![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.cer
File: CE5AFAF91877392AB78A95A77E48B4731F1D8B95.cer (raw, json)
Hash identifier: UXdalNm7eZyfO1ZXDJDR/k3Wqw6i9tgDz0cKYuQ+z+o=
Subject key identifier: CE:5A:FA:F9:18:77:39:2A:B7:8A:95:A7:7E:48:B4:73:1F:1D:8B:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0A2DB752212FD39C7D0F91A17BC976D7EC8FDE70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.mft
caRepository: rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 06 Nov 2024 18:06:32 +0000
Certificate not after: Wed 05 Nov 2025 18:11:32 +0000
Subordinate resources: AS: 271308
IP: 177.125.96.0/22
IP: 2804:797c::/32
Validation: Failed, certificate revoked on Tue 17 Dec 2024 02:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2d:b7:52:21:2f:d3:9c:7d:0f:91:a1:7b:c9:76:d7:ec:8f:de:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 6 18:06:32 2024 GMT
Not After : Nov 5 18:11:32 2025 GMT
Subject: CN=CE5AFAF91877392AB78A95A77E48B4731F1D8B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:f9:38:86:20:4e:ec:93:b4:5a:7b:b0:aa:
c5:26:d9:07:cb:c3:59:41:f0:c2:77:e4:5c:31:21:
29:9c:cd:ae:85:4d:29:d3:d5:47:bd:b9:c0:19:0c:
1b:d0:61:32:f2:ad:a8:60:64:1a:f4:1b:49:92:1c:
de:ff:87:8a:66:c8:49:8a:b6:bb:1a:fd:74:fa:78:
d5:9b:f6:b3:1d:4f:c2:54:04:05:11:fd:99:b7:08:
35:d2:8a:68:b0:19:b7:0d:eb:f4:1e:22:bf:6d:1b:
82:09:82:fa:67:65:93:f8:ee:6d:27:6b:93:28:2a:
16:94:17:4e:b0:8b:f8:bf:be:bc:37:da:e8:2f:07:
91:8b:01:36:c1:d4:15:e5:72:78:05:f9:dc:d5:ce:
c4:2e:33:52:47:b4:c2:f3:95:93:cd:d2:0c:c2:96:
32:02:2d:9b:64:47:34:f9:1c:19:99:c7:1c:52:cc:
9c:a3:aa:0e:ec:87:48:24:1f:3c:3d:d3:f7:70:a8:
f4:64:dc:6e:07:d3:9d:f2:ba:99:96:81:5a:7e:7b:
1d:de:ed:f0:06:02:c6:de:98:70:e8:38:3e:3e:87:
36:1d:94:c9:40:0b:de:09:24:46:ab:d8:28:92:66:
ca:b1:4e:5b:64:43:88:1d:6f:b6:c1:50:b4:f1:75:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CE:5A:FA:F9:18:77:39:2A:B7:8A:95:A7:7E:48:B4:73:1F:1D:8B:95
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.96.0/22
IPv6:
2804:797c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271308
Signature Algorithm: sha256WithRSAEncryption
c5:c3:f6:3c:86:d1:3a:31:53:07:e4:9f:28:b9:c1:38:58:5b:
03:d8:9a:66:66:21:4c:16:be:b4:58:4e:e5:e2:01:59:0d:f0:
04:40:f4:a4:57:a5:13:fd:7f:bf:5d:84:db:3c:49:4f:04:a7:
08:ed:40:97:9e:5f:8b:fe:2f:54:0c:36:44:7e:29:89:a4:08:
e9:f2:d0:e0:77:3a:33:3f:e8:31:51:32:f6:3d:ef:54:4a:2d:
f2:cb:f7:de:9c:4e:7a:6c:92:09:1e:ab:b7:f9:3d:2d:45:01:
ea:49:25:f0:56:df:6c:85:8c:9a:44:ac:06:9e:ca:73:46:08:
2f:86:e5:fc:7e:ac:f6:bd:d3:3a:c8:4b:d2:3d:12:94:22:c2:
64:d4:60:01:59:d0:7b:e2:81:05:2c:be:69:3a:b6:56:48:af:
71:43:0f:16:f1:50:37:a4:a7:f6:57:ac:0b:0c:51:50:06:a2:
b3:d9:49:a9:52:97:36:d2:6e:96:43:c9:c4:9a:c3:36:68:77:
4c:68:22:04:9e:83:b3:1e:88:64:45:0f:76:df:41:65:e8:ac:
b8:ef:93:e0:c8:f5:10:c4:68:94:b5:c3:65:88:95:b8:c8:8c:
f3:ce:86:f3:d7:a8:53:2d:29:ae:55:44:07:1d:40:f0:8c:08:
f1:6a:75:40
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUCi23UiEv05x9D5Ghe8l21+yP3nAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDYxODA2MzJaFw0yNTExMDUxODExMzJaMDMxMTAvBgNV
BAMTKENFNUFGQUY5MTg3NzM5MkFCNzhBOTVBNzdFNDhCNDczMUYxRDhCOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMvk4hiBO7JO0WnuwqsUm2QfL
w1lB8MJ35FwxISmcza6FTSnT1Ue9ucAZDBvQYTLyrahgZBr0G0mSHN7/h4pmyEmK
trsa/XT6eNWb9rMdT8JUBAUR/Zm3CDXSimiwGbcN6/QeIr9tG4IJgvpnZZP47m0n
a5MoKhaUF06wi/i/vrw32ugvB5GLATbB1BXlcngF+dzVzsQuM1JHtMLzlZPN0gzC
ljICLZtkRzT5HBmZxxxSzJyjqg7sh0gkHzw90/dwqPRk3G4H053yupmWgVp+ex3e
7fAGAsbemHDoOD4+hzYdlMlAC94JJEar2CiSZsqxTltkQ4gdb7bBULTxdUDHAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOWvr5GHc5KreK
lad+SLRzHx2LlTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veEFE
UzVTZEJwdHFIdmhmYjZtOXREUlVMSHZNYnVFa3RFN0dRNU5ieHNyZS8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veEFE
UzVTZEJwdHFIdmhmYjZtOXREUlVMSHZNYnVFa3RFN0dRNU5ieHNyZS8wL0NFNUFG
QUY5MTg3NzM5MkFCNzhBOTVBNzdFNDhCNDczMUYxRDhCOTUubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEArF9YDANBAIAAjAHAwUAKAR5fDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEI8wwDQYJKoZIhvcNAQELBQADggEBAMXD9jyG0ToxUwfknyi5
wThYWwPYmmZmIUwWvrRYTuXiAVkN8ARA9KRXpRP9f79dhNs8SU8EpwjtQJeeX4v+
L1QMNkR+KYmkCOny0OB3OjM/6DFRMvY971RKLfLL996cTnpskgkeq7f5PS1FAepJ
JfBW32yFjJpErAaeynNGCC+G5fx+rPa90zrIS9I9EpQiwmTUYAFZ0HvigQUsvmk6
tlZIr3FDDxbxUDekp/ZXrAsMUVAGorPZSalSlzbSbpZDycSawzZod0xoIgSeg7Me
iGRFD3bfQWXorLjvk+DI9RDEaJS1w2WIlbjIjPPOhvPXqFMtKa5VRAcdQPCMCPFq
dUA=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:29 2025 by rpki-client