Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.cer
File: 5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.cer (raw, json)
Hash identifier: LTRBghN0V3pR769mF6etPoxzRAGCcIW/VGdBASZhV7o=
Subject key identifier: 5C:8F:22:FE:BA:C6:13:37:7D:5A:07:68:B2:DE:6D:D8:1E:3C:D6:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2EC102DD721034E06691478B3089290251B4C565
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.mft
caRepository: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 03 Jan 2025 13:12:36 +0000
Certificate not after: Fri 02 Jan 2026 13:17:36 +0000
Subordinate resources: AS: 263026
IP: 138.36.20.0/22
IP: 170.83.80.0/22
IP: 186.249.208.0/21
IP: 2804:a28::/32
Validation: Failed, certificate revoked on Fri 03 Jan 2025 14:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c1:02:dd:72:10:34:e0:66:91:47:8b:30:89:29:02:51:b4:c5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 3 13:12:36 2025 GMT
Not After : Jan 2 13:17:36 2026 GMT
Subject: CN=5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:d9:3f:30:3d:55:77:33:60:e3:21:16:4a:
1b:f3:cc:aa:b6:9a:e5:36:a8:7d:49:d4:ad:46:dd:
d6:d3:50:d0:e7:2d:81:bd:32:e7:9e:f3:0b:da:27:
a5:ef:34:f0:b3:b9:01:bd:7a:52:27:3c:9d:7f:f2:
51:44:19:cd:dc:e4:49:f2:75:68:bf:4b:d4:97:e8:
d0:1a:40:bd:35:50:1d:f8:59:32:71:ec:f3:34:c7:
b9:dd:67:44:34:a3:f2:5c:df:27:26:6e:2b:24:33:
ee:eb:bb:29:f3:8f:3a:56:5b:d0:d1:ab:7b:66:29:
f0:d1:fb:84:1f:39:b5:3c:4f:48:e0:ad:a6:42:01:
6f:a8:b5:2c:03:4f:e5:1a:db:29:f2:33:a9:c9:d4:
23:e4:9c:22:a8:8a:e1:5a:b9:ec:ad:86:05:20:e7:
20:c6:61:ea:ae:33:91:f0:a0:94:37:6e:ef:30:ba:
86:de:a5:59:9e:bb:26:89:7d:7d:7e:9d:fa:d0:96:
b5:d8:c7:d3:7e:75:9b:79:f9:a4:89:a1:b7:a3:ce:
f8:05:f6:98:94:61:4e:79:c3:52:c1:8f:88:1c:cf:
08:3a:55:91:87:89:32:cb:d7:5d:00:d0:5a:9b:f1:
6d:01:e5:63:2a:cf:9b:a5:99:94:18:39:b6:4f:e9:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5C:8F:22:FE:BA:C6:13:37:7D:5A:07:68:B2:DE:6D:D8:1E:3C:D6:51
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.20.0/22
170.83.80.0/22
186.249.208.0/21
IPv6:
2804:a28::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263026
Signature Algorithm: sha256WithRSAEncryption
bc:f0:33:bf:cf:2c:42:0f:7b:d7:80:4b:25:1b:f8:d1:46:38:
80:d1:e6:fd:a5:0c:fd:85:75:35:91:2d:8e:a8:41:84:d7:5c:
2e:84:d1:e6:24:56:fb:e9:c2:74:b6:88:2d:45:50:85:7a:4a:
9f:95:37:78:39:d5:ba:a9:07:64:13:9c:9a:d3:8a:c7:98:eb:
99:fa:20:a3:e8:a8:a3:ff:09:c8:54:ee:dc:fb:bb:4d:2e:83:
16:07:db:2a:0d:ac:ed:23:7f:27:22:78:f7:ef:4a:25:d6:7a:
42:35:50:36:b1:d6:f1:10:93:51:2b:37:5c:48:31:04:06:2a:
d8:ca:28:1d:6c:4d:cc:ff:72:94:a2:bd:b2:a0:84:68:76:d1:
f8:bb:f7:16:9a:44:21:4f:49:46:63:73:8f:76:bb:e1:47:fc:
c9:e9:e1:8c:f5:17:cb:e5:d4:57:7f:d6:67:a7:80:dc:66:c5:
b7:6c:7c:c0:d8:19:af:3c:ec:3c:8f:9d:c6:bc:bc:5a:db:b5:
cd:75:57:bc:63:5b:a5:f8:7b:ef:50:d0:cb:b4:1f:23:26:25:
6b:14:c5:11:39:75:8b:81:31:02:10:e7:1c:ef:1a:9e:3e:e8:
84:fa:db:e5:4d:e7:10:df:62:11:e2:cb:d0:6c:37:fd:50:14:
d6:a0:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:51 2025 by rpki-client