Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
File: 48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer (raw, json)
Hash identifier: 7H2Qfuiqa6JJSuXBBiV3Rv/Zn8ifA+jKZHl3LLSM5RA=
Subject key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4881F3452650E68C445F82BE17A428244B55326E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.mft
caRepository: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 02 Dec 2024 02:59:25 +0000
Certificate not after: Mon 01 Dec 2025 03:04:25 +0000
Subordinate resources: AS: 264550
IP: 138.0.136.0/22
IP: 170.0.32.0/22
IP: 2804:215c::/32
Validation: Failed, certificate revoked on Wed 04 Dec 2024 03:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:81:f3:45:26:50:e6:8c:44:5f:82:be:17:a4:28:24:4b:55:32:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 2 02:59:25 2024 GMT
Not After : Dec 1 03:04:25 2025 GMT
Subject: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:f5:f0:e9:c8:04:5f:7f:5c:fb:6c:9b:63:
29:fd:22:b5:06:29:f9:14:4f:b5:d8:87:47:5f:96:
92:79:6d:d1:d0:e0:8f:1a:6b:7d:dd:58:1e:2e:25:
1b:34:5a:47:09:37:51:e1:89:1a:40:3b:6e:50:26:
8d:eb:10:9d:d5:18:f2:34:04:82:bd:b6:b2:8c:96:
2e:96:f4:04:8c:2a:7f:b5:d5:25:68:ca:6c:a4:aa:
f1:d1:f6:04:a1:8f:dc:cb:09:06:28:7a:53:37:e7:
fc:79:3f:13:af:ad:89:d3:0b:6a:3a:aa:9c:65:dd:
a9:c9:5a:fe:08:60:a5:d9:25:ea:eb:e6:7b:61:21:
ad:85:22:ca:d7:08:17:77:47:5c:1f:91:71:1c:f0:
c6:da:b9:c8:cb:31:1e:50:a7:09:1c:73:03:b1:90:
69:c5:ef:08:a0:89:40:4e:f6:15:df:a8:ed:34:e7:
27:1c:5c:fd:8d:6c:fa:a7:35:ce:3f:29:d7:03:42:
48:f5:1c:42:44:76:be:12:7d:05:53:dd:7d:11:d5:
0f:b3:1c:dc:ed:ca:bd:d5:3f:4b:6b:df:03:24:d7:
0b:6d:7b:0f:12:3e:6a:e3:cf:0f:67:45:0b:7d:01:
88:aa:37:70:8b:ab:c8:3b:e2:98:05:b5:c8:60:f1:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.136.0/22
170.0.32.0/22
IPv6:
2804:215c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264550
Signature Algorithm: sha256WithRSAEncryption
54:9b:11:5a:f4:96:57:ef:e3:c2:3c:52:46:dd:00:db:15:f7:
b1:a6:30:5c:7c:fb:2c:c1:5e:cf:ec:b0:6b:30:33:a1:f2:aa:
39:71:57:90:0b:d4:6e:6e:39:51:b2:4d:ea:7d:c2:4c:91:4d:
33:33:b0:eb:c6:11:23:29:e5:4b:ba:6f:24:a3:c1:94:c1:73:
28:17:97:0e:26:08:20:06:97:39:1b:5d:96:fb:1e:0c:fc:56:
25:2b:26:13:ec:16:9a:a3:de:89:40:8f:ea:78:bd:cb:a4:26:
b0:db:dc:60:89:00:60:83:71:52:05:e8:92:52:36:c4:98:a2:
0b:27:63:40:5f:26:96:6b:26:a4:c1:23:3a:2d:31:3a:eb:49:
f2:1c:d9:9b:a5:46:27:9f:df:b7:9e:b8:5e:ba:76:fa:c4:7a:
14:ae:cc:f6:71:c6:f7:e3:b6:0c:1d:75:15:10:24:a7:f8:15:
19:38:8e:4a:6a:96:a6:21:86:08:b6:cb:28:a7:d5:09:9b:15:
bc:a2:85:b0:ca:e9:ba:23:2d:14:a0:12:5e:c2:4e:d6:3f:ef:
9b:fe:88:d2:e3:77:79:92:32:cd:7a:0f:2c:9c:ea:68:fa:21:
35:a5:28:fe:3c:09:b4:88:40:7d:89:63:85:d8:1f:c3:e6:d5:
39:a3:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:26 2025 by rpki-client