Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.cer
File: D1FBE89D5F67043ED369B1D24B2F8A18C9131156.cer (raw, json)
Hash identifier: Zm3URq+++DDZLELhiEn3riukXDodWGpEF9Mch6op/BQ=
Subject key identifier: D1:FB:E8:9D:5F:67:04:3E:D3:69:B1:D2:4B:2F:8A:18:C9:13:11:56
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 73BEE60680DB9A73F3B7488CED40EA7AD9B2CD80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.mft
caRepository: rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 26 Dec 2024 06:37:51 +0000
Certificate not after: Thu 25 Dec 2025 06:42:51 +0000
Subordinate resources: AS: 268869
IP: 45.174.220.0/22
IP: 2804:5bc8::/32
Validation: Failed, certificate revoked on Fri 17 Jan 2025 11:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:be:e6:06:80:db:9a:73:f3:b7:48:8c:ed:40:ea:7a:d9:b2:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 26 06:37:51 2024 GMT
Not After : Dec 25 06:42:51 2025 GMT
Subject: CN=D1FBE89D5F67043ED369B1D24B2F8A18C9131156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:76:a1:2e:81:c4:4c:e0:39:42:ba:9d:38:
23:f2:75:6c:c0:43:0c:74:ec:26:1d:f2:b7:d1:20:
47:1b:4f:92:bc:41:87:a8:45:ab:fd:6a:ff:ef:a2:
23:14:87:cc:24:49:83:b0:12:ec:2a:30:d5:c3:6e:
1c:2d:fb:f9:c0:87:9b:81:05:c7:7e:79:8d:f7:f6:
66:d6:98:80:6a:b7:47:8b:3e:03:c8:e0:d0:50:5f:
f2:b5:fb:1c:b9:78:31:a0:b0:2b:ba:aa:10:1f:1c:
e3:d1:dd:2d:d8:38:b0:44:4d:06:44:a1:be:d1:92:
72:3f:10:92:a1:bd:08:30:c6:bb:9c:6f:da:dd:4c:
89:f8:56:fe:6d:fb:91:20:95:5d:a4:c3:98:ad:e7:
9d:7f:f4:7e:8d:33:28:03:d7:c7:8d:6a:dd:36:35:
b7:9f:d5:e6:3a:d5:79:a5:ea:5f:eb:01:c4:cb:ca:
b6:13:85:93:28:a2:1d:10:5d:0d:50:3d:19:82:a3:
de:c4:2e:fe:f6:7e:b6:cd:83:8e:e9:a3:c3:d2:d8:
94:19:80:86:a6:de:59:f2:d3:3a:b3:d0:20:76:74:
12:74:8d:28:f1:5b:86:96:17:f5:df:f4:00:65:be:
dd:ec:31:26:c8:eb:f4:f1:d5:76:4d:86:c6:58:d6:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D1:FB:E8:9D:5F:67:04:3E:D3:69:B1:D2:4B:2F:8A:18:C9:13:11:56
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.220.0/22
IPv6:
2804:5bc8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268869
Signature Algorithm: sha256WithRSAEncryption
1e:7c:ae:26:82:8c:7f:a7:b5:73:ed:53:7f:dc:4c:c1:8d:49:
e9:01:51:0d:f0:54:4c:47:ad:52:89:ba:46:a0:93:ce:68:1a:
7a:86:68:38:5a:bc:f8:c6:56:79:9c:6d:57:3a:0f:80:81:86:
46:d2:26:2e:c9:95:dd:a3:79:9b:d7:78:5b:90:ea:79:17:cb:
ac:6a:f9:25:a3:ce:34:f0:97:47:b9:78:6a:44:53:b2:6a:16:
70:20:de:36:54:36:a8:02:be:c1:e5:90:2e:1c:e8:93:6a:f6:
bc:36:4a:f7:59:be:48:93:ea:09:07:1f:db:f3:f4:b5:56:7d:
8d:70:06:34:ed:3b:7e:fa:fa:c4:d2:1a:05:ec:e4:f7:53:bc:
33:4e:f4:38:ba:e9:ad:cb:71:ca:20:84:7b:b6:30:b9:18:2e:
1e:5d:f2:8f:3f:ff:db:7e:d2:34:f6:a1:6d:5e:7e:df:2f:c0:
d4:23:39:16:54:d8:6a:c7:15:27:24:3e:d6:33:75:6f:e7:a0:
cc:c1:b1:33:60:b1:ad:9e:22:87:79:be:b9:77:68:55:b2:e9:
18:a8:ea:53:3a:72:1d:35:05:39:28:05:30:fa:4d:40:db:f3:
18:60:9e:4d:8a:e7:24:04:25:fe:6e:dc:18:36:bc:86:e2:e1:
e0:6a:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:29 2025 by rpki-client