Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.cer
File: 8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.cer (raw, json)
Hash identifier: hBNkQ5CqW0ACtdsGPDACk+Tln2c//Ge0v2SMgNo93nU=
Subject key identifier: 8C:E0:72:C7:0B:E0:F9:CD:CB:8A:C1:B3:9B:64:F8:77:72:C8:64:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 35114B5518BFD7488001AF3DD5B3F5F27E43E576
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.mft
caRepository: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 02 Dec 2024 13:29:13 +0000
Certificate not after: Mon 01 Dec 2025 13:34:13 +0000
Subordinate resources: AS: 262675
IP: 131.255.52.0/22
IP: 186.233.228.0/22
IP: 2804:a44::/32
Validation: Failed, certificate revoked on Sat 18 Jan 2025 03:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:11:4b:55:18:bf:d7:48:80:01:af:3d:d5:b3:f5:f2:7e:43:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 2 13:29:13 2024 GMT
Not After : Dec 1 13:34:13 2025 GMT
Subject: CN=8CE072C70BE0F9CDCB8AC1B39B64F87772C86479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:8b:dc:c6:44:5b:9a:43:f9:6c:48:88:1b:
8c:75:b4:64:94:61:dd:d6:5f:d6:3d:30:08:bb:e8:
9b:d3:cd:ec:27:67:2f:ef:57:17:d3:74:b7:81:29:
9b:85:b8:62:5c:78:25:ce:6a:73:06:62:89:2e:1e:
2b:93:cb:b9:8a:e0:6c:77:6f:13:1d:d3:21:bd:fc:
46:3b:4a:be:30:21:2c:d8:66:fc:7f:1a:06:22:25:
40:82:7f:3e:56:aa:f0:5b:8e:2e:02:34:d2:a2:51:
1a:26:27:69:9b:33:68:df:c4:09:be:29:a9:be:c1:
a2:5d:80:bf:8d:db:44:f6:d7:1c:a3:9e:47:3b:69:
ff:20:ae:d0:4f:bf:ee:84:ac:8a:5a:76:8e:c2:8a:
ac:5b:d0:40:55:46:dc:0e:44:93:c5:11:f0:8a:ea:
8c:c3:e3:56:ac:e4:40:74:91:0a:5d:79:b6:a6:99:
1e:d1:d3:60:f9:3d:49:14:01:e1:fc:e1:93:13:a6:
e4:a0:06:25:c4:cb:3a:d3:79:9b:25:b2:c1:81:6c:
8b:d0:19:dd:96:45:59:ed:2a:2f:c5:a1:2a:43:05:
a5:be:df:96:64:a3:5f:b2:06:75:9f:41:15:30:8c:
e6:e4:cf:57:9c:4d:ee:05:9a:d6:0a:61:15:f9:d2:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8C:E0:72:C7:0B:E0:F9:CD:CB:8A:C1:B3:9B:64:F8:77:72:C8:64:79
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.52.0/22
186.233.228.0/22
IPv6:
2804:a44::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262675
Signature Algorithm: sha256WithRSAEncryption
94:0e:fe:ed:95:e3:c9:7d:21:46:a1:3d:45:c1:e8:50:e1:d9:
5c:84:bb:4f:2a:30:8a:26:ab:40:90:25:91:cf:70:78:e1:bf:
04:50:10:8a:49:30:5a:2e:40:7d:22:69:1b:b2:39:68:50:fe:
08:88:8e:0b:3d:fe:56:ac:71:ac:1b:06:32:ee:db:31:d7:12:
b4:72:98:d0:8b:3a:14:9a:41:2f:6f:24:47:8e:ee:7a:96:2a:
bb:b7:a6:bb:c1:61:e6:ef:a6:e4:83:31:cc:fc:e1:29:e3:63:
6a:f4:65:de:8c:8f:29:8d:38:1d:5e:62:a6:3f:88:51:af:1e:
5b:a2:ef:49:c9:cd:ad:d1:7a:2d:b1:ad:b1:af:dd:c9:12:76:
ad:2a:9e:3a:04:07:2d:c1:54:8d:44:48:d8:2e:30:36:cd:1e:
bf:72:00:0f:4b:27:2b:12:ef:e8:49:3c:e5:a5:81:f2:a9:d9:
6a:47:8c:8f:5f:72:3b:77:e1:fb:9c:36:26:56:a0:78:4a:31:
77:4f:81:c6:8b:c5:83:26:87:52:22:a7:f5:f0:2a:a7:75:1a:
5e:eb:4d:31:48:a0:b5:13:27:ce:65:33:ea:76:f3:f6:c6:87:
dd:bb:80:32:14:14:7c:27:01:f0:d1:96:a4:8b:ab:00:81:39:
c9:2d:5a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 18 06:02:05 2025 by rpki-client on console.sobornost.net