Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5DF0DB4B48E33CD218CDE0A8C2E8C81ED9B9DF50.cer
File: 5DF0DB4B48E33CD218CDE0A8C2E8C81ED9B9DF50.cer (raw, json)
Hash identifier: m5RqQTPKZqtvLAMWE5m+MktQGIFxcQ5Tc6ZGQ9YFP0Y=
Subject key identifier: 5D:F0:DB:4B:48:E3:3C:D2:18:CD:E0:A8:C2:E8:C8:1E:D9:B9:DF:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 64D8424EFB73590E0EDFFA3C98152527E7B3167E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/5DF0DB4B48E33CD218CDE0A8C2E8C81ED9B9DF50.mft
caRepository: rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 09 Nov 2024 22:42:53 +0000
Certificate not after: Sat 08 Nov 2025 22:47:53 +0000
Subordinate resources: AS: 267556
IP: 45.70.0.0/22
IP: 2804:4338::/32
Validation: Failed, certificate revoked on Sat 09 Nov 2024 22:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d8:42:4e:fb:73:59:0e:0e:df:fa:3c:98:15:25:27:e7:b3:16:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 9 22:42:53 2024 GMT
Not After : Nov 8 22:47:53 2025 GMT
Subject: CN=5DF0DB4B48E33CD218CDE0A8C2E8C81ED9B9DF50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:d9:37:17:23:a7:ae:5e:f6:07:c9:6e:f6:
c5:95:0b:8d:cc:f0:74:a1:40:52:16:4e:87:dd:38:
70:94:f6:b5:08:13:9a:e8:e3:55:eb:7f:1a:46:b2:
b9:ab:7c:e3:3e:4d:9a:0b:a7:ce:bb:a3:6d:a8:1b:
6a:29:ac:53:ed:cd:c2:24:d0:77:88:7d:a3:f5:0b:
97:ec:a1:05:ed:8c:1a:5f:4d:b6:74:6f:0a:8b:46:
a0:a3:e7:59:72:38:0a:b4:1d:59:31:be:ce:b8:95:
c1:eb:00:53:93:7c:ff:a5:77:90:c7:05:f6:28:72:
ab:ec:e2:61:f0:5e:24:0a:02:05:f2:df:c3:aa:ce:
b4:37:32:ab:77:61:2b:cd:68:82:ef:66:0b:73:78:
78:46:c4:b2:1c:d5:e4:f7:16:c1:e4:9f:d7:bd:10:
73:66:af:0e:2d:7c:db:9a:91:5e:0f:bc:71:cf:76:
76:c5:57:20:66:76:dd:a2:70:3c:1b:5d:fd:6c:ce:
45:c2:6f:6a:5f:48:62:e9:40:e6:d6:f9:ce:3c:eb:
29:68:b8:82:dd:9a:79:ba:06:9e:94:a1:5a:74:f8:
1a:6e:9b:4b:51:bb:44:81:72:4b:34:81:bc:4a:6c:
1b:e4:f6:75:5a:d0:35:cf:da:9a:73:ec:70:60:ad:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5D:F0:DB:4B:48:E3:3C:D2:18:CD:E0:A8:C2:E8:C8:1E:D9:B9:DF:50
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/5DF0DB4B48E33CD218CDE0A8C2E8C81ED9B9DF50.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.0.0/22
IPv6:
2804:4338::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267556
Signature Algorithm: sha256WithRSAEncryption
c8:bf:d4:c5:40:84:44:e1:cd:33:2d:a0:6f:10:20:f6:17:30:
72:62:af:23:b8:41:13:20:4c:42:13:81:32:00:2d:f1:1f:b3:
6e:0e:d7:be:28:57:b1:a9:2e:9b:cd:20:94:12:f2:3b:53:e1:
d0:61:58:99:b1:d3:d5:cb:a4:1c:6b:53:a3:a8:4a:4a:76:93:
73:40:7f:2d:c6:40:42:67:a0:95:e3:3f:a5:03:e5:83:74:d6:
9a:7c:05:4c:9a:cf:02:67:e1:37:95:aa:6c:78:88:43:48:06:
53:a2:c8:83:1b:15:34:41:27:29:f7:8f:a0:09:cb:16:7b:74:
a1:d9:e8:3e:f9:d2:9b:99:b8:43:2f:15:44:28:a3:4b:c2:46:
b0:12:0f:87:0a:6a:a4:c3:f8:e8:ee:07:0f:7f:aa:8c:35:54:
e6:e1:c5:b3:11:e2:98:94:57:0a:97:40:22:3b:f8:a4:19:9e:
dd:6b:12:71:31:ee:6d:28:09:de:03:d3:8a:8e:b6:18:45:80:
67:cd:63:81:f7:5d:18:83:14:f2:9e:47:e6:a5:bd:c0:1b:3a:
4c:bb:54:dd:7e:6e:59:73:08:5b:fe:9a:81:27:f5:31:f6:07:
03:64:96:d3:59:5e:33:24:e7:68:94:0a:8d:3a:74:86:ae:92:
12:27:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 04:32:19 2024 by rpki-client on console.sobornost.net