Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer
File: D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer (raw, json)
Hash identifier: th7J868UFZE9zVqSH9WZLXVm5o9AxznWV5TJU7znh6k=
Subject key identifier: D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5E1073075D6D3BDCBBEF0C7C0FAD7D150E896084
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft
caRepository: rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 28 Oct 2024 16:59:55 +0000
Certificate not after: Mon 27 Oct 2025 17:04:55 +0000
Subordinate resources: AS: 262346
IP: 138.97.0.0/22
IP: 143.202.224.0/22
IP: 170.150.100.0/22
IP: 177.125.160.0/21
IP: 177.125.204.0/22
IP: 179.107.56.0/21
IP: 2804:81c::/32
Validation: Failed, certificate revoked on Sun 26 Jan 2025 21:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:10:73:07:5d:6d:3b:dc:bb:ef:0c:7c:0f:ad:7d:15:0e:89:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 28 16:59:55 2024 GMT
Not After : Oct 27 17:04:55 2025 GMT
Subject: CN=D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:f2:2f:12:8a:62:c5:3d:d5:c5:b7:c1:98:
a1:ca:60:65:70:89:75:4a:b2:6e:6e:5b:81:d6:3f:
e3:4c:bf:87:b0:64:8e:d0:d3:52:22:e5:6e:d7:05:
9b:60:a2:a4:d3:b6:a6:45:88:cd:13:b5:55:f7:f4:
44:e7:71:dc:5a:52:67:bc:06:d2:17:56:c3:77:fe:
2b:3b:ab:31:bb:95:e3:cc:ec:f2:84:8e:1a:f5:ef:
1b:27:ec:be:7a:07:24:82:69:f7:a8:20:53:c1:b1:
46:a3:f0:16:8b:ec:85:72:1e:13:4a:76:f1:b9:b8:
60:3a:c3:ca:82:f2:e3:50:ce:02:cb:b4:ab:5a:99:
c2:99:88:d8:bf:55:b4:37:d6:96:93:27:9d:98:6c:
6b:c1:16:30:74:ee:3c:09:fd:d1:9c:1b:0d:ac:97:
d1:98:0c:34:6e:29:6a:62:2c:01:34:b2:b3:ed:ff:
5b:c9:59:b0:c3:f4:39:c3:15:1f:1f:02:27:95:55:
61:0c:5e:cd:c3:24:41:6c:7f:e9:72:f1:db:4e:4d:
e3:a1:22:21:3d:dc:40:33:7e:5b:8a:c2:ff:7e:ab:
46:57:35:e9:24:ec:0a:86:65:48:2f:46:d9:af:f0:
a4:40:70:d8:1b:bb:c9:73:62:f6:e7:72:57:d9:38:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.0.0/22
143.202.224.0/22
170.150.100.0/22
177.125.160.0/21
177.125.204.0/22
179.107.56.0/21
IPv6:
2804:81c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262346
Signature Algorithm: sha256WithRSAEncryption
4e:3f:17:9a:51:36:84:b2:a8:ad:c5:32:80:db:b9:83:14:16:
ca:08:f9:2c:a1:8b:d6:fd:60:cd:5f:08:cc:e8:45:73:94:36:
10:4d:a2:de:2e:e5:db:89:02:78:a2:54:88:66:33:13:df:91:
e1:aa:8d:55:30:37:a8:87:11:b8:15:b2:29:48:04:59:ab:8e:
86:4a:fd:e3:16:61:40:9b:0a:80:71:b6:e2:10:ba:d3:db:e3:
e8:23:8d:0e:1d:cb:05:d8:53:15:92:35:39:e6:5a:b0:6a:20:
c8:3a:e0:7a:ab:e0:b0:28:47:2e:8e:bd:1b:aa:79:71:38:4f:
6a:dc:f1:3d:91:65:f3:09:7d:82:11:f3:45:c6:bb:0b:fd:16:
27:92:32:8e:f1:da:09:cd:f3:f1:cd:a1:c9:57:92:ab:b9:f5:
f8:8b:be:3f:63:37:89:b0:b1:18:08:3d:2e:c8:56:2a:1b:d7:
68:b8:30:dc:67:aa:4f:02:b2:be:4c:1c:9a:43:f8:11:d3:9c:
e4:e0:0e:f6:14:43:18:93:75:03:b9:ea:36:c4:36:a3:04:12:
13:96:e3:43:fd:47:d5:86:f4:3a:33:bb:06:d0:16:97:04:89:
c4:78:76:d8:ab:9e:6a:33:17:92:49:5d:fc:4a:7f:1d:82:cc:
e7:4f:34:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:01 2025 by rpki-client