Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
File: D8C211ABAD958D5A26D33AF78B82405676017796.cer (raw, json)
Hash identifier: fMFvhCYjzc1jinE+9gFFAFfCJaA3aLJu/8SyOWLX4UE=
Subject key identifier: D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 43E38CBB3078A512D069521D3F0E1B01781F6553
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/D8C211ABAD958D5A26D33AF78B82405676017796.mft
caRepository: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 23 Dec 2024 03:49:54 +0000
Certificate not after: Mon 22 Dec 2025 03:54:54 +0000
Subordinate resources: AS: 268707
AS: 270966
IP: 45.169.160.0/23
IP: 2804:5984::/32
Validation: Failed, certificate revoked on Fri 17 Jan 2025 09:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e3:8c:bb:30:78:a5:12:d0:69:52:1d:3f:0e:1b:01:78:1f:65:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 23 03:49:54 2024 GMT
Not After : Dec 22 03:54:54 2025 GMT
Subject: CN=D8C211ABAD958D5A26D33AF78B82405676017796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:eb:be:87:14:b0:bd:29:91:06:bc:70:d2:
3d:7e:d3:a9:2d:eb:57:30:c2:2d:57:8d:0f:99:43:
8c:52:fd:5b:9c:af:b5:92:8a:d6:72:00:52:bb:59:
91:20:be:73:61:e3:91:17:94:10:ad:b2:e0:3d:28:
11:bc:3e:8f:82:5e:17:43:2c:9b:da:0d:00:a4:8a:
ca:7d:d0:0b:d8:92:54:95:7b:b6:dd:42:63:11:cf:
96:b3:b9:ae:b8:72:ab:e0:a2:9d:06:6e:aa:09:fb:
25:a8:66:71:2b:37:97:1e:f2:bc:ee:4b:5d:44:4b:
0e:71:00:aa:3b:e9:71:57:ef:10:1f:fb:50:05:62:
73:f1:89:8d:1f:04:5b:91:e5:18:9a:5d:a8:34:c8:
1c:10:e9:93:34:1d:46:3a:b1:77:19:26:e0:2a:17:
4d:c1:de:99:a6:32:37:7e:52:24:4c:01:b5:1c:b1:
aa:87:1c:70:ff:f2:d9:62:09:ec:e2:c5:26:54:6f:
3f:ce:9f:8c:21:b1:ad:cb:08:c2:cd:b3:d3:d5:70:
39:5a:47:cf:49:3e:5f:e6:c0:32:5a:b1:bf:9c:51:
d0:83:e3:79:e1:19:13:f8:71:de:c3:12:8a:31:fa:
85:01:c6:01:05:f2:d4:b2:14:1b:af:f6:a6:c5:c6:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/D8C211ABAD958D5A26D33AF78B82405676017796.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.160.0/23
IPv6:
2804:5984::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268707
270966
Signature Algorithm: sha256WithRSAEncryption
19:52:13:97:6c:42:10:e3:3e:2f:2e:74:a9:14:4e:3a:dd:11:
e0:f8:1e:4d:e4:47:1b:76:62:ea:79:8f:b8:b2:71:1c:6a:e6:
c8:3e:c2:a6:2e:14:f5:91:96:1d:5e:fc:8d:30:1f:73:ad:ef:
27:ba:46:29:b9:5d:7f:20:f4:6a:be:fb:43:67:18:ed:48:c1:
12:c6:2d:1d:8c:07:38:4d:93:f5:d4:11:99:fe:8e:ae:64:ca:
54:75:9e:a0:1c:db:4e:a4:17:b1:79:59:4d:43:bb:45:41:87:
85:f9:ab:f4:d7:29:91:4c:47:c0:65:4b:7e:a7:6f:5d:c7:bf:
59:eb:b7:c8:ea:92:f5:08:86:af:a2:e4:ef:7b:d3:93:83:b3:
c8:34:ab:17:f6:1b:4c:16:1c:fa:3e:03:ac:dc:51:50:27:c2:
27:4b:11:63:1c:f1:1d:8e:7d:db:89:a1:95:75:ff:93:da:c3:
0e:76:30:72:b2:d7:ec:bd:c9:b8:24:71:8b:ea:0b:de:12:fd:
40:e4:12:7b:a0:6e:2a:fb:9f:8c:e0:8a:56:ac:3d:ff:b1:60:
6c:ba:db:ec:c4:0e:cd:8d:6c:6b:5f:8b:2d:4e:ff:7d:7d:68:
fe:9c:60:48:62:6e:ef:8a:75:08:02:0c:5a:27:3b:fb:f9:62:
c1:65:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:50 2025 by rpki-client