Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.cer
File: 953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.cer (raw, json)
Hash identifier: 9Z11I1eQ2NeX6I5uUX5oTr2Z0YbngiRv2dpBN66v6x0=
Subject key identifier: 95:3F:2B:CF:F3:25:6F:C6:3A:E0:A2:F1:22:7B:03:D7:34:47:C5:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 238701B5D4E9A07443156F4C6C7EDE1FEB539C6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.mft
caRepository: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 25 Oct 2024 18:17:31 +0000
Certificate not after: Fri 24 Oct 2025 18:22:31 +0000
Subordinate resources: AS: 11432
IP: 200.155.128.0/18
IP: 200.170.192.0/18
IP: 200.194.248.0/21
IP: 200.201.128.0/19
IP: 2804:138::/32
Validation: Failed, certificate revoked on Thu 16 Jan 2025 04:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:87:01:b5:d4:e9:a0:74:43:15:6f:4c:6c:7e:de:1f:eb:53:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 25 18:17:31 2024 GMT
Not After : Oct 24 18:22:31 2025 GMT
Subject: CN=953F2BCFF3256FC63AE0A2F1227B03D73447C5C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:67:28:c9:68:f3:a4:b9:d8:49:cb:f5:d9:
7b:80:50:fc:6e:7e:1a:6a:27:a0:e2:16:a6:70:2f:
e3:08:e4:32:22:03:7d:4a:84:68:36:3e:59:35:bd:
d0:16:df:3e:8a:8a:f4:c5:8a:d9:3b:91:ed:58:c5:
d8:1d:18:84:c5:66:82:22:51:9e:1f:20:25:e6:fd:
f1:07:ab:ae:2d:b1:69:29:f2:c5:f4:66:21:41:59:
90:3c:26:b9:8c:74:d1:37:59:52:79:75:b1:03:ad:
44:4b:ed:57:3a:73:60:b6:25:05:23:d5:32:f5:d0:
8f:98:db:87:39:3e:5f:d5:2c:be:6e:fe:0e:78:30:
78:96:c8:90:74:f7:88:aa:37:91:da:6e:5f:91:cb:
7a:04:d0:3a:0a:bd:0b:75:1a:cd:f2:48:64:76:39:
21:70:8e:5c:cf:e6:ad:d9:fc:4f:56:7e:17:80:8c:
34:b4:7a:b4:c0:e5:12:71:ee:53:e7:11:00:f2:dd:
cb:7d:cf:1e:42:de:14:3e:91:fd:58:e2:26:4e:68:
af:50:97:db:aa:0a:b1:6f:40:c3:98:5c:f0:eb:27:
a3:60:f1:47:5d:ec:8a:1c:5f:7c:c7:83:6b:bd:c2:
65:1f:e6:0c:30:3f:b1:ee:ba:1d:49:92:59:63:01:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
95:3F:2B:CF:F3:25:6F:C6:3A:E0:A2:F1:22:7B:03:D7:34:47:C5:C9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.155.128.0/18
200.170.192.0/18
200.194.248.0/21
200.201.128.0/19
IPv6:
2804:138::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11432
Signature Algorithm: sha256WithRSAEncryption
9e:66:11:c5:79:8b:1e:a2:d9:01:77:fc:7e:2d:2d:59:b5:3b:
d3:29:42:15:2a:06:a0:cb:0d:ac:df:b1:32:07:85:c5:6e:59:
bd:eb:03:01:53:82:2e:be:e8:62:98:62:01:17:d3:f1:50:30:
8a:1a:6d:f2:9b:1c:aa:e5:0c:ec:80:41:15:07:ba:e2:3c:83:
8f:78:56:19:7a:15:53:fb:42:6e:97:89:9a:bb:63:44:94:ec:
35:eb:f6:9b:a0:fc:d0:1f:ec:d9:68:0b:db:d4:73:d2:3f:c1:
62:27:f0:a1:32:9e:2b:7d:ed:dc:26:a4:81:45:3c:15:76:76:
b2:8e:e0:8d:af:99:06:8a:c1:6b:94:da:79:2e:ac:ad:46:ae:
63:12:0f:bc:1a:f9:18:8d:b9:25:b3:71:70:c9:81:84:72:a2:
90:7d:89:6b:ee:ae:cc:be:04:5f:ff:79:25:f2:e3:84:66:50:
1f:35:b4:63:43:ec:c6:0c:52:b2:1a:dd:21:b1:6a:09:54:99:
08:35:03:1c:9c:b7:0b:99:47:61:3f:3f:88:e5:c5:a1:53:85:
6d:01:55:27:64:43:44:4b:dc:70:22:84:8c:cd:17:47:47:fc:
71:e9:fc:e4:2d:cb:33:63:0f:d6:0a:b4:57:33:3f:68:8c:cf:
7e:dd:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:44:48 2025 by rpki-client