![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
File: 27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer (raw, json)
Hash identifier: M7khompi5/78rDnIftTzhMQJlFxPIUTgdZmXQdFDOxc=
Subject key identifier: 27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 05E424AB246DFE534202AA9FA815432856A45FD1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
caRepository: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 02 Sep 2024 12:46:52 +0000
Certificate not after: Mon 01 Sep 2025 12:51:52 +0000
Subordinate resources: AS: 263541
IP: 191.5.164.0/22
IP: 191.241.20.0/22
IP: 2804:1398::/32
Validation: Failed, certificate revoked on Thu 09 Jan 2025 12:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e4:24:ab:24:6d:fe:53:42:02:aa:9f:a8:15:43:28:56:a4:5f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 2 12:46:52 2024 GMT
Not After : Sep 1 12:51:52 2025 GMT
Subject: CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:72:4c:f8:81:c8:53:7d:4d:a0:d8:67:ea:
fc:77:7b:41:a7:f2:41:8c:2e:8a:0a:89:06:0c:41:
5e:dc:09:3b:f9:ce:78:db:b5:14:7a:09:ad:e0:09:
56:aa:e5:2f:ac:67:b1:bf:08:af:2b:5c:10:31:a3:
d9:74:d7:36:a2:f3:39:8f:f7:04:e1:fc:f2:13:9d:
2b:d9:17:b7:b7:50:8d:cb:d5:6f:0d:f7:28:95:ff:
90:90:af:12:03:73:fa:ab:a6:40:d3:d9:79:78:c7:
e4:b4:dc:ea:71:98:a0:f5:3d:55:8b:e6:12:47:63:
27:2c:28:20:93:55:89:2c:f0:3d:86:df:c1:c9:fe:
c0:4c:9c:cb:1d:97:c6:85:dd:74:70:9a:a6:88:33:
ad:26:db:94:4e:93:20:1e:c7:2f:99:5a:45:19:5f:
3f:1f:9b:ed:85:9b:0c:30:cd:48:28:05:33:fb:05:
71:87:53:e0:18:0c:65:79:59:f5:d3:d9:a5:9e:a2:
7f:35:09:df:d2:db:ed:33:04:3c:61:5c:ce:97:6d:
ea:c4:a9:dd:98:01:12:e8:a2:88:92:6a:90:0f:b9:
87:74:16:b8:f6:0c:e1:5f:c0:44:20:ed:3f:ae:fd:
28:da:c7:f0:ac:19:a3:bd:c6:d4:a3:ff:09:91:28:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.5.164.0/22
191.241.20.0/22
IPv6:
2804:1398::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263541
Signature Algorithm: sha256WithRSAEncryption
25:fe:bb:b6:4a:04:5b:17:50:41:c0:e0:48:a6:89:fd:64:f3:
c8:2f:a9:a2:ff:00:51:2e:26:98:32:ae:4b:a2:0f:1a:fb:e5:
7c:00:dd:27:34:2d:43:23:37:77:c8:5a:16:db:46:69:e3:90:
79:6c:c5:41:e7:23:10:bf:a4:09:40:d8:27:c9:c2:f8:43:8d:
e3:13:8f:0e:52:66:12:36:10:64:43:2a:fd:ab:c3:c7:9d:be:
2e:e1:51:b3:03:48:6f:e7:0b:24:03:9a:53:a7:b1:a3:0e:51:
d3:f9:19:62:2d:96:b8:2a:60:dd:ba:05:ff:cc:d6:16:a4:f2:
80:53:bd:5a:a8:8a:aa:ff:3e:5a:ae:83:b5:14:13:7a:d3:e7:
95:eb:df:53:12:da:82:6b:f0:a1:7d:d0:65:bb:c1:34:58:64:
0e:e9:ba:64:78:9d:84:de:35:98:3d:5f:7a:17:3d:76:aa:17:
84:d8:60:91:88:a1:e2:e0:73:21:12:dc:85:05:b6:ac:e8:06:
00:54:0f:e6:3e:47:dc:78:29:f8:35:41:d6:86:53:3a:05:3e:
91:a0:67:86:0b:f1:86:11:f9:b2:f2:40:4a:18:8e:3a:11:e8:
00:cc:ab:a2:72:34:bc:51:98:6e:68:eb:56:89:05:2d:74:88:
91:79:f1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:57 2025 by rpki-client