![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2659870C7E18C597F69C7A7E3344EDA07B9A9E19.cer
File: 2659870C7E18C597F69C7A7E3344EDA07B9A9E19.cer (raw, json)
Hash identifier: 8N/rrNnZYjX6BB2xnnPErIeZmvqB62FIt/TcsVs5EtE=
Subject key identifier: 26:59:87:0C:7E:18:C5:97:F6:9C:7A:7E:33:44:ED:A0:7B:9A:9E:19
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7DDD09BF74DE0B16AD024F1EA8A360CCF113C851
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/1/2659870C7E18C597F69C7A7E3344EDA07B9A9E19.mft
caRepository: rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 09 Dec 2024 11:55:50 +0000
Certificate not after: Mon 08 Dec 2025 12:00:50 +0000
Subordinate resources: AS: 272744
IP: 181.233.120.0/22
IP: 2804:87fc::/32
Validation: Failed, certificate revoked on Mon 16 Dec 2024 18:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:dd:09:bf:74:de:0b:16:ad:02:4f:1e:a8:a3:60:cc:f1:13:c8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 9 11:55:50 2024 GMT
Not After : Dec 8 12:00:50 2025 GMT
Subject: CN=2659870C7E18C597F69C7A7E3344EDA07B9A9E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:aa:b1:61:0a:cd:2c:be:14:1e:e4:a0:f1:
25:1a:3f:be:51:8b:83:46:96:46:00:d2:dc:3d:5b:
87:d6:ee:45:11:3c:77:dd:ea:38:91:39:de:53:9d:
a1:3b:8b:77:ac:89:44:aa:03:54:40:0a:4f:18:e1:
f6:43:a7:bc:fd:40:08:6f:eb:50:5c:5e:a3:70:c5:
61:44:3a:99:83:78:9d:de:f0:30:75:dd:c2:1f:57:
82:2c:c8:67:40:34:0b:28:43:60:70:19:ed:9b:9d:
5d:65:61:b2:97:5e:9d:99:eb:e9:57:b0:12:96:7b:
7b:2d:5e:eb:c9:36:c9:38:e0:41:a5:19:16:51:b6:
b4:93:cd:f8:78:68:b0:c0:78:ae:7f:d7:ba:16:44:
c4:40:01:91:ec:df:51:38:f8:b4:a6:91:a6:e2:35:
7b:50:64:7f:14:de:8c:fc:29:1c:c4:58:08:4f:88:
a8:51:7a:1f:d7:27:a4:e4:70:16:a6:41:ed:41:57:
06:3f:04:46:ba:78:67:ed:6c:0e:8b:c5:d9:f8:d1:
b3:cf:49:61:c9:b0:32:bf:37:65:de:2a:c4:1b:80:
98:50:bd:7c:14:bc:14:bb:70:56:36:77:02:b4:30:
14:ab:73:b2:1a:aa:6e:ac:91:d2:37:49:94:95:90:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
26:59:87:0C:7E:18:C5:97:F6:9C:7A:7E:33:44:ED:A0:7B:9A:9E:19
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/1/2659870C7E18C597F69C7A7E3344EDA07B9A9E19.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.120.0/22
IPv6:
2804:87fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272744
Signature Algorithm: sha256WithRSAEncryption
2d:7b:de:57:b4:e1:92:82:ba:2e:64:c4:71:4a:83:d9:da:34:
b3:6a:6b:c2:0f:b5:12:2f:82:aa:9a:73:12:c6:18:59:b7:9b:
e4:e7:2a:18:52:af:04:f1:3d:8f:45:e1:55:f5:2f:31:08:b9:
d0:6d:87:8c:6c:f9:e2:0f:38:0e:42:03:7a:f9:0b:bc:9e:4a:
b5:0c:ac:84:c3:45:5c:54:fe:9f:2b:84:6f:dd:45:47:e1:ac:
41:78:e5:65:b5:ea:49:a2:39:1d:eb:ea:78:4e:2e:a1:df:7a:
3b:17:74:48:ba:74:34:ba:01:b3:36:8f:d1:2b:c3:33:00:fe:
f3:47:6b:e0:cb:d8:c0:1a:18:fb:e9:a3:bc:2c:49:b5:b6:a7:
84:4e:bf:17:6c:63:6c:da:6c:7c:dd:9f:aa:98:fd:f2:ed:d5:
9a:18:91:00:a9:00:b2:a8:93:f6:f9:c3:27:d7:ab:79:0b:82:
f3:92:1a:88:f5:b9:3c:f7:c3:9b:1c:2a:f2:96:25:d4:27:55:
04:24:bd:8d:e8:63:2c:50:69:0e:63:36:be:41:99:d1:31:d4:
77:df:5b:17:03:d4:b6:52:61:1a:35:8a:dc:55:1a:13:9a:b7:
77:9d:24:a6:9e:6c:79:a2:92:16:f7:77:18:fa:9f:e6:cf:46:
5c:18:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:51 2025 by rpki-client