Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F6E41F37AB48469D1CE88AD1951EB232B517B50.cer
File: 6F6E41F37AB48469D1CE88AD1951EB232B517B50.cer (raw, json)
Hash identifier: 19WupPEKUlxul2bGRj8ypX5tPycsnvwKk2AdBtoaCdY=
Subject key identifier: 6F:6E:41:F3:7A:B4:84:69:D1:CE:88:AD:19:51:EB:23:2B:51:7B:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 434CB096C83ABE6FA1AEA0286D8C4E57272BEEC4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/6F6E41F37AB48469D1CE88AD1951EB232B517B50.mft
caRepository: rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 13 Mar 2025 17:04:28 +0000
Certificate not after: Thu 12 Mar 2026 17:09:28 +0000
Subordinate resources: AS: 53186
IP: 168.195.12.0/22
IP: 186.232.80.0/22
IP: 2804:3438::/32
Validation: Failed, certificate revoked on Thu 20 Mar 2025 18:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4c:b0:96:c8:3a:be:6f:a1:ae:a0:28:6d:8c:4e:57:27:2b:ee:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 13 17:04:28 2025 GMT
Not After : Mar 12 17:09:28 2026 GMT
Subject: CN=6F6E41F37AB48469D1CE88AD1951EB232B517B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:7b:fd:6a:3c:ff:5e:75:12:6d:6c:d4:9b:
2f:11:b1:d7:81:de:85:a7:50:cd:bc:87:b0:eb:b6:
be:86:d3:7b:59:b3:c8:8b:26:06:20:6a:18:2d:15:
be:c7:3d:c9:90:ea:44:fe:1a:dd:8f:c2:6b:01:d2:
30:2d:7c:4f:73:63:e1:51:9b:10:12:70:df:55:69:
aa:0b:18:80:2d:aa:79:61:b6:20:6b:ea:a5:82:49:
67:0d:69:f9:33:92:9d:11:bf:b3:80:25:63:75:c4:
74:e0:a2:4c:31:aa:8b:0f:6a:ff:0e:07:64:a0:3b:
ca:40:e6:93:16:1c:1e:a6:98:2a:46:65:e4:93:5d:
bd:cc:2b:12:a3:4d:f9:00:91:d1:ff:af:ba:ca:fa:
9d:89:ba:40:24:9a:cf:e8:3f:3b:1c:1c:d7:46:88:
0d:2f:b2:1d:3e:f5:4c:69:5d:43:0d:5f:10:f8:e6:
43:57:cb:78:6e:8a:40:55:dd:3b:70:e6:ba:1e:09:
b0:b8:8e:5b:03:65:52:85:a7:05:f2:ae:7a:1a:c3:
41:6c:3f:02:cb:50:99:20:7d:51:23:e2:9b:63:24:
1a:2d:5d:6f:52:25:b2:90:52:e1:c2:ec:4c:a4:f4:
ea:f2:34:5e:f7:ec:26:2a:7e:ea:d0:41:71:ae:ef:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6F:6E:41:F3:7A:B4:84:69:D1:CE:88:AD:19:51:EB:23:2B:51:7B:50
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/6F6E41F37AB48469D1CE88AD1951EB232B517B50.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.12.0/22
186.232.80.0/22
IPv6:
2804:3438::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53186
Signature Algorithm: sha256WithRSAEncryption
ce:80:5e:51:c6:9d:fd:c2:82:9e:ac:a3:d6:81:1c:d9:78:b1:
ea:78:4a:f2:c5:d4:0d:2e:99:58:03:b9:53:e1:03:bc:39:f2:
06:04:ca:ed:f5:60:ea:0d:9c:ef:94:82:44:ae:d0:8e:6f:6a:
69:fa:67:d1:2a:4c:02:fa:af:75:d3:9c:e5:3f:4b:b6:0e:87:
f1:3a:66:60:64:9e:37:65:da:22:dd:28:22:99:b9:a7:46:15:
2b:d3:e7:03:47:73:41:71:e7:38:ec:9c:13:af:33:7b:2c:95:
02:7e:fe:84:17:4b:14:73:05:c6:9e:f0:66:ce:75:a4:d8:53:
57:7c:79:7f:c1:1d:5c:23:53:dd:fd:d0:91:ca:6e:3e:4c:09:
c0:8b:af:19:87:00:ae:1d:c7:0e:33:11:8a:9d:76:ed:66:3b:
0a:72:a0:9a:ff:88:3c:21:1b:56:d6:fc:a4:2f:82:e9:94:53:
63:f7:82:1e:d1:31:15:15:07:7b:33:2d:48:b3:6a:55:42:15:
a7:2f:a6:4a:62:5a:90:ae:d7:ac:7c:73:1c:de:31:9f:ea:a9:
31:29:28:33:70:85:df:84:06:d8:c9:07:87:a7:ed:af:96:59:
99:f0:82:2d:dc:6c:e1:39:48:3b:27:e5:96:06:40:e3:49:e6:
be:87:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:53 2025 by rpki-client