![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A4D51BDA3FEC571926CB55CDEEBD6475B65C631F.cer
File: A4D51BDA3FEC571926CB55CDEEBD6475B65C631F.cer (raw, json)
Hash identifier: pN7BcFchoHfIlqvfxR2kAlrA3e/ulPXQ25hUMbyAnjY=
Subject key identifier: A4:D5:1B:DA:3F:EC:57:19:26:CB:55:CD:EE:BD:64:75:B6:5C:63:1F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5584F939464D77823955E318303428070A4BE164
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/A4D51BDA3FEC571926CB55CDEEBD6475B65C631F.mft
caRepository: rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 19 Nov 2024 14:47:41 +0000
Certificate not after: Tue 18 Nov 2025 14:52:41 +0000
Subordinate resources: AS: 265378
AS: 271404
IP: 168.194.44.0/22
IP: 181.189.28.0/22
IP: 2804:3328::/32
IP: 2804:7afc::/32
Validation: Failed, certificate revoked on Thu 05 Dec 2024 07:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:84:f9:39:46:4d:77:82:39:55:e3:18:30:34:28:07:0a:4b:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 19 14:47:41 2024 GMT
Not After : Nov 18 14:52:41 2025 GMT
Subject: CN=A4D51BDA3FEC571926CB55CDEEBD6475B65C631F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:c4:3d:17:ef:02:c8:3d:74:a9:2a:39:85:
7b:7a:08:a1:98:de:e8:7b:da:ef:72:7c:0a:13:79:
06:00:c3:13:f0:06:e9:bb:91:ae:97:f1:4d:d0:41:
91:9e:c2:0a:08:f6:75:d9:23:29:d5:7a:a1:a5:e5:
10:27:9b:32:cf:8d:da:c5:c1:c3:55:af:f3:82:12:
d8:57:8c:f6:56:87:66:0b:f8:03:9a:54:95:3d:92:
0b:68:11:4a:76:f0:40:03:02:7f:88:10:bc:1a:3d:
6f:0d:58:b0:11:1a:35:ba:30:44:13:31:09:74:63:
84:b2:49:e6:58:0b:af:b8:96:90:56:db:2a:0e:6b:
64:0b:42:6e:03:fd:32:83:83:d6:fa:9e:0d:c0:e3:
a8:48:4c:40:07:7f:8d:08:09:2c:ee:cf:dc:af:d8:
49:ea:56:c1:4e:75:fd:9a:54:14:48:af:e2:bc:82:
ad:4c:77:95:fa:28:c8:7d:f6:59:47:da:90:6e:90:
4b:9c:0b:26:11:a1:ef:41:fa:b0:38:99:e5:db:11:
3f:27:20:21:c3:f8:1a:fe:a6:f0:05:89:ad:9e:d3:
a2:f9:66:68:58:c2:d6:54:be:48:03:c3:b3:1c:9c:
4e:23:e6:a7:0f:5e:08:81:ba:08:db:86:89:b2:e2:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A4:D5:1B:DA:3F:EC:57:19:26:CB:55:CD:EE:BD:64:75:B6:5C:63:1F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/A4D51BDA3FEC571926CB55CDEEBD6475B65C631F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.44.0/22
181.189.28.0/22
IPv6:
2804:3328::/32
2804:7afc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265378
271404
Signature Algorithm: sha256WithRSAEncryption
da:9f:3e:f8:14:f1:f0:8f:ab:ed:6c:c7:d6:c1:a1:36:3b:c7:
43:9a:c9:03:44:d9:3f:b1:16:66:07:5d:c5:d6:3d:b1:46:8d:
74:ca:fb:1e:d6:f8:db:02:31:51:90:6f:34:cc:ff:c5:43:15:
67:2b:14:11:33:9d:38:e9:7b:b9:20:ee:0e:83:d6:22:04:d2:
cb:0d:7a:f3:63:19:d0:63:e7:f1:0f:91:4e:df:e6:97:f5:73:
20:0a:78:f5:4b:6b:1f:d7:f4:43:0f:76:d9:18:31:73:84:a6:
71:20:8b:3b:52:de:9d:f4:0b:b4:e7:1a:d0:a0:aa:5b:50:ad:
69:f1:dc:db:b5:41:f0:b1:d4:3e:1c:ef:dd:6a:50:d7:72:b3:
c0:20:6f:4b:ce:3a:2c:b4:29:67:3e:bc:a7:a1:84:23:95:69:
e4:9b:c0:52:62:92:e8:ed:9a:f3:37:65:02:24:34:3b:09:90:
e9:27:8b:d9:48:3e:ce:80:00:49:b0:be:d6:f1:a0:59:48:e0:
a0:23:c8:c5:0b:a0:f6:7b:48:2a:6e:c0:dc:9a:db:e8:e3:38:
a2:ce:18:4f:31:2e:bf:b0:95:4f:5e:69:ff:51:9a:38:0e:19:
e6:09:e9:e3:b0:51:68:77:95:0c:40:0a:7f:44:66:ee:4a:ea:
62:ab:96:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:29 2025 by rpki-client