Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
File: 174E7897062398E9506F0862FA46597DF937825D.cer (raw, json)
Hash identifier: Jav30XMB/fYcXT4XBZwjvspuMnStXejxzoeBSrIZ29Q=
Subject key identifier: 17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7EC7A00F106E975A1733B3FCFEF2B7F6FB56236C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/174E7897062398E9506F0862FA46597DF937825D.mft
caRepository: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 10 Feb 2025 19:05:07 +0000
Certificate not after: Mon 09 Feb 2026 19:10:07 +0000
Subordinate resources: AS: 53062
IP: 45.7.128.0/22
IP: 168.90.168.0/22
IP: 170.150.236.0/22
IP: 177.36.176.0/20
IP: 177.75.160.0/20
IP: 177.155.128.0/20
IP: 186.211.96.0/20
IP: 187.85.144.0/20
IP: 2804:3b0::/32
Validation: Failed, certificate revoked on Wed 12 Mar 2025 16:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c7:a0:0f:10:6e:97:5a:17:33:b3:fc:fe:f2:b7:f6:fb:56:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 10 19:05:07 2025 GMT
Not After : Feb 9 19:10:07 2026 GMT
Subject: CN=174E7897062398E9506F0862FA46597DF937825D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:fa:05:9a:72:ba:d0:95:ab:30:20:ab:94:
0a:be:c4:c8:82:e2:9a:85:c2:fe:7f:54:de:40:8f:
11:9a:17:82:62:2e:54:84:1e:f9:7d:ee:9a:5d:3f:
37:d0:95:ff:e5:88:ef:c7:a0:88:ac:9c:a8:53:f3:
4a:b4:b0:45:e2:1f:98:1e:73:89:10:5e:ab:c1:58:
c4:65:72:5c:df:a2:1a:1c:fc:fa:2e:ae:09:ac:75:
52:15:50:3d:37:75:82:72:70:08:ec:66:fd:d8:61:
e5:23:48:12:fb:dc:c4:23:46:14:88:21:f8:eb:bd:
1a:9f:bc:df:50:69:c1:98:05:83:7a:5a:cf:20:82:
43:a8:10:38:e7:c3:45:94:28:c5:26:fc:07:21:46:
a5:1d:67:1f:43:86:c5:d3:3c:b8:be:f5:a8:87:98:
a2:57:ef:6d:e9:05:da:d6:c0:16:33:6f:4d:49:83:
58:ba:a8:c5:83:be:d9:d6:7a:6b:25:03:32:a9:f4:
f3:a2:d2:d9:1c:2b:5e:12:2f:3a:72:0a:55:cc:16:
3e:c8:f0:08:30:a1:63:1b:63:ad:73:4a:9c:ae:59:
b0:94:b8:3e:c9:b4:21:8c:d2:7f:a0:57:f2:d3:df:
64:7e:23:0d:3f:3c:60:0b:13:cf:9c:24:ae:6c:b8:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/174E7897062398E9506F0862FA46597DF937825D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.128.0/22
168.90.168.0/22
170.150.236.0/22
177.36.176.0/20
177.75.160.0/20
177.155.128.0/20
186.211.96.0/20
187.85.144.0/20
IPv6:
2804:3b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53062
Signature Algorithm: sha256WithRSAEncryption
d6:39:8f:17:3d:67:b2:1a:8c:5a:fd:69:a7:de:c5:c1:37:c5:
0b:6f:55:a6:ef:bb:5e:98:45:d0:6c:2f:94:ff:3b:a4:65:40:
32:63:b8:cf:a7:f6:83:0e:bc:82:f4:9a:37:0a:bf:f2:3b:7b:
fc:8b:f1:91:d0:45:49:ba:a9:3d:9a:a4:53:ae:b2:bc:6e:66:
f8:83:6e:51:78:b0:b1:b3:9f:50:52:68:6c:1e:64:bd:b5:e2:
e4:c4:1b:17:b1:40:38:24:c0:9a:38:85:4f:6f:1d:ee:a1:ec:
d9:ee:d0:db:30:4d:44:9d:70:a0:8e:28:16:ca:a0:40:db:df:
a7:fa:b7:8e:89:e7:7b:25:7d:ee:6e:8a:0a:3e:d4:58:ad:54:
7a:ff:1d:1e:59:c1:3b:af:e7:dc:6f:b0:dd:e5:74:37:f2:82:
76:2e:8b:10:b7:e7:02:16:36:48:bc:2b:3e:0b:9e:55:09:cc:
a3:9c:b8:fb:3e:44:83:29:41:36:c7:07:5b:9e:fb:87:07:26:
0c:25:a4:08:92:ff:77:2c:18:30:75:86:d3:58:4b:6c:fc:6c:
07:e8:87:47:47:51:94:52:88:98:cc:af:8a:6f:fb:7e:be:75:
49:80:82:cd:72:4c:af:99:15:1b:cb:50:6c:69:d5:0f:46:dc:
d6:cc:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:19 2025 by rpki-client