Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.cer
File: 860668C5CBAB1C59B308B18605B1B2A88FAB05F1.cer (raw, json)
Hash identifier: DZTw0ZKkeHrNeXw1J745YaN5TgZBi7oO55CjFiDFCmI=
Subject key identifier: 86:06:68:C5:CB:AB:1C:59:B3:08:B1:86:05:B1:B2:A8:8F:AB:05:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 080DC252E0BFE855475F818460597D4A1EB30F70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.mft
caRepository: rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 24 Jan 2025 12:27:00 +0000
Certificate not after: Fri 23 Jan 2026 12:32:00 +0000
Subordinate resources: AS: 267552
IP: 45.70.60.0/22
IP: 45.163.200.0/22
IP: 2804:4328::/32
Validation: Failed, certificate revoked on Fri 31 Jan 2025 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0d:c2:52:e0:bf:e8:55:47:5f:81:84:60:59:7d:4a:1e:b3:0f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 24 12:27:00 2025 GMT
Not After : Jan 23 12:32:00 2026 GMT
Subject: CN=860668C5CBAB1C59B308B18605B1B2A88FAB05F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:e8:32:69:d4:4f:27:f3:18:64:21:74:d7:
8d:44:27:5b:64:2f:b9:b4:13:95:9b:73:fb:fd:a6:
2a:7a:69:b4:59:39:44:4d:c7:00:88:6c:a9:51:8a:
9d:5e:91:df:e3:b7:75:91:06:69:d2:11:68:11:11:
73:de:cb:4b:ea:e9:14:c5:2b:e3:62:77:03:4d:f7:
14:78:3f:8c:93:2f:a8:d5:76:c9:24:88:97:4b:7f:
3b:0e:40:60:81:e7:ae:ae:c9:1d:5a:3b:6d:90:75:
d1:15:4a:73:cb:32:79:c5:8e:ed:af:be:9d:b8:81:
7b:d1:1a:05:b5:65:50:ae:8e:a7:ec:4b:03:d5:de:
38:d9:62:02:65:67:13:70:28:f5:eb:c6:97:18:bb:
8b:b2:64:da:38:20:a5:4f:2d:15:6d:f9:3e:23:a7:
3c:1e:f8:71:17:a7:f3:61:3d:67:ac:5a:e3:26:3a:
e3:0f:cd:fa:52:a5:ce:01:7e:89:a3:57:58:e9:d7:
f3:0f:b5:56:50:98:90:32:78:93:eb:85:a0:43:83:
57:05:72:95:d0:d9:72:fa:87:6a:07:5c:cc:e1:70:
f0:f2:99:98:fb:71:6b:85:5d:5d:3a:45:d5:84:77:
c4:3e:3f:e0:11:3f:ed:da:49:3f:82:96:3c:64:0d:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
86:06:68:C5:CB:AB:1C:59:B3:08:B1:86:05:B1:B2:A8:8F:AB:05:F1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.60.0/22
45.163.200.0/22
IPv6:
2804:4328::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267552
Signature Algorithm: sha256WithRSAEncryption
3a:c0:3c:cd:45:d8:0a:0e:b6:5a:bf:4e:6c:38:5b:9a:1c:a9:
77:77:7a:d1:e6:37:40:d7:75:4d:92:4b:32:ac:00:27:4f:b8:
d8:44:89:19:3f:50:ea:ae:9c:87:b1:82:71:0d:0b:81:86:a7:
0b:4f:7c:04:84:af:bc:65:85:cf:15:01:92:e0:7e:eb:d1:91:
00:e7:1a:16:b1:42:1e:6b:5f:8f:95:b5:36:1f:06:a3:ac:fc:
2c:a4:4e:82:fa:18:9d:2e:54:9c:93:ab:d2:de:3a:0b:1b:97:
b2:9c:8f:82:75:0b:82:e4:4f:98:2b:fd:2f:21:01:8b:b0:1d:
2d:d8:3d:31:c0:b5:d2:83:de:1d:d5:d0:79:c1:a3:53:6a:33:
b6:fa:2d:d5:ac:06:7a:b3:9d:90:29:af:94:3b:ae:24:af:6f:
56:b8:87:1e:2b:3f:f8:fd:73:a4:13:c0:6b:34:fa:cf:cd:4d:
8e:c5:b1:f7:61:d7:31:f1:aa:97:22:72:fe:3e:0f:67:29:7d:
86:a0:99:2b:fc:98:99:5a:5c:d4:c9:11:16:2a:56:32:9b:96:
52:82:d1:d6:23:fe:44:18:d1:4d:4e:46:84:f8:30:e4:21:1f:
06:d2:b4:9f:ae:ed:9e:c8:22:3a:60:3e:97:d6:96:10:2c:d6:
1a:f8:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:21:18 2025 by rpki-client