Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
File: BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer (raw, json)
Hash identifier: O94oknXPqfag0SeOYouLXtrK9sg1hBUGFzWI8arPLpA=
Subject key identifier: BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1E9AD86E8A5A30D1BAF53710C1BB822C696BF41F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.mft
caRepository: rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 09 Dec 2024 14:29:15 +0000
Certificate not after: Mon 08 Dec 2025 14:34:15 +0000
Subordinate resources: AS: 273816
IP: 2804:8cb4::/32
Validation: Failed, certificate revoked on Fri 04 Apr 2025 14:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9a:d8:6e:8a:5a:30:d1:ba:f5:37:10:c1:bb:82:2c:69:6b:f4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 9 14:29:15 2024 GMT
Not After : Dec 8 14:34:15 2025 GMT
Subject: CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:5d:51:0e:07:94:b2:ea:31:ca:23:36:d7:
d7:c9:14:4b:3c:d4:ab:ec:4e:55:2b:84:6e:d4:cb:
41:88:de:cc:d0:f6:49:5e:a5:8e:60:2c:d0:b4:1d:
0d:23:f0:83:a8:81:51:f8:ba:8c:79:ad:32:a8:eb:
73:4e:0e:00:91:c7:d6:99:1b:6b:fa:ad:a1:07:10:
01:df:10:e2:39:16:34:46:39:61:f2:30:9e:f0:a8:
25:27:98:d8:22:a5:e0:d7:85:20:97:3d:bd:9c:d1:
44:0b:cd:15:68:db:e7:62:ca:ff:a5:6d:86:86:59:
95:c9:13:32:4e:8c:c2:6e:09:a2:87:32:2b:28:93:
40:4c:66:69:19:c1:bd:b2:ae:c3:37:9b:0c:10:26:
e0:54:7b:51:31:e0:22:6b:8d:9f:05:52:53:50:e5:
a4:ab:a0:94:82:84:75:29:9e:4c:5c:d6:5a:26:fc:
23:86:5f:6d:8d:26:a5:c4:f3:32:9b:db:26:9e:e4:
08:fc:6d:3d:c0:1e:23:7f:eb:ac:2b:62:56:09:9a:
39:cb:57:a9:e9:59:79:a5:33:a7:02:1a:ed:34:49:
94:e3:2e:03:e9:75:41:86:ae:10:42:0d:d4:01:1d:
88:dc:d4:60:ae:44:ea:6c:2a:87:f0:cd:70:ff:30:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8cb4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273816
Signature Algorithm: sha256WithRSAEncryption
33:58:a9:7a:fc:39:43:b2:ca:03:de:af:25:03:52:63:70:6f:
fa:26:6f:c8:87:c3:f5:61:c8:99:c5:ae:9d:0c:28:bd:77:7b:
6f:0b:10:86:4b:b7:12:c6:38:b0:7b:91:bc:53:05:b3:03:f7:
18:c4:c0:33:2d:67:ba:ae:cb:21:87:53:b5:dd:5e:5f:09:e3:
a4:8f:55:6d:5d:6b:21:28:1b:45:e7:a9:95:69:6d:c6:a0:19:
d4:24:16:77:f7:83:7c:5a:60:54:a1:49:ed:b2:44:bf:14:77:
d4:a1:3b:5a:59:90:36:1b:79:5c:2d:59:50:5c:98:0b:da:7c:
30:57:ea:a9:36:8d:4d:91:01:ea:b4:47:f6:66:1e:70:81:a5:
59:d4:28:94:77:68:a8:9e:af:d5:e2:84:1d:2d:00:b6:2b:a4:
fb:7f:42:58:57:50:53:d5:85:6f:6d:a6:0c:c8:43:46:c6:fa:
d8:3e:aa:d7:b6:99:b5:e4:a5:a6:01:97:1d:08:10:3e:b2:f5:
7d:ce:d6:f6:7a:c7:4d:91:e2:e6:a2:db:4c:db:df:72:d5:04:
20:81:0c:f5:04:16:b8:d4:9b:02:a4:01:87:17:15:ae:8b:a7:
07:ab:27:f8:96:4f:96:85:b2:e2:a9:e0:ff:4e:3d:20:3e:ea:
3b:4d:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:10:31 2025 by rpki-client