Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/198E6997B7790B601CE9B8657001F896E66D3D74.cer
File: 198E6997B7790B601CE9B8657001F896E66D3D74.cer (raw, json)
Hash identifier: J9oJZhFgs36+3fHxhH+o1UHb/VTFJtt5Z/yzHO37xKU=
Subject key identifier: 19:8E:69:97:B7:79:0B:60:1C:E9:B8:65:70:01:F8:96:E6:6D:3D:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1309310612C6F841D46B3D234C33F68EF9546B66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/198E6997B7790B601CE9B8657001F896E66D3D74.mft
caRepository: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 10 Dec 2024 11:42:45 +0000
Certificate not after: Tue 09 Dec 2025 11:47:45 +0000
Subordinate resources: AS: 52898
IP: 168.227.156.0/22
IP: 177.184.64.0/20
IP: 2804:a9c::/32
Validation: Failed, certificate revoked on Mon 16 Dec 2024 23:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:09:31:06:12:c6:f8:41:d4:6b:3d:23:4c:33:f6:8e:f9:54:6b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 10 11:42:45 2024 GMT
Not After : Dec 9 11:47:45 2025 GMT
Subject: CN=198E6997B7790B601CE9B8657001F896E66D3D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:48:72:b7:2a:a0:0e:3c:01:cb:c4:43:04:8a:
df:c5:2e:23:09:b4:0a:0d:92:a7:1d:ac:5f:32:47:
af:91:f1:76:3c:27:38:51:73:35:99:eb:5e:01:9a:
ba:01:df:24:ac:73:24:99:a4:ee:2c:49:4c:fa:71:
ac:f1:4d:17:51:06:aa:7a:61:8a:44:d9:3c:23:64:
ac:46:e4:61:a5:d9:29:0a:82:d7:71:0f:47:f2:6a:
87:14:bb:f9:cf:79:c9:b5:97:dc:03:d6:e0:69:9c:
d9:13:9c:dc:88:56:ed:7b:0a:62:de:d3:ff:8c:b4:
48:1c:53:46:8a:ca:60:b7:8a:5f:e1:cc:17:77:cb:
65:74:29:75:26:5d:e1:39:cf:6b:96:a0:25:ee:6e:
ef:9d:01:eb:2e:f1:97:10:82:35:39:1b:0a:fe:de:
69:12:db:f8:2d:2e:01:62:34:da:5d:e4:7e:8d:73:
c3:ed:8f:d1:e7:46:49:22:a2:ed:ad:70:8b:5d:6f:
0e:74:32:7e:7a:bc:57:af:d5:37:2c:2a:e1:85:e3:
7b:80:d3:52:b7:cf:73:af:da:70:c7:fd:01:af:93:
da:70:ea:54:34:63:88:59:91:4c:0e:79:27:b6:76:
af:66:d2:53:7a:89:68:6e:1a:21:ef:95:ae:5d:36:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
19:8E:69:97:B7:79:0B:60:1C:E9:B8:65:70:01:F8:96:E6:6D:3D:74
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/198E6997B7790B601CE9B8657001F896E66D3D74.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.156.0/22
177.184.64.0/20
IPv6:
2804:a9c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52898
Signature Algorithm: sha256WithRSAEncryption
17:46:99:cc:eb:1c:55:07:17:16:65:12:b8:70:21:de:cd:d1:
bf:c1:d9:16:8d:20:03:3e:40:cd:f5:8f:e3:9b:1f:19:5e:19:
8e:60:8c:87:49:66:f2:d9:d2:05:62:31:2d:70:5f:33:a7:a4:
09:db:e2:11:fd:bc:4e:56:22:d9:dd:24:c9:ad:69:71:bb:fc:
f7:b1:bd:fa:18:f4:43:f3:d2:d7:b3:17:42:56:22:52:a4:76:
19:3e:72:0f:38:c8:6d:98:05:56:7f:2d:16:b2:59:af:e4:53:
96:8d:c9:7e:80:e0:04:7b:6e:1c:d1:a7:4d:de:5c:7e:cb:bc:
8a:5c:a7:25:f6:cd:3f:86:c5:19:f2:15:22:f2:aa:94:cf:e2:
de:02:b7:b4:b0:80:39:b0:2b:01:96:f5:14:21:b4:99:8c:5a:
9e:ca:cb:c8:e3:f0:f3:d0:77:a2:2d:58:a8:82:4e:62:6d:de:
ed:de:03:3a:9c:56:bd:77:6e:8a:dc:dc:57:95:4c:59:47:7d:
80:c7:b7:f0:5d:b7:a8:9f:6e:af:4a:0d:4c:2f:b9:f2:37:1f:
1b:67:48:30:7b:fe:ab:a8:84:bf:99:4b:40:e4:d9:ec:55:8a:
cb:6e:50:90:29:f1:28:40:9c:41:64:17:21:fc:5e:3c:f8:73:
7a:b8:56:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:59 2025 by rpki-client