Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.cer
File: CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.cer (raw, json)
Hash identifier: WvBregeErFk3rzeYobXuvWZMzHvUtGUZ/varRCUjwv8=
Subject key identifier: CA:57:0E:4B:B6:EB:F4:DF:86:11:C2:B0:3E:92:48:2A:91:52:FA:4B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6B9B020A18058967B32F2264FABADAB94B60363D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.mft
caRepository: rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 27 Dec 2024 18:47:44 +0000
Certificate not after: Fri 26 Dec 2025 18:52:44 +0000
Subordinate resources: AS: 53163
IP: 177.137.176.0/20
IP: 187.1.112.0/20
IP: 2804:1030::/32
Validation: Failed, certificate revoked on Wed 22 Jan 2025 13:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9b:02:0a:18:05:89:67:b3:2f:22:64:fa:ba:da:b9:4b:60:36:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 27 18:47:44 2024 GMT
Not After : Dec 26 18:52:44 2025 GMT
Subject: CN=CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:39:94:0c:fb:ed:05:01:0c:a7:a2:8a:6d:
91:9f:95:4f:55:46:af:83:25:a6:44:62:b7:6f:89:
d6:a3:80:2a:4c:0a:95:bd:09:52:10:02:80:49:70:
81:f4:d2:12:49:d4:f9:3b:8b:d1:0c:44:8b:0b:5e:
41:31:aa:e7:32:bd:e9:67:f9:dd:1f:c6:7a:06:ee:
b9:e2:d2:75:c3:1c:34:2b:74:2b:23:d3:55:f5:df:
77:8e:44:5c:23:eb:24:f8:db:d9:e8:d2:4b:51:9b:
04:28:af:3d:18:77:2e:a6:1c:df:a3:11:f0:cf:ea:
90:76:9c:c3:e2:bc:83:54:81:1a:f5:26:57:c1:92:
6c:97:d8:0f:c3:c1:ab:7a:ee:be:53:ac:f0:98:57:
59:47:34:02:9f:47:18:bf:39:bc:53:d2:0d:e9:6a:
d2:8d:04:c0:ae:e0:9b:00:de:65:47:f9:d8:ea:4d:
86:c2:17:9a:77:69:86:d7:12:c6:70:b9:26:99:94:
77:72:79:68:5b:f0:03:ff:a9:89:f0:1a:43:27:81:
fb:39:57:3e:23:7c:4c:da:13:41:c8:de:f0:4c:ae:
2d:b5:66:dc:04:7e:0d:d3:ee:b0:73:8e:21:fd:45:
3e:05:ea:4b:57:6f:2e:03:bc:00:06:46:f5:3b:94:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:57:0E:4B:B6:EB:F4:DF:86:11:C2:B0:3E:92:48:2A:91:52:FA:4B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.176.0/20
187.1.112.0/20
IPv6:
2804:1030::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53163
Signature Algorithm: sha256WithRSAEncryption
41:f4:39:58:cc:64:71:55:6e:a8:27:19:9f:39:46:50:11:3d:
af:e7:16:78:50:58:63:6e:7a:ba:f1:2e:01:3f:b0:a7:ff:9f:
a9:23:07:a9:68:dd:f9:1e:eb:5e:bb:fd:a0:39:25:ed:58:f2:
e6:ef:f2:91:6f:06:cf:b2:71:ec:86:5a:47:d8:bf:be:d0:12:
24:e4:e4:30:d0:ed:fe:cb:fa:53:38:8f:47:b2:0b:ac:f8:ea:
85:80:6a:85:68:ee:1e:22:80:10:74:4f:06:03:e4:18:f8:69:
25:57:96:e7:46:a0:fa:05:5a:9f:8e:ae:ca:b7:8d:15:61:b6:
ad:96:92:df:10:bf:34:4a:4b:a3:cc:8b:34:23:2c:cf:06:21:
3f:9f:f8:81:32:92:59:3c:36:9b:69:f2:ba:75:cb:04:f8:da:
bf:ea:35:de:78:7b:ac:5f:7b:66:96:55:0a:a2:bb:d1:71:44:
97:50:33:e7:e3:7a:15:fa:f8:45:3d:c7:8e:9c:ae:64:02:f1:
38:b5:3b:a3:f9:fd:d7:46:70:73:c5:8a:7e:54:04:22:30:4c:
4d:fd:9d:eb:de:f5:e0:f2:9c:31:ea:16:08:e5:c0:c6:e9:ed:
3f:e7:f8:ac:74:0f:b0:3b:b2:44:aa:9b:4f:6c:fb:a0:8f:13:
f5:fd:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:58 2025 by rpki-client