Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer
File: 5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer (raw, json)
Hash identifier: ZlH/SMHTAxabHqLXD37Y67lNPEpXdfspuCIHKRl+rPw=
Subject key identifier: 5D:D0:CA:D6:FE:5D:D0:2B:05:3D:6B:01:DB:D5:3A:59:8B:D3:50:BF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 593D0485F1475521C348E8A496FF1F7C5EB1615C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.mft
caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 08 Apr 2024 20:00:01 +0000
Certificate not after: Mon 07 Apr 2025 20:05:01 +0000
Subordinate resources: AS: 28220
IP: 45.4.64.0/22
IP: 138.0.100.0/22
IP: 168.227.108.0/22
IP: 168.228.68.0/22
IP: 170.82.92.0/22
IP: 177.89.0.0/16
IP: 177.137.192.0/20
IP: 179.96.192.0/21
IP: 179.96.240.0/20
IP: 179.190.128.0/17
IP: 186.192.16.0/20
IP: 186.193.96.0/20
IP: 186.208.208.0/21
IP: 186.235.0.0/20
IP: 186.236.192.0/19
IP: 186.251.112.0/21
IP: 187.49.192.0/20
IP: 187.60.64.0/19
IP: 187.61.128.0/17
IP: 187.86.96.0/20
IP: 187.87.112.0/20
IP: 187.108.64.0/20
IP: 187.109.176.0/20
IP: 187.111.224.0/19
IP: 189.45.16.0/20
IP: 189.124.128.0/17
IP: 191.241.40.0/21
IP: 200.233.80.0/20
IP: 201.148.188.0/22
IP: 2804:54::/32
IP: 2804:2140::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:3d:04:85:f1:47:55:21:c3:48:e8:a4:96:ff:1f:7c:5e:b1:61:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 8 20:00:01 2024 GMT
Not After : Apr 7 20:05:01 2025 GMT
Subject: CN=5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:33:2a:08:81:48:ee:6d:92:d5:62:ce:23:
ac:77:8e:03:ed:20:c4:f6:0b:e9:24:e3:f6:82:98:
5e:9f:3f:73:46:da:6b:f2:41:e4:ad:63:3e:69:5e:
e4:ef:d6:b6:6b:ee:a8:4f:38:66:28:4c:c7:c5:06:
30:c5:43:30:24:b4:59:ef:c6:eb:8c:51:75:c9:81:
bb:8d:f8:63:cc:5b:43:39:93:ea:a4:cc:03:4f:a2:
89:0a:e4:5b:f7:93:36:bb:29:af:fd:3e:b8:f4:05:
71:b2:f2:90:e7:45:4e:72:29:83:38:bd:93:b5:21:
51:70:c1:4b:8d:4d:cc:a2:24:12:93:26:02:41:55:
31:c1:64:00:19:d9:85:21:f0:00:e5:16:59:dc:1e:
ca:75:9b:42:b2:fa:7c:79:d6:03:97:4f:d6:f9:6b:
bd:03:9a:d2:bf:b7:b8:6b:02:cb:74:14:c6:c3:6f:
9f:3f:6f:95:b6:15:30:d6:c1:82:15:b9:87:f2:43:
ec:ce:ba:4a:9e:9d:c8:bd:43:51:12:7e:67:a2:b6:
8b:9d:49:8b:20:70:79:0d:10:ab:80:bf:86:fd:73:
6f:5f:54:6b:13:f6:fd:9d:74:e3:cb:37:08:5b:09:
dd:f2:25:6e:9f:dd:46:98:a2:c8:b7:b0:bb:bd:93:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5D:D0:CA:D6:FE:5D:D0:2B:05:3D:6B:01:DB:D5:3A:59:8B:D3:50:BF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.64.0/22
138.0.100.0/22
168.227.108.0/22
168.228.68.0/22
170.82.92.0/22
177.89.0.0/16
177.137.192.0/20
179.96.192.0/21
179.96.240.0/20
179.190.128.0/17
186.192.16.0/20
186.193.96.0/20
186.208.208.0/21
186.235.0.0/20
186.236.192.0/19
186.251.112.0/21
187.49.192.0/20
187.60.64.0/19
187.61.128.0/17
187.86.96.0/20
187.87.112.0/20
187.108.64.0/20
187.109.176.0/20
187.111.224.0/19
189.45.16.0/20
189.124.128.0/17
191.241.40.0/21
200.233.80.0/20
201.148.188.0/22
IPv6:
2804:54::/32
2804:2140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28220
Signature Algorithm: sha256WithRSAEncryption
74:f2:0f:87:a7:16:bf:96:08:52:18:22:3e:ba:9a:6f:02:fd:
af:c3:04:ec:66:0a:cb:5f:19:c6:c4:11:13:f1:9a:7a:a2:8f:
21:e1:6d:02:8f:b4:11:8f:06:19:e8:ac:ef:fd:b9:c5:a1:c9:
00:a0:11:b7:f2:b3:0e:a4:38:b3:5a:49:f4:f3:ff:96:15:84:
6c:18:7a:dc:3f:33:e4:5e:0b:86:ff:82:c8:96:eb:9a:11:8b:
7b:e0:29:50:5c:35:94:84:9b:70:77:c6:c9:97:ed:9a:bc:40:
63:cd:9e:12:29:ff:e4:cf:d9:5b:0f:88:2a:a8:6e:5f:66:71:
36:61:60:3b:63:d4:99:59:1f:7b:50:96:7b:04:5d:5a:49:a3:
6d:03:ab:2b:8c:b7:82:3b:fd:cd:26:39:58:d8:a9:0a:32:d6:
05:5f:8b:ff:7c:69:4c:17:35:7e:3b:df:55:22:a6:bc:23:3c:
84:7c:9f:c6:3d:04:b4:89:0a:0c:11:83:44:7d:c2:c5:18:a2:
f2:f1:5b:1a:3e:5e:09:67:3b:35:fc:47:a7:e8:4f:55:fc:0f:
95:92:37:1c:ed:48:11:86:0c:dd:ea:ca:1d:0f:b7:a5:38:86:
93:98:b5:4e:77:3c:e9:26:f9:66:18:02:37:7e:95:f5:fd:ed:
a3:ee:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:24 2025 by rpki-client