
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
File: 891F7710A149035BE2C13EAA45697B7BC29B0E36.cer (raw, json)
Hash identifier: E/HXZ57H9Hf0mRt/Z6fGr6kWhmNNn0nj3czpJintrj4=
Subject key identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5914A6FF47D0824227A5061D4783D1AFABAD2EFB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.mft
caRepository: rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 23 Aug 2024 19:51:37 +0000
Certificate not after: Fri 22 Aug 2025 19:56:37 +0000
Subordinate resources: AS: 267395
IP: 45.233.196.0/22
IP: 2804:4cd4::/32
Validation: Failed, certificate revoked on Mon 25 Nov 2024 11:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:14:a6:ff:47:d0:82:42:27:a5:06:1d:47:83:d1:af:ab:ad:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 23 19:51:37 2024 GMT
Not After : Aug 22 19:56:37 2025 GMT
Subject: CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:9e:2b:72:76:98:32:7f:ef:77:b1:4b:86:
7b:dc:03:d8:3a:c6:ed:64:ed:24:1c:eb:a7:17:70:
b7:bc:62:0e:06:34:28:13:70:4a:b5:26:a0:cd:55:
84:f4:94:c8:68:21:5e:0f:39:ef:80:22:0c:27:3f:
f9:9d:59:fa:58:d2:f2:e7:75:7b:4c:ff:4a:c0:cb:
ea:c9:51:ad:a7:da:23:66:ce:30:05:80:0b:26:da:
24:36:86:37:3b:ca:49:37:58:34:26:3f:bc:d9:ae:
51:46:4e:4f:2f:c5:15:55:90:d6:df:67:3a:e4:64:
38:16:36:99:93:2b:7b:96:35:66:e0:47:50:7e:4e:
ac:2f:d2:c8:c2:b9:eb:a6:1d:ce:88:fc:d7:6f:2f:
fe:59:cd:05:09:ae:be:0b:7c:23:35:f9:fc:e6:25:
b3:e1:1f:98:ad:31:70:6a:29:16:87:65:39:cd:6b:
c2:7a:19:19:0d:3a:7b:a4:83:73:00:51:26:b1:09:
92:eb:07:2d:7a:85:13:92:9b:ae:2e:4b:b0:86:6b:
46:5d:7c:2f:29:36:28:15:2d:89:43:42:dd:68:b7:
a9:5b:70:70:20:72:40:c2:16:5d:cb:b0:2b:96:39:
2f:db:50:df:ed:b4:57:99:81:c2:10:aa:67:d6:c0:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.196.0/22
IPv6:
2804:4cd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267395
Signature Algorithm: sha256WithRSAEncryption
1a:6a:72:08:1e:0b:b2:02:b2:08:a7:df:2b:e3:4f:9a:6a:31:
85:ab:a9:d1:6f:30:6f:66:6c:7f:b9:78:3e:4e:5c:18:40:d5:
24:a0:17:6b:30:a6:b0:d1:59:c4:a2:6a:94:a4:a9:8f:a0:73:
75:27:6b:45:b9:b0:87:a9:1a:c7:ec:95:de:f7:3d:ac:54:1a:
98:43:0b:96:cd:8c:f4:77:36:f2:98:ea:34:56:d7:b7:b7:e8:
d1:d5:35:c5:a5:35:31:d8:01:5d:70:ec:8a:69:ad:fb:a5:fd:
cc:04:8d:86:c5:ef:7e:3d:87:35:d4:db:42:6c:3d:1a:8e:59:
96:52:98:fb:5d:3e:d8:04:4e:23:ce:08:70:4b:c7:88:2e:0d:
69:97:ea:ce:d0:e2:d2:75:9a:8e:f3:e6:3e:3c:ee:76:c2:2c:
65:46:c9:08:52:7e:d3:14:ac:d9:38:e9:29:27:8b:35:7e:8c:
5d:be:40:0a:fd:f0:71:07:d9:6e:05:53:b0:0e:0d:1d:c6:04:
55:65:0c:6f:70:0d:e6:63:57:71:57:d8:e1:62:8f:dc:11:90:
42:8b:b8:95:c1:88:36:b0:12:39:a7:2c:c5:68:f8:0b:a1:77:
6e:91:d0:69:0f:79:73:e5:8b:0a:04:75:f3:33:62:0e:82:ca:
e2:a0:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:27:21 2025 by rpki-client