Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33EF19A26113A53B8381E9F7233B4D521C8AE98A.cer
File: 33EF19A26113A53B8381E9F7233B4D521C8AE98A.cer (raw, json)
Hash identifier: NNWCn8HOumFTb0Dt/okxuc9ljapQAfC7Rhny/gnYC1o=
Subject key identifier: 33:EF:19:A2:61:13:A5:3B:83:81:E9:F7:23:3B:4D:52:1C:8A:E9:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2A119F1B7D3F8FE96FCC015512D31540F9212057
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HRRxvrHVVcN9dBisox49n5uuRRTFxhy1oDKjvfLYNJJw/0/33EF19A26113A53B8381E9F7233B4D521C8AE98A.mft
caRepository: rsync://rpki-repo.registro.br/repo/HRRxvrHVVcN9dBisox49n5uuRRTFxhy1oDKjvfLYNJJw/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 11 Nov 2024 16:40:36 +0000
Certificate not after: Mon 10 Nov 2025 16:45:36 +0000
Subordinate resources: AS: 271426
IP: 201.218.160.0/22
IP: 2804:7b58::/32
Validation: Failed, certificate revoked on Tue 28 Jan 2025 17:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:11:9f:1b:7d:3f:8f:e9:6f:cc:01:55:12:d3:15:40:f9:21:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 11 16:40:36 2024 GMT
Not After : Nov 10 16:45:36 2025 GMT
Subject: CN=33EF19A26113A53B8381E9F7233B4D521C8AE98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:8f:78:4b:58:9d:92:00:9f:96:0a:ad:75:
e0:53:9d:cf:03:fa:41:08:91:44:77:a3:61:f6:f7:
d8:7c:7a:22:62:59:fe:46:c0:a0:e3:c0:46:eb:f9:
50:f1:9c:2e:a0:65:54:f4:aa:37:2d:83:16:41:b3:
27:87:fc:98:1d:a3:61:c4:b6:42:b1:cc:cf:50:f5:
42:a5:a4:64:95:ba:9b:90:b3:a9:cc:1b:a2:ed:b5:
fc:ea:04:46:32:61:38:db:f8:d0:dc:9f:dd:5f:14:
fe:cf:27:3a:2d:26:14:a5:75:d8:20:07:06:43:77:
9c:32:cf:2f:ce:8d:24:d3:89:f0:4a:93:f3:9c:1e:
e3:bd:d6:ff:65:9c:1d:5e:7e:8d:cf:cf:f9:23:68:
ff:42:4c:a0:5d:20:3f:24:49:1c:dd:d1:06:f7:55:
17:8e:66:3f:4a:34:92:83:70:d6:55:79:c3:cc:cd:
dc:0c:b6:cb:2a:cd:24:46:ee:1a:e9:b3:6f:ac:9e:
ea:b6:f9:02:b5:11:5d:ad:7c:45:c0:7b:24:df:e5:
88:59:1e:90:c6:b9:8e:40:7c:e1:f7:76:a5:83:53:
b6:77:10:bf:67:64:cf:e0:8b:cb:95:22:31:c2:7e:
55:6d:a3:2c:8d:26:0f:c7:72:b5:6d:99:1d:5d:23:
b4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:EF:19:A2:61:13:A5:3B:83:81:E9:F7:23:3B:4D:52:1C:8A:E9:8A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HRRxvrHVVcN9dBisox49n5uuRRTFxhy1oDKjvfLYNJJw/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HRRxvrHVVcN9dBisox49n5uuRRTFxhy1oDKjvfLYNJJw/0/33EF19A26113A53B8381E9F7233B4D521C8AE98A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.160.0/22
IPv6:
2804:7b58::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271426
Signature Algorithm: sha256WithRSAEncryption
17:49:e7:89:25:c6:2d:20:08:c9:fc:94:d8:96:3c:77:43:00:
2e:94:8b:b7:9e:af:07:53:36:2b:c1:7b:90:c6:af:09:38:aa:
84:ff:53:12:c1:ae:4c:38:9c:ea:77:c1:e8:67:e0:e5:f5:31:
b6:e2:dd:89:a2:84:ad:26:d0:65:6b:32:41:a8:ea:4b:9e:47:
e0:08:46:4e:77:30:0c:91:d7:69:8b:48:24:33:cc:4e:de:0d:
06:98:ac:a9:70:16:cc:77:02:dd:fd:ba:2c:cb:b2:53:72:7d:
c9:13:65:da:1b:15:40:b6:6d:b1:ca:a9:c5:42:bc:55:84:7a:
d1:87:55:90:45:a2:50:a8:a0:13:55:dc:ea:1f:12:35:73:87:
90:b9:79:5a:fa:b6:66:31:0b:7e:f9:50:ca:29:a5:b0:ce:6d:
67:0e:a9:a7:62:5b:12:60:97:eb:9b:f4:8d:c2:4c:7a:eb:ec:
3c:35:00:68:6d:b8:3f:66:4c:52:fa:d9:92:fe:96:71:3d:cf:
f8:17:e6:36:c7:b2:ea:a5:c8:9d:57:c6:2c:70:dc:0f:cb:95:
eb:4b:d8:ea:a6:8c:4b:88:01:75:3b:a3:2b:19:9e:07:a5:5b:
0d:97:85:50:f8:fe:6c:cb:e7:4a:d3:b5:ab:99:58:83:e8:d2:
2f:5b:b8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:21 2025 by rpki-client