
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF52085FE63E2CCA183BD4198BBF05566824B3E0.cer
File: BF52085FE63E2CCA183BD4198BBF05566824B3E0.cer (raw, json)
Hash identifier: NKHPpC0CiD4Nl2gMJIHsxD+IRlkkRdK8Iq/xG/IMj9E=
Subject key identifier: BF:52:08:5F:E6:3E:2C:CA:18:3B:D4:19:8B:BF:05:56:68:24:B3:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 2F36C4F02607E3D3FC540FA6C557C5D21D32C9F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/BF52085FE63E2CCA183BD4198BBF05566824B3E0.mft
caRepository: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 28 Aug 2023 18:22:04 +0000
Certificate not after: Mon 26 Aug 2024 18:27:04 +0000
Subordinate resources: AS: 61678
IP: 131.108.164.0/22
IP: 138.122.140.0/22
IP: 168.90.0.0/22
IP: 170.246.236.0/22
IP: 181.191.200.0/22
IP: 2804:1cd4::/32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:36:c4:f0:26:07:e3:d3:fc:54:0f:a6:c5:57:c5:d2:1d:32:c9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Aug 28 18:22:04 2023 GMT
Not After : Aug 26 18:27:04 2024 GMT
Subject: CN=BF52085FE63E2CCA183BD4198BBF05566824B3E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:08:af:05:48:42:a9:fc:74:c7:cd:5a:a5:
d0:46:5b:a6:5d:fb:5a:c4:e5:2e:47:5c:90:bf:33:
c3:e2:c6:d0:79:41:8a:50:e5:1c:b6:bf:e4:ac:24:
07:20:4f:82:87:c4:6f:05:1b:23:de:00:ff:65:28:
59:53:19:6f:88:6c:d6:b3:2d:19:3b:85:45:b4:b4:
6f:1c:32:af:27:ae:6e:72:1d:b1:53:e4:a1:69:23:
95:03:af:c2:f1:e9:52:d2:e9:39:dc:5f:3d:08:a6:
d8:10:c7:ea:15:19:d2:c9:1b:88:b9:71:67:79:89:
f6:ea:46:3c:3c:7d:0a:53:a3:ea:7a:f4:ec:b2:80:
1d:75:75:01:2b:f9:6e:86:5c:b7:f7:1d:c8:cc:ff:
91:89:94:c9:e5:bd:23:de:c6:68:f0:6b:4b:99:d0:
13:a5:c0:2d:ee:36:92:85:04:be:4d:c2:f1:fb:a0:
20:e3:be:5b:08:62:da:5e:7c:bd:ea:3d:a9:0e:31:
aa:24:b7:da:ae:a9:46:d3:ac:e9:7e:ec:53:0c:db:
75:59:41:41:04:f3:6b:1c:10:01:d7:34:02:10:c8:
3c:6d:59:a6:98:7a:6c:df:01:10:a9:f0:08:ca:ff:
27:de:f7:13:db:f2:7f:be:40:99:40:95:b3:a0:c7:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:52:08:5F:E6:3E:2C:CA:18:3B:D4:19:8B:BF:05:56:68:24:B3:E0
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/BF52085FE63E2CCA183BD4198BBF05566824B3E0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.164.0/22
138.122.140.0/22
168.90.0.0/22
170.246.236.0/22
181.191.200.0/22
IPv6:
2804:1cd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61678
Signature Algorithm: sha256WithRSAEncryption
8a:5c:3e:4d:5c:aa:e1:0a:ce:b1:11:2f:94:b6:1c:49:4d:08:
26:9f:09:c8:d1:66:a5:0f:9d:91:ce:f2:54:10:90:13:4d:b1:
c5:af:c6:ac:bd:9b:05:ea:14:6e:7c:77:a8:74:8d:15:b5:3b:
9e:23:bf:72:88:8e:4d:c7:b7:26:a0:ab:d6:4b:d0:53:97:b5:
47:f4:26:2c:10:10:0d:8f:79:a1:13:a9:6f:9c:f0:63:bc:ae:
77:04:b2:8f:13:fd:01:5f:e9:ad:35:88:d0:ab:81:eb:01:95:
83:92:eb:3b:69:4f:08:96:5b:4a:25:c4:3d:67:cc:65:61:ec:
87:56:19:fc:36:17:2b:98:27:a0:0a:a4:41:04:99:8a:35:38:
c0:6e:48:36:82:8b:e6:79:36:71:b7:40:0e:d7:e2:68:6d:84:
5d:cb:36:b3:c4:13:c5:13:95:da:03:38:4f:84:fe:1f:05:73:
71:8e:50:67:7f:42:dd:b2:c4:a3:64:51:29:3a:2f:9d:56:98:
58:8b:a1:fe:e8:39:c7:15:22:67:7b:2b:8f:47:09:4a:a1:6b:
bc:12:ac:cf:f7:ea:b3:74:46:99:27:e9:d1:6b:a9:05:50:43:
8e:db:a0:40:3a:47:89:61:aa:e0:18:c9:85:c4:55:35:55:00:
b8:d3:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:07 2023 by rpki-client on console.sobornost.net