Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer
File: 294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer (raw, json)
Hash identifier: 6atRP2Yvm/smrXzDWJTtVhRQ7SiUuCvB5jX0gMUiR9g=
Subject key identifier: 29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 40DB4F5AF57183BDE61C8F33A0F07143A07B6239
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.mft
caRepository: rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 05 Dec 2024 19:30:09 +0000
Certificate not after: Thu 04 Dec 2025 19:35:09 +0000
Subordinate resources: AS: 265171
AS: 266189
IP: 160.20.196.0/22
IP: 167.249.248.0/22
IP: 170.246.8.0/22
IP: 2804:2bb8::/32
IP: 2804:3c14::/32
Validation: Failed, certificate revoked on Tue 10 Dec 2024 19:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:db:4f:5a:f5:71:83:bd:e6:1c:8f:33:a0:f0:71:43:a0:7b:62:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 5 19:30:09 2024 GMT
Not After : Dec 4 19:35:09 2025 GMT
Subject: CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:b4:51:ab:79:f1:cf:16:c8:4e:06:6a:06:
63:57:2a:45:8d:30:65:9b:b6:66:6d:43:16:e8:bb:
60:1b:b3:ce:78:13:82:17:fd:d7:a6:09:cf:93:95:
21:85:b7:9c:fd:aa:da:9e:b1:c5:e3:73:e4:ce:7c:
dd:cc:55:3e:0d:e3:da:da:d1:18:93:6d:54:b5:4d:
e0:1e:bc:40:3f:4a:eb:df:f3:df:79:57:88:c4:86:
5b:da:15:42:e3:ec:d1:35:25:18:d7:c2:c7:38:d4:
f6:2d:a2:1d:c3:a8:5b:27:93:5c:0c:34:29:aa:af:
82:1d:19:ed:1e:05:3e:21:80:1e:7c:d6:4e:99:79:
5e:a0:c9:c8:7b:fa:79:bb:d6:da:34:f6:34:e1:e4:
7e:06:8e:1e:47:d1:7c:83:c4:05:85:c0:3b:8a:d9:
e2:fc:1a:02:5f:11:c2:79:93:bd:13:ef:65:fb:74:
31:86:60:3a:3d:7f:69:5f:f5:c7:b8:7a:e7:e8:bd:
d2:6d:72:86:dd:9d:a8:f7:88:23:e2:c1:67:94:b0:
e5:9e:ae:7a:8c:c9:34:5e:1a:1f:4c:f9:ca:fe:91:
ea:40:f9:18:c8:22:8e:e1:2d:d4:d0:28:08:b6:1f:
47:66:c2:77:75:4d:9c:3e:76:fe:80:b7:14:3e:de:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.196.0/22
167.249.248.0/22
170.246.8.0/22
IPv6:
2804:2bb8::/32
2804:3c14::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265171
266189
Signature Algorithm: sha256WithRSAEncryption
82:6b:d2:f6:64:1d:f2:06:fc:e9:b7:c0:f6:c1:fc:66:51:25:
24:19:1d:2b:ee:36:bb:fb:cd:8e:bb:b9:9c:aa:fb:73:a8:fb:
ad:6c:34:22:78:f7:3f:49:88:a9:fe:e6:9a:7d:53:44:63:7d:
be:69:1b:bb:ed:42:7e:b6:b0:75:a4:c3:21:c8:9b:14:33:8d:
d8:e2:4d:e7:68:51:ec:4b:f9:20:f5:ff:71:98:65:43:c0:1e:
93:a3:0a:38:b7:b6:60:e6:3b:58:95:c5:d4:90:5a:8c:4f:ec:
07:8f:00:b6:5c:0d:8a:af:38:b2:8f:6a:a7:74:24:17:db:5c:
a8:a0:c4:0f:e4:d7:04:05:79:c6:c4:04:d0:02:17:04:a9:a9:
b6:1a:b1:74:c5:00:cc:ca:8e:31:0f:4a:01:f7:3d:e5:cf:c8:
57:dc:c0:c1:e4:e1:07:82:41:3a:60:bc:ff:cf:af:c7:49:ca:
43:52:b0:1f:24:23:16:29:f9:69:59:97:72:d4:17:76:7e:c4:
30:d4:12:b0:03:f6:3c:4d:b2:5b:c9:ca:51:5c:46:9d:f5:2c:
9b:3c:83:f1:e0:c2:2f:1c:16:9c:05:05:c8:31:51:a7:18:59:
8e:61:58:a6:ba:6c:fd:14:f4:66:37:13:8e:35:dc:de:77:ac:
32:22:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:15 2025 by rpki-client