Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21317B968DE960854B42AE9B658633BC7E54EBDE.cer
File: 21317B968DE960854B42AE9B658633BC7E54EBDE.cer (raw, json)
Hash identifier: 4kQT0q08Zku8ig3i2rFNqyZxFwkOOV+OviQDMRX5YdM=
Subject key identifier: 21:31:7B:96:8D:E9:60:85:4B:42:AE:9B:65:86:33:BC:7E:54:EB:DE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5C71383F311469E9D9DF15492769C4033A49CAB6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/21317B968DE960854B42AE9B658633BC7E54EBDE.mft
caRepository: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 08 Jan 2025 18:18:28 +0000
Certificate not after: Wed 07 Jan 2026 18:23:28 +0000
Subordinate resources: AS: 264999
IP: 170.84.76.0/22
IP: 2804:3130::/32
Validation: Failed, certificate revoked on Mon 27 Jan 2025 16:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:71:38:3f:31:14:69:e9:d9:df:15:49:27:69:c4:03:3a:49:ca:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 8 18:18:28 2025 GMT
Not After : Jan 7 18:23:28 2026 GMT
Subject: CN=21317B968DE960854B42AE9B658633BC7E54EBDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:27:dc:f0:f8:3a:0f:45:3d:e2:dc:60:e6:
f5:f3:af:ef:64:b0:43:d6:f6:f0:8d:fe:d9:65:7e:
56:2e:56:98:09:33:12:54:2b:e9:31:f1:ec:73:7f:
2f:f4:a8:fc:07:d9:bc:6c:fc:f8:76:29:e1:4e:3f:
fa:bc:52:fe:6c:72:70:d6:44:87:f7:99:2f:47:ed:
eb:b2:46:34:7f:2c:22:03:bd:5c:1e:9f:15:6f:ab:
0e:72:4e:07:73:40:77:c0:89:24:a9:90:05:96:db:
8b:c2:00:63:5f:fd:1c:e3:00:33:73:ca:8f:30:9a:
be:8e:fb:b5:51:9d:79:db:1d:ff:90:7f:b7:30:ac:
2e:bd:4f:25:fc:d9:93:0b:38:3a:59:f4:74:b8:ca:
0e:2f:8d:3c:da:7e:1c:f4:3e:78:8d:43:66:10:59:
b0:6a:65:0d:42:b9:5a:77:4b:46:af:d1:7a:4d:60:
e1:63:29:1b:bb:c5:e3:89:19:66:7d:cd:9c:06:c2:
9a:a2:e7:83:02:24:e5:cf:ff:09:a6:78:3b:9c:06:
ae:ee:1d:18:55:e8:95:4f:a8:92:58:99:0f:80:f5:
3c:af:8e:f6:83:9c:2a:3d:e9:35:30:e5:7a:75:11:
d4:f4:cb:e9:37:4c:1a:8e:68:b9:86:cf:fb:da:8c:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
21:31:7B:96:8D:E9:60:85:4B:42:AE:9B:65:86:33:BC:7E:54:EB:DE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/21317B968DE960854B42AE9B658633BC7E54EBDE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.76.0/22
IPv6:
2804:3130::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264999
Signature Algorithm: sha256WithRSAEncryption
c2:02:fc:e7:67:df:9f:f4:38:f7:a4:63:2f:78:09:3f:17:7a:
5e:4d:90:0c:3b:f7:58:b6:d5:bd:7c:7b:7c:e6:ec:fe:61:3f:
ca:c8:bb:06:c6:80:90:ef:dc:4c:e9:80:86:54:39:e8:5e:f9:
c8:b1:fa:f2:ca:c9:25:a9:b6:a4:b7:ea:aa:73:a0:69:55:f6:
7f:98:d5:9f:78:09:01:32:9f:15:a7:30:18:da:74:97:f3:ca:
10:de:78:fd:6e:08:14:55:8d:92:cc:ba:34:60:28:02:66:f8:
8a:ee:d1:56:e0:ca:64:70:ba:b5:b6:55:4d:b7:40:df:55:72:
45:48:be:e4:8b:e1:06:93:1b:6e:64:9f:ca:aa:36:e2:2b:91:
de:95:0f:f5:8c:f7:76:15:36:fb:30:30:ef:65:7f:5c:ea:e0:
12:8a:6c:7d:7e:e1:41:a3:fe:2a:e1:fe:08:ca:05:d6:99:42:
ee:5e:38:2f:b4:1e:26:87:e0:7b:b8:b2:e4:04:e6:fd:9b:31:
39:4e:00:af:d9:66:42:62:ca:22:38:84:44:3a:bc:86:71:19:
b5:cd:b2:c7:a1:36:c0:00:85:5a:4b:21:ea:fd:fe:21:b4:52:
b5:7c:05:e5:d5:ee:d2:a7:33:3b:87:b9:2e:13:b4:45:68:fb:
5e:e5:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:19:57 2025 by rpki-client