Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer
File: AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer (raw, json)
Hash identifier: DNvlFCBkhcCijCpxRuofVCzcF9qfe9tL5XtF5+Nb/lU=
Subject key identifier: AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2372A1711D194F34526D8F5B424A2AE4FEBBF5B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/AC7596BD33B9167E922BE54B9B004B12EAD19D29.mft
caRepository: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 04 Mar 2025 13:28:14 +0000
Certificate not after: Tue 03 Mar 2026 13:33:14 +0000
Subordinate resources: AS: 262590
IP: 138.122.248.0/22
IP: 170.231.172.0/22
IP: 177.84.192.0/21
IP: 2804:684::/32
Validation: Failed, certificate revoked on Mon 10 Mar 2025 09:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:72:a1:71:1d:19:4f:34:52:6d:8f:5b:42:4a:2a:e4:fe:bb:f5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 4 13:28:14 2025 GMT
Not After : Mar 3 13:33:14 2026 GMT
Subject: CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:ea:1c:64:61:a0:6b:62:23:28:b5:31:38:
65:5d:4f:c2:09:63:ae:71:fa:a0:31:d5:a2:ba:64:
3f:e2:fd:55:8a:4c:fd:e1:ca:e9:09:74:89:ea:51:
c1:f4:53:d9:b7:84:84:cf:73:92:e6:b5:ab:e9:cb:
da:1a:61:bb:21:33:ff:1a:35:70:35:82:a8:c9:4c:
6b:08:8f:6d:7b:82:2a:8f:21:cf:91:6e:3e:3c:14:
cf:63:86:37:b9:d4:d7:73:d3:b2:24:84:00:e5:96:
b4:7d:5c:48:43:94:26:84:97:b6:ef:42:97:33:09:
fb:e1:1e:27:f0:54:79:ef:95:be:76:47:68:ac:a2:
f6:42:53:4d:5c:7b:c0:92:d1:e4:fe:82:47:80:35:
51:fb:1c:f1:44:8b:2e:9c:0b:2a:7a:4f:64:77:7a:
a3:d6:b8:4b:2d:65:83:01:7c:ed:54:7e:6e:dd:8f:
f5:f5:3a:de:68:aa:b7:77:83:db:3f:2c:08:c6:49:
3a:0a:1b:b6:2c:8a:8b:6f:15:16:27:c7:f0:ba:10:
55:07:92:57:51:ff:52:2d:04:fc:fe:d1:c7:2a:8f:
e5:39:d5:af:aa:64:7f:29:64:7b:d2:84:dd:8e:00:
3a:4b:c3:e6:29:82:87:ae:0f:64:3e:e8:9d:5d:e5:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/AC7596BD33B9167E922BE54B9B004B12EAD19D29.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.248.0/22
170.231.172.0/22
177.84.192.0/21
IPv6:
2804:684::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262590
Signature Algorithm: sha256WithRSAEncryption
77:0b:8b:8b:51:a9:4f:ea:8c:1a:1a:9c:5c:9c:ed:a1:f2:84:
05:98:15:fa:13:f7:d1:28:cb:d6:cd:82:19:b2:66:38:56:33:
c6:96:f5:9c:c3:10:fb:a3:a7:e8:47:1c:61:db:b4:5f:68:e3:
ec:38:0a:ce:4d:1c:81:1e:03:d2:ed:56:14:44:59:1c:fa:f2:
ba:7f:79:a7:24:70:d5:3d:8a:f8:89:e5:7c:83:e5:ed:c6:9a:
6a:b6:22:80:d2:c1:2a:34:51:fd:5f:55:6c:20:af:82:b6:d2:
45:2d:57:d9:8c:2f:75:a4:b3:cb:f9:89:5a:10:a9:bd:9e:69:
65:62:80:99:91:93:31:ff:11:94:2e:7b:ff:81:9e:9e:10:f5:
98:4e:c8:a8:a2:8e:21:ea:9f:80:8c:e7:90:0b:da:5c:8e:23:
bd:67:90:b1:1f:e0:09:9b:b4:ff:de:87:cc:35:ad:6f:7d:59:
b3:9a:e2:60:dc:1a:96:e1:18:2e:01:b3:dd:19:11:24:ea:30:
63:8c:de:f4:47:98:b6:ab:b5:0d:48:6a:59:ba:b7:4a:9e:5d:
3e:30:c6:14:51:50:0e:2c:d5:85:a0:81:e0:84:4a:cd:6d:c3:
a8:a3:7e:29:9c:7b:4d:4c:2a:d3:51:41:8e:0c:49:81:3a:85:
34:d7:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:47 2025 by rpki-client