Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
File: 0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer (raw, json)
Hash identifier: 3fcmsE7PBxKdusZMX7KG6DLYMXhCYKJWVtxYfN4nBdM=
Subject key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3A1B145BCA8850F2AFF50D5BF087FA4CEEBEDFE4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
caRepository: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 08 Jul 2024 19:38:02 +0000
Certificate not after: Mon 07 Jul 2025 19:43:02 +0000
Subordinate resources: AS: 28349
AS: 28647
AS: 53008
AS: 53067
AS: 53143
AS: 262420
AS: 265021
AS: 266206
AS: 267203
AS: 267452
AS: 267484
AS: 268555
AS: 268603
AS: 269112
AS: 269489
IP: 45.161.148.0/22
IP: 45.163.96.0/22
IP: 45.179.0.0/22
IP: 45.187.236.0/22
IP: 45.231.136.0/22
IP: 131.0.84.0/22
IP: 131.100.68.0/22
IP: 168.195.236.0/22
IP: 170.0.160.0/22
IP: 177.84.176.0/21
IP: 177.154.64.0/20
IP: 177.185.160.0/19
IP: 179.107.0.0/21
IP: 181.191.76.0/22
IP: 186.193.112.0/20
IP: 186.194.224.0/20
IP: 186.219.96.0/20
IP: 187.85.192.0/19
IP: 187.86.112.0/20
IP: 187.87.64.0/20
IP: 189.51.128.0/19
IP: 189.113.192.0/20
IP: 189.113.216.0/21
IP: 189.126.160.0/19
IP: 200.71.68.0/22
IP: 201.76.224.0/19
IP: 2804:554::/32
IP: 2804:a50::/32
IP: 2804:b1c::/32
IP: 2804:e50::/32
IP: 2804:1a68::/32
IP: 2804:3184::/32
IP: 2804:3c5c::/32
IP: 2804:41b8::/32
IP: 2804:4230::/32
IP: 2804:49c8::/32
IP: 2804:52fc::/32
IP: 2804:53bc::/32
IP: 2804:5f9c::/32
IP: 2804:656c::/32
Validation: Failed, certificate revoked on Fri 24 Jan 2025 08:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1b:14:5b:ca:88:50:f2:af:f5:0d:5b:f0:87:fa:4c:ee:be:df:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 8 19:38:02 2024 GMT
Not After : Jul 7 19:43:02 2025 GMT
Subject: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:68:da:db:8e:d6:f9:b6:c2:9e:79:42:8a:4e:
65:f5:c1:81:d6:63:b9:02:7d:28:ec:a5:d2:21:e7:
d2:6d:be:ea:b8:dc:a2:62:b5:75:c9:5e:98:69:25:
dd:94:76:0f:83:0e:56:fa:c1:44:87:0c:51:f1:97:
d5:62:22:5e:e6:bc:ce:fc:7f:73:4b:9b:29:1e:8c:
80:a0:21:04:14:02:1c:fa:a7:69:75:70:72:3b:10:
c6:98:34:d3:e1:d2:2f:82:13:85:05:0e:f5:0f:63:
11:55:37:05:37:91:2a:21:98:7a:ea:e1:36:b3:b5:
3e:dc:34:68:c1:75:15:90:d7:76:5f:77:06:75:15:
dc:cb:e8:45:01:12:ed:45:79:de:5e:bc:bc:c0:d9:
e9:73:7b:50:2b:e8:b1:5e:3b:4f:18:6d:62:f7:1a:
7b:f7:19:4d:a3:9a:4c:10:f7:38:b5:f2:68:40:57:
51:90:8e:80:73:8f:94:ad:74:e7:94:7e:2c:46:cb:
c1:55:91:0c:cd:ed:e4:d0:4b:7e:d4:49:03:aa:d4:
b7:cc:e3:aa:22:0e:64:eb:94:9c:90:a3:0e:bb:c8:
ff:15:30:bd:d3:3e:af:6c:1d:86:2b:d9:98:17:ec:
20:4e:96:bd:30:bf:98:7b:f2:2c:1c:88:eb:a4:9f:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.148.0/22
45.163.96.0/22
45.179.0.0/22
45.187.236.0/22
45.231.136.0/22
131.0.84.0/22
131.100.68.0/22
168.195.236.0/22
170.0.160.0/22
177.84.176.0/21
177.154.64.0/20
177.185.160.0/19
179.107.0.0/21
181.191.76.0/22
186.193.112.0/20
186.194.224.0/20
186.219.96.0/20
187.85.192.0/19
187.86.112.0/20
187.87.64.0/20
189.51.128.0/19
189.113.192.0/20
189.113.216.0/21
189.126.160.0/19
200.71.68.0/22
201.76.224.0/19
IPv6:
2804:554::/32
2804:a50::/32
2804:b1c::/32
2804:e50::/32
2804:1a68::/32
2804:3184::/32
2804:3c5c::/32
2804:41b8::/32
2804:4230::/32
2804:49c8::/32
2804:52fc::/32
2804:53bc::/32
2804:5f9c::/32
2804:656c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28349
28647
53008
53067
53143
262420
265021
266206
267203
267452
267484
268555
268603
269112
269489
Signature Algorithm: sha256WithRSAEncryption
04:ab:47:b8:b8:fe:dc:af:c9:e2:87:be:63:a9:86:4e:38:d9:
4e:a5:e3:08:d1:b5:05:5b:d9:c4:6c:dd:9a:4b:a6:d9:c3:ae:
2f:7d:9b:ed:62:76:ef:38:2d:14:d5:51:2d:a3:f8:9f:f1:79:
db:30:bc:8e:7c:cc:0b:22:c8:d6:67:c0:1b:cd:9e:9e:8d:cc:
55:4c:d4:b1:8e:fd:41:f7:ed:cc:e2:ad:cf:23:43:93:00:20:
04:ba:72:16:f3:a9:fe:23:12:9d:3d:43:50:66:b5:ab:84:02:
33:52:7c:78:26:fb:5a:3c:76:36:a7:c1:55:79:29:90:57:99:
e9:4d:8f:84:50:33:9b:78:f0:ac:54:4b:ef:10:58:bd:c0:c9:
a3:52:0c:86:a3:fe:2c:95:d7:a3:b9:e1:90:9d:d1:b0:e8:db:
30:1f:0f:15:1e:00:db:b3:cf:81:f8:fc:2b:d4:37:6a:c6:22:
97:11:50:00:1b:bf:e5:a1:36:e4:67:a3:58:b0:ff:86:c4:9d:
76:4f:a3:b1:5e:1b:cf:f2:a4:77:13:18:8e:71:0e:83:29:e4:
44:9a:ab:89:fd:63:6c:2a:05:64:5e:6c:77:57:6e:78:43:de:
80:65:d0:d2:48:5e:98:c2:ae:77:1f:df:d5:cc:d8:18:5e:67:
ea:3a:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:21 2025 by rpki-client