Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
File: 4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer (raw, json)
Hash identifier: 4jF3UTldFI6/oYQSEfTtf45s8u3NRXWd1ob7aLEgQvU=
Subject key identifier: 4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7293162B57B4A5BCDA33E7A4C5F1388ED5383DD3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.mft
caRepository: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 07 Apr 2025 19:52:30 +0000
Certificate not after: Mon 06 Apr 2026 19:57:30 +0000
Subordinate resources: AS: 269664
IP: 45.191.20.0/22
IP: 2804:6800::/32
Validation: Failed, certificate revoked on Tue 22 Apr 2025 12:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:93:16:2b:57:b4:a5:bc:da:33:e7:a4:c5:f1:38:8e:d5:38:3d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 7 19:52:30 2025 GMT
Not After : Apr 6 19:57:30 2026 GMT
Subject: CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:3f:85:01:5e:c2:3b:c3:6f:ca:7b:93:ff:
7e:f6:f6:57:a9:d5:a5:7c:73:bd:75:2a:d1:12:42:
e4:b3:b4:20:28:ad:77:71:5c:61:a9:1d:b7:7e:60:
71:7c:62:9e:d7:d9:92:61:9e:dd:e7:0d:7c:da:5f:
78:65:c1:11:12:66:b7:2c:72:3d:e9:01:23:b4:25:
48:6c:39:9f:ae:86:bf:9c:e3:e2:68:c4:ed:b2:0b:
02:4b:31:9d:62:e8:6c:98:4f:9d:3a:a8:a7:5c:79:
1b:36:68:ba:db:2a:e6:05:f6:f6:47:27:c0:cf:e6:
cb:55:54:60:b0:18:15:d2:92:c7:4b:c2:e4:c6:73:
df:fd:0d:9a:59:cc:33:05:76:b5:01:cd:df:4a:d5:
00:73:76:ca:b3:21:24:b3:e8:61:87:73:b3:53:4b:
6c:0e:a2:81:aa:be:ae:49:bc:07:7a:13:8b:96:db:
f7:3c:37:f3:0a:80:b4:95:ba:79:f8:2a:3c:ee:09:
5d:7d:fc:84:58:21:40:58:d1:2e:42:df:1c:d4:05:
18:d5:fb:21:68:04:72:47:07:c7:f0:25:07:6c:88:
b4:f5:57:d0:28:c2:9b:04:d0:5a:b5:ff:ec:72:9e:
b0:ff:f1:dc:71:78:3c:f3:c5:81:6b:ce:1a:ff:7a:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.20.0/22
IPv6:
2804:6800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269664
Signature Algorithm: sha256WithRSAEncryption
02:ae:b7:81:5e:95:50:73:2c:6e:ac:a2:65:89:0f:a5:67:37:
1f:6d:83:48:f4:18:b0:18:c5:2d:01:2e:41:82:96:11:41:27:
fe:7b:11:d0:89:a2:a3:bc:95:94:dc:de:94:c8:42:57:db:14:
ba:71:38:d8:de:42:34:71:80:10:7a:84:e5:62:49:b0:b9:30:
c3:92:e1:a9:19:50:44:1e:7b:07:26:01:e9:70:4e:63:e4:a6:
9f:e4:04:68:34:e1:f9:e8:77:cc:14:16:69:81:b6:dd:97:89:
e0:72:d9:21:a8:4b:63:f6:20:7a:4d:b1:54:6d:d1:77:1c:8a:
05:6f:69:e8:db:32:5f:43:fa:3b:85:ac:32:dc:73:50:e0:7c:
e4:19:f3:74:10:5c:76:39:5a:36:71:f4:73:c7:9b:0b:ac:ab:
42:29:ea:d0:a4:8f:92:8a:c5:ef:e6:91:df:4c:42:96:52:84:
47:6a:cd:4d:c3:e7:87:97:ef:e3:5e:b3:5c:9f:88:6c:fd:88:
87:5c:b1:8d:fa:d9:d4:94:23:c2:9c:80:d4:d1:18:4f:36:02:
28:8a:3b:2f:f7:ea:de:5f:5c:ec:2b:77:04:a4:e3:08:b8:49:
1e:f3:66:13:f8:c7:2e:3e:fb:c7:79:3b:49:1b:58:f1:d5:07:
51:60:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:13 2025 by rpki-client