8b:da:8d:1b:3b:d8:
3c:35:61:57:f8:cb:ca:00:20:13:c0:f0:64:2c:cf:
d9:a0:7f:a8:d3:53:90:f6:cc:5c:58:3f:da:f3:3b:
1c:74:6f:13:c1:94:65:e2:2c:7b:51:3f:ba:f6:20:
27:40:97:be:7f:53:0b:34:c3:25:77:1b:5f:55:f6:
71:8d:07:71:b1:a4:e1:d8:a0:c2:d8:c7:99:b5:c4:
f7:dd:99:97:2b:de:80:24:57:d6:ed:91:c0:74:d7:
bb:b8:91:f6:ad:3c:51:70:38:f6:3c:7a:88:84:18:
7c:7e:7f:26:2c:0c:5a:77:73:c8:73:1e:dc:6b:ac:
25:dd:ff:f3:70:fc:4d:af:3f:de:00:03:4e:51:b1:
01:db:3b:a2:f7:7f:e5:27:4f:30:88:37:72:ef:21:
37:2f:b6:dc:19:ed:74:c4:51:ec:9a:6a:36:50:2d:
0c:5a:49:ad:cc:5f:28:d4:76:83:57:94:fd:a1:74:
38:3d:35:c0:11:a9:50:db:5d:51:14:cc:19:f0:3e:
ba:65:de:40:17:43:a7:c4:44:e8:f9:ba:b2:b6:35:
e8:44:d0:8a:5d:36:f6:e3:46:e3:cd:09:39:02:f1:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FD:72:CD:09:16:1D:DF:12:B1:EC:EF:73:71:C9:D5:1F:0C:B8:07:6B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/FD72CD09161DDF12B1ECEF7371C9D51F0CB8076B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.155.192.0/21
186.251.96.0/21
IPv6:
2804:2a4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262828
Signature Algorithm: sha256WithRSAEncryption
3e:9b:83:f3:71:7f:e3:92:ea:eb:31:fd:1f:42:de:52:38:51:
20:7c:9a:b2:51:5e:c6:d8:ab:91:21:4c:1a:d7:49:83:14:53:
29:65:f8:47:43:ad:c2:df:b6:47:f8:5c:d1:52:1a:16:be:c1:
0d:42:bf:04:f9:00:63:07:46:15:0e:bc:e6:09:df:16:c5:1b:
a6:61:c0:2d:29:c1:d2:f7:07:df:c7:97:13:5b:54:18:38:6f:
03:b8:21:c1:7e:42:51:55:59:8f:1e:5e:1a:af:dd:25:95:87:
44:07:e9:04:84:04:93:34:0f:5f:f7:3f:73:90:2d:36:92:b7:
ae:91:f6:d9:d0:12:e1:09:8f:9e:07:27:d4:92:6f:8b:77:d6:
03:34:75:89:9d:55:6c:23:b4:4d:71:37:67:e2:7c:d3:ce:2b:
c5:82:68:e0:26:f8:6d:71:b4:07:cf:83:26:ef:8d:30:76:c9:
0d:52:d5:04:0c:23:a1:ce:e2:ba:dd:ca:3f:e7:a9:47:14:d3:
3d:16:d2:dd:a9:37:a0:70:af:6c:d6:bf:50:63:b0:4b:b9:54:
96:69:cc:3c:65:46:35:a2:b7:f7:54:cd:a9:42:6a:c2:9a:8e:
06:57:8e:9f:89:17:4e:ed:77:0a:34:5a:b4:9d:0d:45:d3:44:
80:4e:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 20:17:14 2024 by rpki-client on console-fra.rpki-client.org