Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer
File: A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer (raw, json)
Hash identifier: kMIoz9Vg+y+BMLQEUAj7OyrGwfyvyDkQvUjyIpde1Vs=
Subject key identifier: A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7239E870A7631455F7947FA98D47F7D0DC9AC339
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.mft
caRepository: rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 28 Nov 2024 12:36:30 +0000
Certificate not after: Thu 27 Nov 2025 12:41:30 +0000
Subordinate resources: AS: 265328
IP: 168.181.64.0/22
IP: 2804:2e28::/32
Validation: Failed, certificate revoked on Sat 14 Dec 2024 06:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:39:e8:70:a7:63:14:55:f7:94:7f:a9:8d:47:f7:d0:dc:9a:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 28 12:36:30 2024 GMT
Not After : Nov 27 12:41:30 2025 GMT
Subject: CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:7f:4a:fd:31:42:9e:81:a9:51:0a:a2:79:
49:9c:12:6f:1d:ed:40:dc:2f:00:08:57:00:c1:2d:
c2:c9:a9:38:50:25:ca:ab:8d:73:70:cc:34:04:eb:
c8:26:ca:ac:04:57:e5:35:29:8a:b5:f2:81:eb:0c:
96:47:a2:ab:0f:a0:ca:79:4c:97:20:cb:6e:08:de:
ed:d4:bf:ae:4e:c3:a4:1c:d2:3a:d3:69:cb:5c:a4:
a7:83:24:c2:88:29:d0:dc:4c:36:22:d5:2f:bd:e2:
04:2a:8d:3e:b1:5b:5d:6b:bc:16:43:e4:12:3b:79:
5c:3f:c5:8e:fb:53:34:3f:87:91:b5:53:f6:68:b4:
bd:26:f5:1b:51:ca:5a:2d:c6:54:34:ed:ba:91:d5:
35:2e:27:87:44:f7:fe:0d:94:e1:f4:25:95:21:f6:
b2:9e:de:1f:77:5e:a1:70:c9:46:43:d8:39:df:4d:
cf:9f:49:bc:9e:ab:5f:9d:e4:c7:dd:84:6b:a2:69:
9e:79:be:c8:46:b4:75:a9:4e:bb:52:40:f4:6c:a2:
4f:24:c6:12:b8:04:b9:7d:64:f0:3a:07:e2:5f:06:
a7:6a:89:ad:6b:65:26:06:36:07:63:b4:5f:c5:b8:
19:7c:f7:22:8f:9b:49:82:8e:7d:95:a9:2b:ff:d1:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.64.0/22
IPv6:
2804:2e28::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265328
Signature Algorithm: sha256WithRSAEncryption
5b:de:f7:2f:ba:e1:15:a0:f0:60:ce:21:cc:98:2b:ac:94:fa:
f1:67:15:9e:2a:3d:fa:27:20:d7:37:75:5f:45:33:38:91:ea:
4b:09:e8:d7:db:aa:98:53:8a:50:83:4c:4a:31:c0:2e:95:4e:
e6:6f:e2:ce:41:54:88:68:8d:e9:d5:21:d0:c2:54:7a:f5:be:
23:15:d8:b0:f9:52:83:64:98:51:3c:78:a8:f6:b3:6f:e8:34:
a5:71:41:5f:6c:77:94:51:44:3e:18:95:5c:07:80:ee:1c:ec:
e7:18:57:f9:1f:c8:4c:5c:6b:1c:22:f4:ea:59:8c:00:4a:16:
5b:cd:8e:d8:bb:67:21:fc:97:55:2f:b3:ae:bf:9a:c3:7f:94:
9c:0d:b4:06:7c:31:61:6b:44:e3:cc:aa:ed:ea:fc:68:a5:a4:
f0:28:24:d7:8f:38:44:53:ef:38:5b:93:86:1f:f3:bd:53:f1:
fb:d7:bd:f8:99:01:00:74:70:6b:e7:a5:4f:5e:1f:84:bc:3f:
ad:1c:7e:92:1a:60:8a:cc:c9:b8:35:f6:9b:b5:d2:13:db:00:
0c:df:7e:95:8a:2e:cc:56:d5:ff:49:2f:af:be:d8:b0:9c:4c:
4e:c5:0e:e0:86:ea:d4:28:a8:d5:30:05:ae:3a:c6:83:5a:f7:
a6:14:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:26 2025 by rpki-client