Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.cer
File: A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.cer (raw, json)
Hash identifier: fxRjCJE8t+H6fxXy/HZ0mo1RHzZbPIQJcFp7Zc2/3vI=
Subject key identifier: A9:B4:B8:A3:F5:DD:FA:C8:C1:CE:AD:F6:AC:38:52:D9:4B:E7:5A:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5834DE5C3FFBB9F9B57E64DD188385B5CBE6DD1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.mft
caRepository: rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 13 Jan 2025 13:54:41 +0000
Certificate not after: Mon 12 Jan 2026 13:59:41 +0000
Subordinate resources: AS: 264288
IP: 138.121.32.0/22
IP: 2804:2590::/32
Validation: Failed, certificate revoked on Mon 13 Jan 2025 18:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:34:de:5c:3f:fb:b9:f9:b5:7e:64:dd:18:83:85:b5:cb:e6:dd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 13 13:54:41 2025 GMT
Not After : Jan 12 13:59:41 2026 GMT
Subject: CN=A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:9c:37:35:00:d6:c5:4d:c1:7c:5c:1b:37:
ba:1b:4d:ae:46:f4:e8:1b:f8:35:5b:18:96:e3:ce:
08:d0:e2:e1:d7:29:90:b1:16:b9:4b:9d:74:c1:f1:
e7:4c:cf:bd:1a:98:96:03:c3:a9:01:0e:f4:ff:d5:
9d:0a:a3:1c:36:42:10:48:2f:85:14:0b:c2:dd:6b:
ff:0b:13:9e:15:22:f6:80:9a:ac:93:2d:15:50:96:
d9:07:a1:28:05:03:86:d8:23:5d:e8:15:1b:80:fe:
44:25:aa:14:d9:f8:e1:f9:3f:be:95:fa:d2:92:44:
06:3d:1f:48:73:36:3e:03:72:d3:89:60:ce:41:77:
3a:a6:68:ea:6a:17:76:bd:1e:1f:fa:b3:02:d7:7f:
10:b0:8a:08:4a:96:83:23:4b:83:51:17:3b:91:84:
f3:f6:29:f4:9e:50:8f:85:5a:90:6c:35:97:28:c1:
49:9a:e0:89:7d:16:95:33:2b:4e:b8:e2:ef:0b:ea:
e5:0f:73:f2:0a:6f:8b:49:82:87:2c:d8:6d:cc:ba:
ab:98:ba:3e:39:b1:3d:48:d0:e2:c7:50:27:8a:7d:
89:de:79:90:ea:5f:54:f9:43:9a:00:32:06:a2:27:
2d:e8:17:af:33:b5:5c:09:a0:b9:a9:03:3a:94:bd:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A9:B4:B8:A3:F5:DD:FA:C8:C1:CE:AD:F6:AC:38:52:D9:4B:E7:5A:18
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.32.0/22
IPv6:
2804:2590::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264288
Signature Algorithm: sha256WithRSAEncryption
9f:0e:9e:65:17:e0:df:ee:27:86:b6:15:56:4b:23:2b:e1:f3:
f6:4d:4d:84:b5:69:0d:01:86:d8:5a:01:13:65:5f:49:f1:07:
7f:06:5f:2c:1d:15:fd:a0:5a:75:f2:cb:41:5b:bf:71:2b:7f:
c2:87:bd:2b:5d:c3:38:ba:2e:4d:10:03:82:c6:a8:9a:23:d0:
86:56:7a:12:53:e2:c9:db:8e:0e:86:87:e2:5a:b9:8f:4e:44:
81:19:ca:7d:69:88:3c:6a:8c:e3:2d:79:bb:c9:cb:61:74:06:
58:24:41:c8:c2:b3:60:2c:2f:b6:ed:4a:f5:bb:97:18:77:5d:
5c:02:61:a2:67:6e:cd:ca:87:42:33:21:3b:30:00:39:cf:d9:
34:84:4f:1c:f5:18:92:69:87:01:69:c9:41:b5:6e:69:e8:54:
ec:12:12:72:e4:c6:91:b7:78:51:7f:7a:cc:2e:b3:6a:93:36:
bd:11:f6:de:25:38:8f:5e:2a:10:15:d9:0c:0f:71:d2:99:4b:
43:f2:86:4c:89:c6:0d:4a:11:75:ca:02:07:e9:52:28:3b:b0:
37:57:ed:a4:d5:51:1d:dc:d7:aa:df:53:d2:10:cf:f5:c1:55:
62:48:c7:b0:2a:37:d1:fd:62:18:49:fa:66:01:64:31:78:69:
11:b5:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:29:47 2025 by rpki-client