Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer
File: 9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer (raw, json)
Hash identifier: B++jIE6t14I93hLkoKjOVhh4clYqGXW8AVqsC1xxDtc=
Subject key identifier: 97:41:D1:A0:29:B3:29:62:56:3B:5C:5B:A3:B3:C7:3B:19:8E:65:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3AA85E7B0B512687906F1B4880D7827B19B4AA93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.mft
caRepository: rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 14 Dec 2024 11:46:41 +0000
Certificate not after: Sat 13 Dec 2025 11:51:41 +0000
Subordinate resources: AS: 263544
IP: 143.0.48.0/22
IP: 168.227.84.0/22
IP: 170.78.248.0/22
IP: 191.5.240.0/20
IP: 2804:13a8::/32
Validation: Failed, certificate revoked on Sat 14 Dec 2024 12:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a8:5e:7b:0b:51:26:87:90:6f:1b:48:80:d7:82:7b:19:b4:aa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 14 11:46:41 2024 GMT
Not After : Dec 13 11:51:41 2025 GMT
Subject: CN=9741D1A029B32962563B5C5BA3B3C73B198E65B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:52:f7:b8:da:94:bc:87:27:18:ac:ee:bf:
eb:84:51:82:d7:26:1d:f7:ca:ca:34:c4:d5:ff:99:
0f:be:15:ad:7a:44:4c:3d:8c:21:21:52:85:d2:23:
02:65:ad:e4:e7:9b:44:09:12:79:b7:89:78:0a:c0:
0f:15:32:3a:97:ab:fa:f5:21:1c:23:a8:a1:d5:ba:
45:2e:8e:4a:72:7b:60:79:1d:36:4b:16:4b:d7:2d:
f3:64:9a:38:46:d7:2c:27:c3:46:39:c0:b7:f1:17:
b4:d8:ce:72:1c:7c:0d:6d:c9:33:52:ea:ac:b3:88:
63:78:4c:65:40:0d:01:ed:54:1b:73:45:48:aa:cd:
3c:4f:69:7a:dc:12:99:de:81:07:85:d1:c0:37:67:
0f:7b:e9:57:8f:ac:6b:35:a2:67:98:a2:f4:09:75:
72:fb:8f:65:65:e8:eb:4c:2a:6a:bf:61:7d:74:e3:
4b:5c:43:f3:c1:62:2f:40:e7:a6:f9:6f:36:e0:53:
27:30:98:cf:bb:31:e8:74:06:3b:d2:15:63:3f:c1:
8b:1d:74:f1:09:31:f5:02:d6:12:0a:61:e8:aa:e4:
87:fa:63:9c:0b:18:ce:ca:6e:62:1b:22:6e:64:74:
ac:7c:e4:be:30:27:87:62:30:b4:77:64:7d:c3:55:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
97:41:D1:A0:29:B3:29:62:56:3B:5C:5B:A3:B3:C7:3B:19:8E:65:B4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.48.0/22
168.227.84.0/22
170.78.248.0/22
191.5.240.0/20
IPv6:
2804:13a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263544
Signature Algorithm: sha256WithRSAEncryption
7d:d5:42:0e:db:8d:8a:7b:60:d8:de:a0:c7:4d:db:fa:15:5b:
54:47:ef:e7:59:a7:54:02:a5:de:9c:79:28:ac:ba:02:ef:d7:
a3:13:5c:27:f1:aa:ac:48:31:57:74:1e:7b:c4:79:0c:54:d0:
2a:a2:05:a3:dc:15:51:ad:51:21:b3:94:9b:07:47:f4:f3:bd:
63:57:6d:aa:ac:ef:2b:dc:80:ee:1f:49:d9:d6:bc:b1:99:c2:
54:f0:96:f7:80:46:ad:3e:76:5d:85:b8:bd:f9:ff:56:11:49:
dc:3b:28:08:8e:73:07:18:57:ba:d0:3d:47:b2:e2:7b:4c:b9:
a2:76:6a:2f:cf:7c:5c:74:cf:6b:25:f8:0c:ce:c8:7b:a5:d3:
6e:58:2f:99:f5:22:79:67:40:48:03:86:83:05:71:f0:c2:23:
a8:ca:ce:6b:d0:ae:cd:43:25:1a:65:36:fa:ca:d6:71:e6:e0:
8e:26:28:38:89:b3:dd:86:ad:f9:df:53:90:5c:24:47:45:71:
7b:79:a4:6e:99:61:a0:af:09:78:5d:00:4f:80:fd:d4:42:11:
d0:38:dd:cd:d4:8a:f5:84:fb:cb:77:51:83:23:96:fe:30:81:
36:5c:46:f6:e1:00:b8:d4:3f:df:35:d9:9f:56:1c:d9:bd:ee:
1d:12:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:44:08 2025 by rpki-client