Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
File: 0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer (raw, json)
Hash identifier: dx9SjsM2CMNXHtJ+QLsRuH5q5qeq40q2TDUxb3svdDI=
Subject key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5CF920BD13BD151F3BB495BA5F4B92CCDB0278E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft
caRepository: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Mar 2025 18:35:08 +0000
Certificate not after: Wed 04 Mar 2026 18:40:08 +0000
Subordinate resources: AS: 268092
IP: 45.168.220.0/22
IP: 2804:57e0::/32
Validation: Failed, certificate revoked on Wed 02 Apr 2025 12:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f9:20:bd:13:bd:15:1f:3b:b4:95:ba:5f:4b:92:cc:db:02:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 5 18:35:08 2025 GMT
Not After : Mar 4 18:40:08 2026 GMT
Subject: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:21:c7:37:6b:d1:a7:6d:27:0b:84:99:a6:
64:03:7b:db:48:49:e1:7a:ac:93:cc:9c:79:e5:ae:
8c:f3:d4:ad:7c:9e:22:7b:1e:f3:5f:c1:87:92:e9:
6a:81:f4:98:44:a9:66:1f:8e:ec:1c:db:4c:d8:c0:
e6:df:21:2f:d2:9b:6d:a6:9a:69:8e:70:58:03:42:
d9:00:66:7d:31:6e:a7:8b:e4:90:d8:be:8d:6d:d6:
69:97:82:a8:50:25:11:dc:41:12:d6:10:ed:60:2a:
53:7b:0e:39:43:ee:33:7e:a6:5b:ed:cd:42:b3:a9:
76:e0:56:e5:c1:fd:eb:38:88:65:52:30:2f:07:14:
69:9d:cd:ef:ee:82:a3:4d:73:01:cc:24:6c:c2:af:
5f:9d:62:4d:ac:f8:96:d0:ff:c3:5d:ea:17:10:a6:
38:ef:4e:34:d3:ec:f7:de:ed:8f:56:4e:62:7e:14:
d2:09:bf:7e:80:61:c5:92:3b:8e:d1:0a:2c:d0:81:
fb:25:dd:00:97:c0:7f:e7:59:7a:79:37:d6:89:23:
8b:e9:61:94:81:d8:91:80:df:89:84:e3:65:b1:3b:
54:16:26:d0:0b:da:ae:02:25:fc:3d:02:d3:22:43:
8c:48:c0:f3:6d:85:48:c2:17:5f:c4:b6:6a:dd:61:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.220.0/22
IPv6:
2804:57e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268092
Signature Algorithm: sha256WithRSAEncryption
8a:6d:94:27:14:bb:d8:d9:2a:2b:f9:a7:46:af:f6:e8:ae:07:
84:19:24:17:00:48:b9:85:25:65:1d:ce:26:12:73:eb:ee:54:
d1:bc:90:d5:68:19:90:2b:4a:5a:be:f5:5a:88:9b:c5:13:b2:
54:b2:66:1a:1b:07:63:2a:e0:42:43:f4:61:f3:3d:78:31:a9:
c2:ad:03:76:21:ed:0d:ae:62:ac:51:bc:5d:5d:81:65:99:44:
88:a2:dc:ad:3f:62:60:bc:35:85:60:d3:be:5f:08:a4:b6:51:
7a:eb:64:c9:a3:1b:0e:77:ae:f3:14:0e:35:90:c6:83:f1:36:
b6:67:39:57:59:34:fe:02:35:6f:60:2c:f7:b2:01:90:1b:25:
5f:e4:02:96:d2:bb:6a:e1:78:e7:4d:86:f8:a2:06:1b:75:53:
18:ec:00:04:6a:c1:d2:c1:f5:a0:75:e9:9a:fa:58:44:d6:63:
7b:a5:d8:90:6b:39:ce:32:a8:08:37:fc:c7:c2:05:74:e3:b1:
11:b7:af:1e:0b:8d:6f:2e:54:31:89:30:88:bf:23:26:7c:2f:
7c:b1:6b:52:55:02:cc:93:e7:3f:95:eb:31:9e:a9:29:12:e2:
a7:28:df:f1:d6:9c:1c:65:79:eb:a8:9c:b7:30:4d:2f:2e:d4:
a4:d3:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:10 2025 by rpki-client