Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.cer
File: 31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.cer (raw, json)
Hash identifier: /zeN21nEoXKM8CzCdt2BPMPtZ2JOIePDswHRSG3BaVM=
Subject key identifier: 31:AE:22:4B:E4:FE:C1:73:B6:B0:0C:CE:04:2A:25:BE:F7:7F:D4:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 536B575B1207E94099C736F0E2553394D4EC12B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.mft
caRepository: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 28 Nov 2024 14:38:25 +0000
Certificate not after: Thu 27 Nov 2025 14:43:25 +0000
Subordinate resources: AS: 264397
IP: 131.161.92.0/22
IP: 164.163.36.0/22
IP: 170.239.96.0/22
IP: 2804:1dd4::/32
Validation: Failed, certificate revoked on Fri 29 Nov 2024 13:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6b:57:5b:12:07:e9:40:99:c7:36:f0:e2:55:33:94:d4:ec:12:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 28 14:38:25 2024 GMT
Not After : Nov 27 14:43:25 2025 GMT
Subject: CN=31AE224BE4FEC173B6B00CCE042A25BEF77FD44C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:fb:e5:93:33:ff:65:5a:72:f3:02:87:53:
85:2f:6e:e3:e7:72:d0:17:56:07:47:47:80:21:31:
cf:1f:3b:21:f1:71:d0:e6:bf:71:53:21:8a:3e:bd:
9a:1c:eb:68:3f:9f:36:44:e3:31:55:2e:8b:1f:8e:
62:7c:4e:b9:ef:42:f0:25:36:b3:39:c4:e5:4f:65:
ed:ba:9b:4e:32:2a:f9:5d:2d:46:60:01:7a:ed:5b:
51:32:23:dc:97:6d:bd:0b:38:f9:3c:b5:94:32:33:
b5:5d:95:75:b9:08:d8:39:50:e8:28:33:74:fb:62:
a9:ec:fc:20:05:ad:06:c5:74:df:19:b2:e7:7f:99:
7a:44:8e:f1:59:23:1c:9f:c5:a9:d4:c8:a9:ff:11:
e5:9e:e6:93:36:41:f4:93:43:96:b6:69:7f:d2:71:
64:fe:e3:0a:a2:aa:b5:e2:ec:b6:c4:8d:fe:54:f1:
30:a3:ea:20:b2:e7:ee:88:f0:26:be:04:99:0a:f2:
66:4a:8f:86:e2:39:45:a3:79:34:44:e6:cc:28:14:
0a:d8:2f:48:22:6a:17:16:aa:a1:20:92:4e:00:3c:
54:26:94:89:71:eb:1e:3b:e4:12:10:09:c3:12:ac:
63:3e:07:9b:da:2a:98:43:a0:b8:96:a3:dc:5a:a3:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
31:AE:22:4B:E4:FE:C1:73:B6:B0:0C:CE:04:2A:25:BE:F7:7F:D4:4C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.92.0/22
164.163.36.0/22
170.239.96.0/22
IPv6:
2804:1dd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264397
Signature Algorithm: sha256WithRSAEncryption
56:27:db:74:d0:bf:d9:a7:35:3e:16:d1:e4:13:7e:ed:c0:51:
b3:f7:e1:c0:27:b3:85:24:f2:5f:47:6c:7a:83:76:ff:a1:ed:
4d:8b:6b:b4:76:f6:93:6d:9f:ff:99:6c:8c:79:f8:08:d1:00:
a1:10:24:70:5b:f8:c0:97:ff:d5:2a:b0:63:1e:10:91:a3:ea:
47:f4:aa:d4:98:67:cb:bf:67:1e:af:cc:ff:13:a8:6e:02:b1:
83:9b:15:08:05:ca:ef:00:8b:bb:84:54:31:6a:1e:dd:0e:f1:
33:c4:1a:e1:32:20:42:22:3e:4c:ab:b1:5a:5d:eb:69:9c:08:
4a:08:e7:77:ee:4b:45:2c:c4:2e:8a:3e:1d:6d:e0:d5:9f:ab:
cb:2e:1b:6e:38:6e:3a:61:52:a2:1d:19:55:4c:dc:ed:37:ba:
2b:bc:68:66:ff:1e:82:c8:3d:0b:92:9b:a0:81:2e:1e:7c:6d:
9c:18:df:2b:7d:a4:75:bc:d0:84:df:91:68:5d:36:fc:c5:aa:
04:5a:a9:13:d1:ca:1c:cb:ab:41:be:f9:15:65:bc:ac:4d:1c:
a9:14:a6:11:ab:bf:80:b3:e1:37:50:49:d9:a6:45:43:74:79:
88:f5:e4:e3:98:15:1a:73:69:d9:dc:9b:23:48:94:20:96:70:
bc:ac:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:10 2025 by rpki-client