Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89D0EFB5A21500E454E7482B402F8271A8C59AB2.cer
File: 89D0EFB5A21500E454E7482B402F8271A8C59AB2.cer (raw, json)
Hash identifier: 2LO2/O1z1E9XFntyFFxgYmpDCOYaujRyNJkY/2a1ggI=
Subject key identifier: 89:D0:EF:B5:A2:15:00:E4:54:E7:48:2B:40:2F:82:71:A8:C5:9A:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2557A2C600CB32269FC910B5241E10D4193920B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/89D0EFB5A21500E454E7482B402F8271A8C59AB2.mft
caRepository: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Feb 2025 19:39:31 +0000
Certificate not after: Wed 04 Feb 2026 19:44:31 +0000
Subordinate resources: AS: 266168
IP: 160.19.244.0/22
IP: 2804:3bbc::/32
Validation: Failed, certificate revoked on Sun 16 Feb 2025 18:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:57:a2:c6:00:cb:32:26:9f:c9:10:b5:24:1e:10:d4:19:39:20:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 5 19:39:31 2025 GMT
Not After : Feb 4 19:44:31 2026 GMT
Subject: CN=89D0EFB5A21500E454E7482B402F8271A8C59AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:de:74:61:b4:d6:42:07:45:27:9d:53:a3:
89:51:77:e2:cf:89:02:e3:e8:37:1b:27:32:0c:ac:
e3:42:a2:b7:dd:66:a1:54:4c:01:25:35:09:75:86:
81:3c:a5:96:a0:46:41:9e:56:b9:e8:6b:b8:e5:ff:
0f:72:bf:74:1f:b9:e1:29:46:82:ad:d6:7a:20:55:
19:7a:bf:30:0a:0f:37:5b:51:ad:7d:3d:13:30:a0:
ab:4d:60:b5:5e:d5:3c:ba:e5:e5:eb:2c:48:cb:72:
88:81:1b:3c:2e:9a:1b:94:f1:37:07:c0:3a:6a:0a:
1d:74:26:1b:af:b3:49:e4:ec:3e:2d:45:8a:b1:05:
e3:65:34:71:0b:eb:e1:d5:3e:49:ec:c6:c6:fb:25:
85:21:0a:65:d5:69:7c:53:4d:b7:68:eb:0b:6d:58:
c5:28:d7:0d:80:ee:5c:40:ae:b2:bf:71:86:c2:65:
50:dc:ae:4e:37:36:44:b8:4c:3e:8c:fa:c3:84:3b:
df:65:13:7c:bb:fc:70:b7:c7:d6:86:fb:a6:00:36:
83:65:71:1c:24:c4:af:f2:ab:52:75:8b:04:ec:e4:
e7:82:e0:37:35:da:5d:b7:27:61:df:61:da:95:f6:
78:99:a7:ee:2e:17:f3:f5:17:e9:1f:15:02:90:9b:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
89:D0:EF:B5:A2:15:00:E4:54:E7:48:2B:40:2F:82:71:A8:C5:9A:B2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/89D0EFB5A21500E454E7482B402F8271A8C59AB2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.244.0/22
IPv6:
2804:3bbc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266168
Signature Algorithm: sha256WithRSAEncryption
40:91:a3:fc:64:f2:34:5c:46:4d:c0:61:db:5e:ea:e4:13:9e:
7d:b9:0f:c2:51:b3:8a:16:7a:cd:ca:ff:b8:7c:b1:89:a0:83:
91:cf:3d:eb:3f:33:f8:df:c1:8c:d1:9a:eb:d0:f6:35:84:6c:
1c:fd:0e:fb:18:02:a3:bc:6e:57:27:1d:6a:e5:11:52:ff:27:
ad:00:e7:20:e5:e9:fa:61:02:2a:15:05:f3:b3:ed:da:5b:06:
96:39:b6:27:c0:3e:48:c2:91:78:f9:a9:48:e9:1f:3b:d0:f5:
5b:25:89:8e:8f:f9:d1:82:42:5f:50:19:04:8c:ed:50:df:a5:
00:26:87:80:4c:0e:4d:5a:ef:ce:e3:be:8d:1b:a9:0d:0a:0a:
bd:27:9f:1b:f6:85:ae:8b:9c:63:e3:5e:00:10:30:e1:f6:40:
d6:e8:00:a6:de:23:b7:77:2e:57:5c:d0:a2:03:a9:40:40:cb:
13:d2:60:d2:47:55:ae:a1:5b:3c:12:df:23:59:5b:10:55:0a:
d3:8a:3f:67:5c:7e:bd:94:aa:3d:25:bd:15:a8:ee:0e:51:71:
5a:95:07:ce:a0:8a:e2:1f:76:7c:6d:a0:bb:83:32:c8:af:0a:
fc:c3:0a:21:8c:dd:c4:2f:49:9f:12:6f:1f:03:e3:6d:9f:36:
56:11:25:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:58 2025 by rpki-client