Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/41CF68E05A15D52FE46095FCDE475217E43334A2.cer
File: 41CF68E05A15D52FE46095FCDE475217E43334A2.cer (raw, json)
Hash identifier: tnYqNOZTPVbpihew9HVX0BZCI8ZrylwS9nBHfcmgEEU=
Subject key identifier: 41:CF:68:E0:5A:15:D5:2F:E4:60:95:FC:DE:47:52:17:E4:33:34:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 46EA9FAD18FDAA70FC8438B82A1421F9057D1120
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/41CF68E05A15D52FE46095FCDE475217E43334A2.mft
caRepository: rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 20 Dec 2024 16:16:12 +0000
Certificate not after: Fri 19 Dec 2025 16:21:12 +0000
Subordinate resources: AS: 271335
IP: 207.248.20.0/22
IP: 2804:79e8::/32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ea:9f:ad:18:fd:aa:70:fc:84:38:b8:2a:14:21:f9:05:7d:11:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 20 16:16:12 2024 GMT
Not After : Dec 19 16:21:12 2025 GMT
Subject: CN=41CF68E05A15D52FE46095FCDE475217E43334A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:64:ae:51:69:1f:f9:4b:64:ca:a8:c2:01:47:
72:d7:71:3f:f2:d3:8d:44:ef:2e:71:81:ac:f9:3a:
c6:bf:a0:dd:7b:0f:f5:f2:36:c7:6a:4a:a4:4c:e5:
a0:ee:83:06:d8:55:29:16:a0:f2:2b:82:e4:4a:14:
b5:a4:4b:81:d9:0c:78:b2:0e:3b:30:19:c8:e7:4d:
d6:4d:f1:79:66:af:36:3e:b7:4e:d9:19:28:f5:3b:
57:8c:cd:82:20:06:8e:90:f0:13:ff:5b:b2:26:15:
99:ed:72:f5:df:63:6f:54:90:6d:d9:b5:f0:7d:c3:
06:08:16:86:05:da:70:ad:f9:b0:cc:0e:9d:b1:d7:
71:36:cd:5d:73:55:e8:5b:82:76:0b:f0:4a:06:5e:
69:57:58:9b:55:c2:b6:4d:4a:3f:73:b2:f3:eb:6e:
ef:b2:ef:f3:15:d8:83:b2:c5:6d:fa:28:fb:86:3d:
b6:e7:25:2f:4f:e9:26:6e:ba:81:84:ae:12:19:a0:
14:b7:41:31:03:23:c5:8c:82:fc:86:13:39:f8:93:
b6:54:10:8e:f8:62:9d:6d:25:51:c3:82:37:ea:83:
60:17:32:b6:69:64:95:09:c1:35:40:32:8c:26:18:
67:d4:e0:b8:76:1f:d2:1d:97:a1:7f:4d:40:61:03:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
41:CF:68:E0:5A:15:D5:2F:E4:60:95:FC:DE:47:52:17:E4:33:34:A2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/41CF68E05A15D52FE46095FCDE475217E43334A2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.20.0/22
IPv6:
2804:79e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271335
Signature Algorithm: sha256WithRSAEncryption
b1:75:3a:08:38:4a:4d:d1:95:ab:aa:5e:ca:93:45:4a:14:1d:
b0:45:30:a0:4a:8c:3b:06:57:37:f6:a3:82:60:f6:eb:aa:7c:
7e:cb:6c:fa:08:2d:ef:25:77:c4:a9:9a:3f:da:be:9c:78:b9:
58:41:ee:a1:3d:db:9b:be:24:ee:93:c3:10:14:3f:ce:48:d0:
86:48:57:c3:71:29:aa:b6:3b:0f:0c:8e:56:5d:6c:1e:9f:36:
55:42:62:7d:03:67:3f:f7:60:e6:b4:e3:50:dd:b2:9b:c7:93:
97:f6:4c:53:2f:2b:fb:e5:2d:e0:84:a0:23:0a:f6:2c:30:b6:
c4:dc:d0:96:3f:b9:f0:b3:e5:18:a6:7c:b8:71:6d:9e:32:9d:
03:eb:04:16:4d:cc:7e:8e:ac:8c:b1:34:2e:c9:d9:94:b3:ba:
d8:2d:2c:0e:bc:68:a1:19:80:58:53:2e:03:6e:cc:a2:c3:42:
6b:19:85:b6:6f:30:5f:c5:cd:26:87:11:4e:d6:eb:e8:cf:a6:
a8:23:cb:f8:19:ac:97:f2:85:c3:65:fe:cc:6a:b9:e5:f8:62:
c0:59:ee:a9:80:e5:f5:e9:65:57:e2:db:b4:14:d9:1c:0e:a2:
61:56:0e:b0:6e:de:3b:36:0e:ad:8d:91:e8:c2:b8:a9:04:4f:
71:a8:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:30 2025 by rpki-client