Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer
File: 3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer (raw, json)
Hash identifier: ERF4TG0zgv7zkBQ0hyskHJJ7joXxO1l2LOedws6QpAo=
Subject key identifier: 3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 06FEBF60B194260669DAF0B48028CCC3281EABE1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.mft
caRepository: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 19 Jan 2025 00:35:08 +0000
Certificate not after: Sun 18 Jan 2026 00:40:08 +0000
Subordinate resources: AS: 268707
AS: 270966
IP: 45.169.160.0/23
IP: 2804:5984::/32
Validation: Failed, certificate revoked on Mon 03 Feb 2025 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fe:bf:60:b1:94:26:06:69:da:f0:b4:80:28:cc:c3:28:1e:ab:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 19 00:35:08 2025 GMT
Not After : Jan 18 00:40:08 2026 GMT
Subject: CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:37:f9:ea:41:28:9f:0b:7f:5f:d1:d6:d5:39:
47:9d:5e:b9:f7:3d:23:75:49:4b:e5:b7:a2:51:d7:
0e:c8:fd:08:fc:88:34:84:af:c5:52:97:b8:16:03:
61:c8:07:3c:66:c6:a2:55:fd:18:a5:e4:ba:7e:1f:
f0:8f:04:b6:db:40:98:55:12:ae:09:d8:4c:d1:cb:
86:47:b0:8a:ff:97:36:8d:c3:32:01:15:b0:89:63:
27:95:a0:db:1c:9b:82:20:6c:f6:75:b8:b5:df:01:
f6:91:7a:d4:8c:5a:03:ec:3d:3b:32:56:28:f0:81:
69:91:f7:7a:5e:77:a9:44:99:4b:13:14:e8:15:0e:
b1:80:ca:a3:97:1f:e6:7e:72:b8:7e:f6:cf:36:57:
03:08:fe:dd:4d:26:9a:30:19:d4:a5:c7:1d:0e:e6:
e8:c6:85:02:b8:83:fd:4e:2f:3a:8b:ec:38:37:6f:
e5:e0:d1:37:24:10:1b:ab:78:54:b4:35:90:4a:59:
8a:05:1e:e7:5b:8a:b1:84:7b:04:e1:54:99:1f:ee:
ca:b2:f5:ba:3a:71:d0:55:c8:50:6e:e0:7f:04:88:
ab:f8:24:e6:08:2e:17:1a:c4:6a:e9:38:c8:20:59:
93:8c:0f:88:fa:12:8b:57:ca:14:1e:bd:cf:02:09:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.160.0/23
IPv6:
2804:5984::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268707
270966
Signature Algorithm: sha256WithRSAEncryption
28:3c:15:44:0e:07:d0:0c:ce:44:82:73:7b:c7:3e:16:c2:3e:
d5:97:47:20:30:ee:5a:cf:63:bf:8d:71:fb:d3:77:e9:a0:02:
45:86:ad:8f:2b:7f:51:fd:48:a3:8d:66:a5:4b:8e:5b:cc:1f:
11:51:b6:05:d6:2b:51:58:98:82:99:0b:75:c8:99:df:05:17:
ef:c4:9a:f4:45:ac:f4:77:96:ce:a5:a0:a5:ef:78:17:ec:4d:
80:b3:26:f3:f0:d1:93:10:7e:d5:57:da:3b:9c:2a:34:f7:30:
66:d6:77:dc:b9:35:33:ce:fe:ab:42:6a:02:18:e6:78:e5:87:
b0:41:48:9a:d1:a7:8f:89:a4:38:48:14:01:1c:e2:a7:f7:01:
cd:70:29:da:7b:5e:2a:8b:87:bc:ca:48:d7:8b:b1:d0:12:ed:
7b:fc:64:f0:23:b6:b4:ed:a2:33:18:78:40:fc:55:20:d8:ad:
3b:94:54:7a:cd:29:df:d7:96:2f:e3:c4:f4:b7:c8:05:f1:d2:
8f:b6:3e:44:b0:e4:0a:aa:04:8c:26:11:b7:78:6f:08:49:af:
ce:e9:1a:c3:82:1a:15:c5:e1:04:d8:15:57:53:7d:5b:83:bc:
cb:c5:fa:2e:fc:44:f7:ea:ab:f8:75:79:78:f0:ea:0b:7e:73:
f7:d8:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:20 2025 by rpki-client