Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
File: 838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer (raw, json)
Hash identifier: kV2sz1UNRra+Oceuzr6NIFkhVdA8UA4u5SqrCRll2So=
Subject key identifier: 83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3586E917ED7BE8383F926B91AC9CFD83B2E76B16
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.mft
caRepository: rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 09 Jan 2025 04:39:36 +0000
Certificate not after: Thu 08 Jan 2026 04:44:36 +0000
Subordinate resources: AS: 269441
IP: 45.185.36.0/22
IP: 2804:64ac::/32
Validation: Failed, certificate revoked on Sat 18 Jan 2025 17:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:86:e9:17:ed:7b:e8:38:3f:92:6b:91:ac:9c:fd:83:b2:e7:6b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 9 04:39:36 2025 GMT
Not After : Jan 8 04:44:36 2026 GMT
Subject: CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:76:82:83:51:9a:4d:f0:58:7d:26:fd:1c:
ff:2b:0c:a0:ff:6a:05:89:a6:81:f5:42:3d:26:30:
55:c8:66:5a:a8:c7:8e:31:ac:38:12:a4:af:39:8e:
ef:1c:6d:7f:b5:6b:bd:5c:06:34:8a:e0:69:92:31:
83:5d:6f:5f:ce:e8:88:d2:09:62:37:13:cd:2a:ad:
55:ae:43:25:7f:aa:b1:25:ac:a3:9a:15:27:c8:4f:
e2:e7:29:03:b4:39:fb:b2:e2:24:33:d4:7e:07:a8:
1f:e4:88:8f:c8:40:ac:ee:de:3e:19:21:f3:49:ce:
04:4d:1f:64:b8:d5:1b:2e:46:bb:a7:bf:6c:74:b4:
13:fa:dc:a9:1a:32:06:ba:f1:b3:a5:7f:7d:ad:dd:
09:e6:45:bc:fc:ae:bc:19:2e:a7:69:9d:e1:58:f0:
2d:6e:92:b0:5c:74:0f:46:ba:7e:1f:0b:e4:5b:6f:
be:3d:70:d7:53:ac:95:7a:f1:62:4f:dd:ae:01:ec:
2c:75:4d:b0:f5:b7:fd:b5:98:fd:56:14:6d:93:d5:
02:d9:1d:7a:ae:e6:21:69:fa:e2:d0:65:db:15:36:
ce:c4:15:85:33:ac:3e:3d:2e:50:bf:2d:cf:c3:d6:
98:64:6e:ad:8a:83:23:4b:f2:cf:3c:92:5d:9c:de:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.36.0/22
IPv6:
2804:64ac::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269441
Signature Algorithm: sha256WithRSAEncryption
8c:99:ed:93:59:a9:f9:e0:76:52:e2:2a:11:f5:c6:3f:de:50:
f5:2a:66:3d:7b:00:86:da:62:5e:32:9f:78:cf:ab:05:ab:72:
c2:3b:2d:2b:e7:3c:d7:47:17:53:06:25:0d:2f:2c:3d:4b:c6:
de:3f:d5:69:0a:7c:60:4a:5d:73:fc:1c:9a:c1:36:da:46:06:
d0:c1:5e:13:61:cc:17:d9:d1:34:5f:98:76:f2:17:83:83:b3:
b5:dd:98:3b:42:88:4c:0e:a8:e2:d7:cb:a8:be:3d:c7:b0:54:
ec:aa:42:c5:79:94:6a:90:59:75:cb:27:9b:da:b0:25:93:6b:
a2:2b:79:85:2d:00:40:1d:0d:6d:a7:9d:c5:69:a4:f5:7e:65:
b2:81:92:ab:dd:c6:e3:78:18:ff:85:91:48:3a:0f:45:31:99:
4c:c1:69:d0:e0:15:eb:d6:9e:b9:81:0b:f1:39:74:62:3f:e1:
3c:dd:53:3e:13:83:6c:bc:f7:29:c8:ee:79:15:95:f1:5b:68:
df:f1:02:e0:34:4b:4c:e1:10:cc:5e:95:bc:2f:9c:07:d6:62:
14:31:10:aa:bf:6f:3d:9b:4b:f5:93:2f:4f:ef:ad:e7:cf:d6:
f2:a9:f4:90:a3:90:3d:4d:9f:53:74:4f:a8:0f:11:99:23:e4:
f5:ac:59:86
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUNYbpF+176Dg/kmuRrJz9g7LnaxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMDkwNDM5MzZaFw0yNjAxMDgwNDQ0MzZaMDMxMTAvBgNV
BAMTKDgzOENCRTdCM0QzRjFERDU5QkRDRjMyNTk4M0UxRUU4OUFDQzk2OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0K3aCg1GaTfBYfSb9HP8rDKD/
agWJpoH1Qj0mMFXIZlqox44xrDgSpK85ju8cbX+1a71cBjSK4GmSMYNdb1/O6IjS
CWI3E80qrVWuQyV/qrElrKOaFSfIT+LnKQO0Ofuy4iQz1H4HqB/kiI/IQKzu3j4Z
IfNJzgRNH2S41RsuRrunv2x0tBP63KkaMga68bOlf32t3QnmRbz8rrwZLqdpneFY
8C1ukrBcdA9Gun4fC+Rbb749cNdTrJV68WJP3a4B7Cx1TbD1t/21mP1WFG2T1QLZ
HXqu5iFp+uLQZdsVNs7EFYUzrD49LlC/Lc/D1phkbq2KgyNL8s88kl2c3lljAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDjL57PT8d1Zvc
8yWYPh7omsyWlzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUFw
S1NqeXdHTm5ZS0pMYlplNEc3WVViY1dkVTlhSFo0QXZjamtUVGl1NU0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVB
cEtTanl3R05uWUtKTGJaZTRHN1lVYmNXZFU5YUhaNEF2Y2prVFRpdTVNLzAvODM4
Q0JFN0IzRDNGMURENTlCRENGMzI1OTgzRTFFRTg5QUNDOTY5Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbkkMA0EAgACMAcDBQAoBGSsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQcgTANBgkqhkiG9w0BAQsFAAOCAQEAjJntk1mp+eB2UuIq
EfXGP95Q9SpmPXsAhtpiXjKfeM+rBatywjstK+c810cXUwYlDS8sPUvG3j/VaQp8
YEpdc/wcmsE22kYG0MFeE2HMF9nRNF+YdvIXg4Oztd2YO0KITA6o4tfLqL49x7BU
7KpCxXmUapBZdcsnm9qwJZNroit5hS0AQB0NbaedxWmk9X5lsoGSq93G43gY/4WR
SDoPRTGZTMFp0OAV69aeuYEL8Tl0Yj/hPN1TPhODbLz3KcjueRWV8Vto3/EC4DRL
TOEQzF6VvC+cB9ZiFDEQqr9vPZtL9ZMvT++t58/W8qn0kKOQPU2fU3RPqA8RmSPk
9axZhg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:14 2025 by rpki-client