Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer
File: 7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer (raw, json)
Hash identifier: ADuSf54SFiZmgqc/ycz66vnQQ1LIm0W2wg41Qfodm+Y=
Subject key identifier: 7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 325079A6FF41D123F380FD42398EC250A3C2F79A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.mft
caRepository: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 15 Feb 2025 22:31:44 +0000
Certificate not after: Sat 14 Feb 2026 22:36:44 +0000
Subordinate resources: AS: 263424
IP: 131.108.8.0/22
IP: 138.121.216.0/22
IP: 170.82.116.0/22
IP: 170.231.152.0/22
IP: 177.91.32.0/22
IP: 2804:1194::/32
Validation: Failed, certificate revoked on Wed 26 Mar 2025 11:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:50:79:a6:ff:41:d1:23:f3:80:fd:42:39:8e:c2:50:a3:c2:f7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 15 22:31:44 2025 GMT
Not After : Feb 14 22:36:44 2026 GMT
Subject: CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:c7:76:f7:89:28:c1:93:41:62:33:42:be:
8b:16:f2:3f:f3:75:94:50:21:c6:ba:ba:40:94:bd:
e1:a7:c4:6e:12:de:d7:12:00:6d:c4:c8:c2:ae:84:
3c:b2:16:e0:31:99:30:cf:1b:08:d1:29:47:0d:d4:
52:5f:eb:9c:89:f9:32:2b:fc:97:5c:6d:eb:b8:30:
f4:a3:d7:91:ef:ce:37:fb:15:8f:a8:99:fe:6f:c0:
0a:d6:8f:4d:c3:e2:2c:c8:96:54:04:b5:22:98:be:
ce:b2:b7:75:3f:66:03:ff:50:9b:23:42:cd:29:e7:
42:20:b1:dd:5f:1a:93:aa:b7:bf:76:b6:6f:12:0d:
56:49:a8:37:82:fc:49:8b:02:7c:fa:8b:01:6d:96:
00:6c:a6:93:c1:34:52:75:38:92:2b:72:8f:a4:13:
31:ca:47:39:e3:cb:0e:d1:f3:22:c5:54:f9:4a:50:
ad:20:6c:bd:bf:59:e2:54:c7:39:ac:31:9c:c8:9f:
aa:07:0a:04:37:58:68:a8:44:7c:00:79:82:44:23:
b4:f5:da:60:fe:9d:39:e2:a3:7f:b8:b3:e1:78:f9:
1b:56:d6:2e:49:1d:7c:c6:06:5c:a1:16:d1:dd:50:
39:e0:7a:9c:a8:e5:b9:9d:70:88:d4:da:35:1d:a4:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.8.0/22
138.121.216.0/22
170.82.116.0/22
170.231.152.0/22
177.91.32.0/22
IPv6:
2804:1194::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263424
Signature Algorithm: sha256WithRSAEncryption
67:16:ef:1a:89:8c:93:8e:cc:ac:af:2a:7e:c4:b0:e9:54:00:
ed:d4:37:7b:25:5b:9c:b6:da:ee:df:9c:b2:d8:43:42:ba:3e:
67:39:d3:2c:0d:02:a4:6e:0f:95:79:1e:7e:86:ba:6d:85:a0:
a5:6f:6b:a9:70:a5:1e:48:7a:48:64:4a:38:f1:5a:c1:c7:49:
78:be:55:e1:8b:7c:f3:9a:8b:b9:dd:0c:6a:0b:0d:a5:3f:e9:
64:21:e7:ce:d4:db:29:02:db:79:4c:b0:30:ed:f7:26:96:ed:
6a:3d:b3:74:cd:af:18:66:7b:74:78:7f:0e:38:6d:ae:ec:bc:
be:c1:11:ff:63:b4:2e:59:e2:e1:0d:0a:f8:5d:f3:80:a4:86:
76:0d:4a:7c:7a:63:63:eb:70:b4:47:c7:cf:4f:1c:72:2c:3e:
e5:0f:57:04:a9:f4:ce:08:02:26:b1:68:7c:f5:ac:39:23:76:
f3:8e:6f:8a:bf:49:8d:f2:eb:29:00:61:18:84:13:d6:92:38:
3a:98:31:d1:df:5d:df:86:d8:29:90:7b:45:26:ad:14:e3:b8:
fa:42:68:8d:f2:18:65:85:c9:9d:30:ce:d7:3e:82:f4:b6:66:
37:3a:21:0e:e9:88:d1:ab:e5:a5:43:35:88:20:77:aa:61:40:
1c:04:78:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:38 2025 by rpki-client