Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer
File: 7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer (raw, json)
Hash identifier: kH15RSMLpqgrmnN5uI80l+I6gQLMXRd+bdeCuQb5BVE=
Subject key identifier: 7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 041AAEE235B82DFB67E6FF0903C5C132415D43D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.mft
caRepository: rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 06 Sep 2024 16:48:15 +0000
Certificate not after: Fri 05 Sep 2025 16:53:15 +0000
Subordinate resources: AS: 273497
IP: 201.49.184.0/23
IP: 2804:8f8c::/32
Validation: Failed, certificate revoked on Thu 23 Jan 2025 15:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:1a:ae:e2:35:b8:2d:fb:67:e6:ff:09:03:c5:c1:32:41:5d:43:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 6 16:48:15 2024 GMT
Not After : Sep 5 16:53:15 2025 GMT
Subject: CN=7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:5d:6b:7b:bb:02:ed:fa:3f:c6:2d:bd:aa:
46:d0:38:bd:3b:f4:4d:cc:40:38:c0:5d:54:c3:a7:
fa:9a:57:ca:7c:b0:1b:2b:8c:59:df:dc:a6:b1:da:
33:67:c0:33:01:a7:5e:76:90:63:cc:b4:77:79:69:
3e:d9:f6:d2:81:e4:83:76:c6:fb:18:8b:ca:f2:53:
3b:04:ee:23:0e:65:e4:b2:d1:45:c8:db:d1:1c:35:
9c:93:c5:c5:58:54:67:be:57:59:28:fa:ee:90:01:
2d:ab:27:91:fe:86:77:29:4e:3f:ff:d9:a4:dd:da:
51:94:da:4e:f2:58:26:11:d7:3a:d8:1b:43:58:e9:
2d:81:c9:ee:43:ea:0b:de:39:56:45:db:9f:69:39:
f8:06:46:b7:73:92:1b:97:49:7f:a7:65:9f:75:4f:
b0:f6:3b:97:0f:c0:00:0b:3a:b0:1e:c4:6b:49:82:
f7:54:18:89:e5:28:b3:05:59:b7:8b:bd:10:79:b5:
c8:83:41:15:99:de:16:45:54:2a:c9:2c:67:f7:a8:
9a:62:31:39:d4:ea:10:8f:62:0e:50:22:1d:5e:e1:
70:5a:2b:5e:0b:f0:e8:86:51:38:a7:5f:ab:99:59:
3b:75:63:24:1b:af:af:64:e9:9d:5b:50:a9:db:7b:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.184.0/23
IPv6:
2804:8f8c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273497
Signature Algorithm: sha256WithRSAEncryption
15:ec:54:01:63:a2:d0:ad:5d:16:62:52:8b:37:66:da:4f:fd:
14:1f:7e:98:0f:b1:d2:3f:26:07:ab:71:29:75:e7:49:16:a9:
19:e4:da:23:1a:62:ce:22:c2:ba:9a:20:b8:5f:35:ca:40:f3:
ec:8f:96:ea:60:23:a3:10:57:7b:e0:96:ce:3e:17:58:d5:18:
86:d5:c1:dc:f6:7d:af:33:50:20:0b:44:65:e4:29:37:d8:ce:
97:0b:0b:99:24:87:20:ac:75:c9:db:0e:95:d8:98:62:53:6c:
88:f2:bc:32:94:d6:85:15:5a:f2:f7:4a:31:d7:aa:7f:44:82:
ce:f6:98:d8:ae:66:44:3f:b2:7c:9b:7f:76:49:53:e3:0e:b5:
f9:21:c5:1c:d5:d6:72:f7:b3:82:b6:94:9b:3f:aa:e4:d7:66:
63:55:05:90:a6:f9:d0:b2:b2:8d:c3:03:85:42:d5:ca:f5:6e:
59:7e:88:d8:4e:fc:c9:63:6e:4f:e7:98:50:c6:c2:f8:f4:4c:
31:f9:dd:da:bc:36:81:68:a3:e2:32:51:0e:f2:ef:02:3c:f5:
8b:bc:19:b7:f9:16:6b:bd:44:35:f3:ef:bd:b1:6e:b5:a9:d4:
88:5e:55:15:4c:f9:bb:23:09:ce:25:45:07:66:22:9f:c7:0d:
f4:6c:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:41:59 2025 by rpki-client