Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.cer
File: 22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.cer (raw, json)
Hash identifier: PrGqMDGFnbTHK8tPRNIKbh8qHu++s5A+GWEpztmDi/Q=
Subject key identifier: 22:AF:7B:01:A7:1F:10:F6:C4:EB:16:5B:E1:3A:E5:1E:26:1E:5B:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2AEC07F533F06CD8EA82D710BBE0D88FDF010484
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.mft
caRepository: rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 03 Dec 2024 18:27:34 +0000
Certificate not after: Tue 02 Dec 2025 18:32:34 +0000
Subordinate resources: AS: 269096
IP: 45.175.248.0/22
IP: 45.185.120.0/22
IP: 177.39.8.0/22
IP: 186.232.88.0/21
IP: 2804:5f64::/32
Validation: Failed, certificate revoked on Sun 12 Jan 2025 14:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ec:07:f5:33:f0:6c:d8:ea:82:d7:10:bb:e0:d8:8f:df:01:04:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 3 18:27:34 2024 GMT
Not After : Dec 2 18:32:34 2025 GMT
Subject: CN=22AF7B01A71F10F6C4EB165BE13AE51E261E5B49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:3e:51:8d:8b:39:68:ce:18:7a:d6:59:48:
c6:58:19:13:95:71:41:e6:8d:b4:b2:bb:b1:e8:b1:
cc:20:ec:61:1d:8d:23:a0:be:88:79:0a:40:c2:0b:
05:ea:66:dc:68:be:aa:66:7f:23:61:6e:df:0f:e8:
ad:95:61:a3:06:c3:2d:86:91:fc:f5:7d:61:11:fa:
e4:74:59:cf:dd:d4:10:d5:d5:38:ce:9a:43:62:46:
d0:d5:d0:84:0a:83:27:e8:1c:c1:7f:db:b2:64:1a:
cd:9c:ad:f2:09:5b:84:de:ec:f5:82:c5:10:f7:d1:
5e:87:32:f6:49:cc:db:c5:49:95:3b:5d:da:5a:f9:
74:78:55:1a:3c:31:b4:43:67:3a:56:0d:fe:b7:0d:
d0:d0:19:fe:4a:50:e6:ce:7a:a2:6d:ed:ee:b5:b1:
95:49:de:67:4c:f1:c7:c9:70:d8:23:96:06:4f:31:
ac:cb:da:d5:49:95:fb:8a:42:a0:ad:88:cf:f5:c3:
1e:f1:cf:dc:13:8e:01:41:8b:c6:e8:15:27:4d:e9:
97:d1:27:95:ca:5b:7b:7c:54:f5:77:f0:a6:4d:91:
fd:47:1b:08:95:21:54:93:19:7c:19:4c:3c:17:6c:
52:75:e0:a1:4e:9d:96:19:e1:07:e0:8f:c8:8c:32:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
22:AF:7B:01:A7:1F:10:F6:C4:EB:16:5B:E1:3A:E5:1E:26:1E:5B:49
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.248.0/22
45.185.120.0/22
177.39.8.0/22
186.232.88.0/21
IPv6:
2804:5f64::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269096
Signature Algorithm: sha256WithRSAEncryption
9b:64:5d:c8:48:d6:60:b6:dd:51:e3:41:ed:c3:aa:99:dd:14:
2c:fa:97:d6:82:c4:be:42:ef:bf:e5:20:36:3a:b4:e7:c7:44:
65:1c:07:df:43:a5:ce:58:4c:00:6f:ff:bf:50:3a:8d:60:bb:
b8:17:fe:78:4d:cd:26:25:50:fa:9e:44:48:32:79:d5:52:fd:
93:3c:3c:00:d1:a2:75:0a:cc:2e:5f:f2:14:ed:9f:0e:bd:df:
09:f6:fc:c5:b5:33:bf:57:eb:9d:b9:b6:50:95:ba:b0:70:ae:
5c:65:dd:f6:cf:96:d3:6e:e4:ac:86:4a:e9:85:fd:94:74:7c:
ec:bd:53:2e:ad:ec:8e:b0:7c:a5:94:9b:f1:95:39:5c:cb:95:
33:90:e1:a9:09:eb:be:37:4d:f0:46:c2:76:61:32:e6:8a:ce:
36:25:40:0c:7f:84:68:1d:44:5c:96:94:ad:1d:9c:12:c1:2e:
aa:31:ca:e0:12:49:5e:90:8d:a4:d2:c7:54:66:25:4e:b8:d9:
5e:e2:c4:96:88:36:d6:1a:1a:dd:59:35:2b:0a:bc:ab:bf:ee:
35:df:14:27:fc:79:df:5b:cd:0d:1f:14:fb:d4:5a:ae:a2:0d:
35:2f:49:31:e3:03:db:15:2d:e9:1a:3e:1c:d0:68:f8:1f:c6:
6e:65:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:48 2025 by rpki-client