![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.cer
File: C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.cer (raw, json)
Hash identifier: 1dAwiJPxm6F/ZICowJVai9VjCFYCPPobju2uZHvDxJ0=
Subject key identifier: C2:BD:84:A4:FC:DD:5A:DA:BE:29:3A:26:CC:9C:E9:BA:27:D4:63:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 436581BA8777CEB5939C874FBBC8B2D6BAFDDF47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.mft
caRepository: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 20 Nov 2024 12:46:24 +0000
Certificate not after: Wed 19 Nov 2025 12:51:24 +0000
Subordinate resources: AS: 266268
IP: 45.65.208.0/22
IP: 2804:3d54::/32
Validation: Failed, certificate revoked on Tue 10 Dec 2024 04:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:65:81:ba:87:77:ce:b5:93:9c:87:4f:bb:c8:b2:d6:ba:fd:df:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 20 12:46:24 2024 GMT
Not After : Nov 19 12:51:24 2025 GMT
Subject: CN=C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:5e:02:e3:0f:f3:8c:7b:77:9d:31:eb:3c:
f7:bb:ae:8b:6a:3b:6a:99:ce:22:84:3f:42:25:d3:
6e:e6:f9:e8:41:9e:be:90:b8:32:24:80:92:a6:ea:
b4:18:7f:d9:6c:98:8e:82:d1:04:01:9d:41:5a:a2:
47:e6:fa:d0:3d:e8:03:d1:4c:41:3a:0b:a7:8c:07:
ab:2b:31:82:00:08:71:b8:35:04:f3:0c:31:d5:a8:
ff:fd:70:5c:92:40:d9:6f:e1:c5:0b:a7:be:d4:da:
6a:01:8b:57:d8:4b:b8:33:79:38:42:b4:df:41:58:
e5:c8:39:30:6e:2e:dc:0a:44:c7:fb:48:c8:26:b7:
f6:98:fb:12:2d:e9:92:ee:0a:f1:c2:38:fe:db:eb:
cc:31:03:40:97:b0:1e:41:c0:fd:1b:0f:24:29:81:
4b:12:eb:d4:bf:90:70:61:09:85:a9:6a:28:ec:2d:
69:6d:1d:aa:4b:90:86:27:ac:44:0d:46:68:fb:bf:
8d:f1:dd:f0:25:c2:cb:85:c9:7e:48:a1:49:30:7f:
84:f7:a9:c2:e6:2b:fe:25:48:22:99:b7:2e:ab:7c:
84:a2:cc:7c:2b:82:33:16:a2:f0:7c:e1:03:61:13:
b5:79:4b:fc:c0:99:1b:c5:fe:af:1d:7c:97:d3:e5:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C2:BD:84:A4:FC:DD:5A:DA:BE:29:3A:26:CC:9C:E9:BA:27:D4:63:3D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.208.0/22
IPv6:
2804:3d54::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266268
Signature Algorithm: sha256WithRSAEncryption
4d:d2:5d:98:5b:3c:43:09:9d:75:13:31:44:ab:3b:80:f3:19:
50:9b:5f:1c:af:79:60:50:bb:6b:8e:62:f5:6d:06:16:b5:9f:
62:a1:22:de:80:92:91:cd:cf:ff:a2:15:6d:23:6c:b4:5f:0d:
0c:e5:35:eb:2d:3a:e1:40:89:99:62:b6:5f:6b:91:69:6e:f5:
e0:a3:38:85:e6:bb:33:2d:4f:dd:60:8c:bf:71:d2:54:e1:02:
ee:a0:ce:44:08:a7:df:d8:d7:05:11:d9:bf:d3:28:93:07:6a:
c4:36:67:10:e6:ea:3d:99:3b:72:09:a5:03:98:98:58:50:7d:
8d:bb:69:46:7e:18:87:18:32:3a:b2:6c:e4:3f:71:19:12:f8:
26:ce:86:5d:c1:da:29:80:ad:2e:2a:71:22:db:82:68:45:6f:
61:39:71:44:39:be:03:5b:ab:aa:9a:c8:e8:0b:27:a1:29:fb:
2a:0d:4f:4d:b4:2b:4b:2b:c4:85:de:13:a5:13:7e:76:c9:33:
ff:60:92:b6:b6:bf:db:90:a5:9d:b0:ca:ce:f2:e3:72:ac:82:
1c:64:1c:17:d6:2c:65:65:72:04:4e:23:1c:a9:c0:4b:33:97:
e7:86:79:b0:c4:f9:86:c3:68:89:95:3c:3a:d2:b1:79:e6:30:
17:e7:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:17 2025 by rpki-client