![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD217163EB1953839A16E6F7DDA1F424A306D0AC.cer
File: AD217163EB1953839A16E6F7DDA1F424A306D0AC.cer (raw, json)
Hash identifier: Ss0jRsSmGuIoBIRPaOxFCAkAtBm1kqWGq4f8mKNkfYI=
Subject key identifier: AD:21:71:63:EB:19:53:83:9A:16:E6:F7:DD:A1:F4:24:A3:06:D0:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3CAE4190E4E81BBC541ADEE684DF8E689D00A15B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/AD217163EB1953839A16E6F7DDA1F424A306D0AC.mft
caRepository: rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 18 Nov 2024 15:54:37 +0000
Certificate not after: Mon 17 Nov 2025 15:59:37 +0000
Subordinate resources: AS: 271627
IP: 45.178.80.0/22
IP: 2804:7e7c::/32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 05:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ae:41:90:e4:e8:1b:bc:54:1a:de:e6:84:df:8e:68:9d:00:a1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 18 15:54:37 2024 GMT
Not After : Nov 17 15:59:37 2025 GMT
Subject: CN=AD217163EB1953839A16E6F7DDA1F424A306D0AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:c9:00:45:46:4e:98:6d:72:8d:20:2a:b8:
99:23:57:b1:e1:34:9c:59:21:40:d5:97:38:49:df:
5a:a9:a2:cf:74:d0:63:3b:98:77:e7:e7:21:45:81:
cb:44:5c:07:57:fc:ca:90:d1:0e:5e:e3:13:af:07:
75:f9:ee:4f:be:3b:49:62:c7:11:c9:f8:bb:d0:a7:
ff:41:f3:41:7d:4b:ed:e9:fe:36:21:bc:21:02:a5:
62:8a:4d:c3:c0:1f:d1:92:c1:97:d9:fd:bb:8d:34:
59:0e:d2:1a:84:40:a5:7c:31:12:ef:8c:90:d1:bc:
7b:3f:48:6f:00:f2:d9:6b:f1:60:3c:77:d5:76:69:
12:27:13:32:c5:06:69:61:6c:e9:f4:ad:54:1d:fd:
02:25:75:96:58:1b:8e:fc:d9:41:5c:3b:d1:6e:6a:
39:34:3a:d1:cf:9b:ee:6f:de:2f:2a:1c:6e:26:80:
15:e2:c7:93:83:15:18:d1:89:e1:6c:7a:e7:15:8e:
a1:99:8a:dd:2e:a1:81:d4:2f:04:f2:03:b8:8f:65:
f3:ab:38:4f:dd:3a:7e:b6:e2:16:01:38:0e:4e:d0:
59:67:be:64:0f:e8:22:c6:48:c5:d0:b9:ad:58:6c:
85:bd:91:9e:73:de:18:d4:52:b6:18:de:84:62:a4:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AD:21:71:63:EB:19:53:83:9A:16:E6:F7:DD:A1:F4:24:A3:06:D0:AC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/AD217163EB1953839A16E6F7DDA1F424A306D0AC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.80.0/22
IPv6:
2804:7e7c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271627
Signature Algorithm: sha256WithRSAEncryption
55:d5:ac:6f:5b:8b:9d:43:49:3e:80:7d:10:eb:2b:d2:ac:2d:
d7:05:e4:a5:ac:35:ea:3b:38:07:c7:b7:34:95:a7:f2:7d:ac:
fb:23:b2:95:d6:77:9e:7a:ca:24:67:15:aa:2e:51:1f:5d:04:
70:00:10:59:fa:42:7b:cf:4e:85:f0:2f:f8:6e:1d:9d:c6:28:
bf:8e:2e:2b:93:5c:54:48:97:9b:28:8a:25:cc:ac:74:17:40:
22:96:0b:d7:02:c8:71:79:2b:90:39:cd:81:f0:a7:dd:4b:48:
05:1b:19:7d:30:0a:0e:c7:33:01:5e:96:93:b0:68:0a:cb:d1:
b3:e4:5b:1b:13:72:82:e8:4b:7e:38:9f:40:bf:e0:c4:04:75:
df:2f:7a:31:58:e2:72:7c:79:35:dc:de:bd:72:0d:30:f3:d0:
a9:18:c3:7a:a8:d0:0f:35:89:ad:1f:1b:1f:31:5d:d7:76:7c:
62:70:ff:a2:ba:68:32:ba:3e:b3:8d:fe:6e:d7:e1:23:e3:2b:
70:28:e2:54:5b:10:2a:ee:bf:9c:d1:6c:8a:67:1b:9f:53:bd:
26:dc:8a:b4:a8:0e:32:dc:a1:b2:bc:c9:ba:f6:0c:08:fe:98:
29:28:ad:b9:f0:92:a7:1e:89:e9:57:e4:38:1e:84:c4:14:92:
6c:79:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:22 2025 by rpki-client