![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2568211B5DA60BB77462DB5E1209EE0F6A93089.cer
File: D2568211B5DA60BB77462DB5E1209EE0F6A93089.cer (raw, json)
Hash identifier: 23oZZNYZxz6OJYM7MFQrocLKOqou95yepM8EdLE/rdk=
Subject key identifier: D2:56:82:11:B5:DA:60:BB:77:46:2D:B5:E1:20:9E:E0:F6:A9:30:89
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 772E0575777651276E0B8146A99FD55783462DC4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/D2568211B5DA60BB77462DB5E1209EE0F6A93089.mft
caRepository: rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 25 Jun 2024 18:27:48 +0000
Certificate not after: Tue 24 Jun 2025 18:32:48 +0000
Subordinate resources: AS: 271634
IP: 179.0.108.0/22
IP: 2804:7e98::/32
Validation: Failed, certificate revoked on Tue 10 Dec 2024 17:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2e:05:75:77:76:51:27:6e:0b:81:46:a9:9f:d5:57:83:46:2d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 25 18:27:48 2024 GMT
Not After : Jun 24 18:32:48 2025 GMT
Subject: CN=D2568211B5DA60BB77462DB5E1209EE0F6A93089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:ab:e1:51:81:23:c1:66:66:0c:cb:a5:38:
1b:8f:f2:32:ad:3a:17:9f:4c:00:a2:0c:87:18:d8:
67:53:d7:24:d2:f5:95:9d:01:f1:23:7c:4d:4e:2f:
d4:b3:1f:8e:a2:f0:41:4d:87:8e:49:20:8b:34:cf:
45:b6:d2:86:b6:ce:c0:47:bf:91:dc:98:bb:1a:1d:
a8:93:6a:5c:f8:37:88:dc:5b:88:83:6e:8c:5b:59:
f7:0c:7d:29:46:bf:5c:e3:7d:ee:02:1b:96:b4:03:
61:8d:1b:83:1e:ff:cd:e9:95:32:e0:71:ab:db:32:
f8:cc:13:66:8c:47:20:b6:53:f3:50:19:0e:c8:24:
eb:96:b5:d0:c4:8e:fa:cd:5d:08:53:0c:3e:7e:db:
4e:23:44:46:88:7c:09:6c:d7:d8:7e:e7:09:30:ae:
97:67:d9:7f:c6:91:87:70:82:46:01:61:33:04:a0:
77:9e:ca:5a:2e:c6:15:18:4e:cb:04:52:11:94:35:
e6:e9:3d:82:5f:30:92:d9:05:06:5b:4c:a3:c6:72:
80:e2:35:fb:c5:71:c0:72:e9:8f:9d:3c:5a:aa:83:
66:47:f5:c4:bb:92:ff:9a:d2:b5:da:46:03:5b:35:
bc:04:0f:5b:f8:39:63:64:7d:4c:af:5c:fd:db:02:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D2:56:82:11:B5:DA:60:BB:77:46:2D:B5:E1:20:9E:E0:F6:A9:30:89
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/D2568211B5DA60BB77462DB5E1209EE0F6A93089.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.108.0/22
IPv6:
2804:7e98::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271634
Signature Algorithm: sha256WithRSAEncryption
a0:5b:3d:a3:ff:e2:02:af:06:62:2f:f3:47:9c:7e:d2:f9:3e:
65:0a:9d:54:10:40:a5:1c:cf:f2:90:30:4c:44:cb:14:62:67:
a5:db:f4:eb:26:57:fd:df:c0:ce:7d:0e:56:b8:20:6d:53:0c:
74:1b:67:ab:c4:f2:0a:14:fb:07:64:8c:d5:32:0f:93:a3:5f:
79:ec:a7:83:9c:b3:dc:25:05:01:84:bb:8a:65:06:99:f1:81:
ad:32:83:eb:87:98:4a:25:74:f1:57:59:eb:2b:26:d0:10:5c:
81:90:a6:d9:30:a2:63:a1:2b:35:89:96:ff:60:38:db:71:ff:
c2:47:8c:d0:2d:3e:5d:7a:72:85:a1:b2:ad:a8:f4:f4:11:1a:
71:ff:6b:62:91:ff:b6:49:5c:90:4a:1e:a9:43:f7:91:37:fa:
0b:99:56:4b:44:c2:d4:29:de:d4:69:70:71:63:ac:36:38:ec:
20:f4:96:62:3c:ef:c9:ab:86:d0:94:00:87:9e:49:b3:b7:ab:
3c:0d:43:ba:06:d5:04:07:3e:db:d3:f7:e2:d0:39:f7:35:42:
4f:39:2e:4d:6a:84:0e:22:59:48:88:a6:37:44:31:44:0f:92:
3a:9d:59:39:78:ad:b3:86:ea:69:ec:74:3c:62:39:00:5a:22:
2a:91:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:35 2025 by rpki-client