Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
File: 9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer (raw, json)
Hash identifier: tnHgWPwcfKqsqyyioLL7iuuoiwc4nUsFKwZvTI7ducY=
Subject key identifier: 9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 64B396C87BCEEA0F9B9FF93D4048AF0CF2CC27CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.mft
caRepository: rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 06 Feb 2025 13:52:26 +0000
Certificate not after: Thu 05 Feb 2026 13:57:26 +0000
Subordinate resources: AS: 263570
IP: 186.249.248.0/21
IP: 2804:f34::/32
Validation: Failed, certificate revoked on Wed 05 Mar 2025 13:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b3:96:c8:7b:ce:ea:0f:9b:9f:f9:3d:40:48:af:0c:f2:cc:27:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 6 13:52:26 2025 GMT
Not After : Feb 5 13:57:26 2026 GMT
Subject: CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:c3:2e:34:e3:cd:11:09:f4:ef:7d:75:b7:
09:c9:f9:e5:7d:f8:09:2b:30:7a:f9:b0:ab:f9:5f:
9f:d5:0d:37:6d:e5:c7:d7:a6:8b:cc:05:6a:80:df:
3d:4b:f2:d3:3d:16:b7:c8:31:7f:ab:a2:69:ee:a4:
1c:c2:1d:5a:b6:57:ca:5d:20:ae:ec:62:53:00:87:
a0:d6:82:80:d8:ab:73:b4:00:36:61:60:22:02:16:
32:27:e8:00:e6:62:26:18:50:aa:b8:fb:56:76:d6:
09:55:55:a0:a0:91:1c:03:eb:1a:a4:2c:1f:da:7c:
75:d5:26:81:5d:14:9f:9b:c9:2a:be:51:3e:85:88:
b4:30:dc:3f:2f:50:01:8e:21:92:fa:7a:2c:9d:62:
db:22:13:d2:4a:b4:3e:06:0b:2f:b4:38:cc:20:12:
ee:3f:a0:b6:26:93:19:34:48:47:38:94:6d:04:69:
2e:a9:8b:27:f4:c7:21:3e:b5:bf:92:ed:0d:3c:c8:
8f:f4:ca:c9:6c:58:30:dd:cb:e0:70:89:f2:8e:2d:
4a:88:db:39:84:71:51:c0:70:1f:20:56:c5:40:a3:
d8:eb:43:1b:ac:43:82:27:a8:fc:d1:e7:9b:2e:2f:
84:7c:9d:9d:ed:ff:fe:f6:cb:d1:a9:05:b3:91:60:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.249.248.0/21
IPv6:
2804:f34::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263570
Signature Algorithm: sha256WithRSAEncryption
16:af:1d:fb:a8:41:4b:c6:40:7c:3c:2c:ff:a7:b5:bf:dc:83:
a2:28:4f:5d:3e:73:98:2f:e5:75:ce:00:b4:8f:83:20:64:6b:
65:07:2b:1d:d2:d3:83:a2:a2:61:ee:b5:3e:8e:bd:6a:9c:7b:
e3:d9:1e:7d:de:4b:3b:f4:1c:27:0b:9c:6f:94:73:4a:1b:f6:
a6:b5:44:b3:27:08:9b:e1:13:ac:70:1c:af:40:fe:a5:12:25:
f2:9d:92:11:e2:4c:bb:d1:c6:9d:a8:a7:cf:47:3c:fd:39:82:
f1:ed:d5:2f:17:bb:f7:95:d1:b3:56:21:31:16:1d:15:9e:e3:
4c:9d:ac:35:b8:c9:65:e1:a7:30:bc:23:c3:cd:fd:4d:f6:84:
04:26:5c:25:0a:49:f0:2c:fe:d9:1b:51:8d:8f:49:7e:f5:cf:
b4:5f:88:f1:58:4c:76:5f:d9:60:a1:36:b6:ea:c2:79:bd:66:
4f:8e:31:77:0c:54:f5:fa:35:67:68:73:82:9c:90:4d:ab:4f:
9b:46:64:bf:7c:8a:3b:f3:f9:40:ec:4c:f3:30:d2:a7:b7:72:
cb:35:56:0a:9c:f2:17:86:1d:15:ef:f2:8f:a4:58:71:48:c7:
71:1c:c3:7d:b5:83:37:18:dc:c6:1b:0c:f9:4d:cf:c8:18:99:
5c:eb:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:45:41 2025 by rpki-client