![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D97287D57D96D036C529C9616F5E53D9E23B6716.cer
File: D97287D57D96D036C529C9616F5E53D9E23B6716.cer (raw, json)
Hash identifier: nAH37/RosZBGg2UWvk1rHwzfw5EiLdcThnv94UCFydU=
Subject key identifier: D9:72:87:D5:7D:96:D0:36:C5:29:C9:61:6F:5E:53:D9:E2:3B:67:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 21B9D31E6DCFE60C0EBB79142A04E60D3D4714E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/D97287D57D96D036C529C9616F5E53D9E23B6716.mft
caRepository: rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 13 Feb 2025 13:17:03 +0000
Certificate not after: Thu 12 Feb 2026 13:22:03 +0000
Subordinate resources: AS: 272570
IP: 2804:854c::/32
Validation: Failed, certificate revoked on Fri 14 Feb 2025 20:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b9:d3:1e:6d:cf:e6:0c:0e:bb:79:14:2a:04:e6:0d:3d:47:14:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 13 13:17:03 2025 GMT
Not After : Feb 12 13:22:03 2026 GMT
Subject: CN=D97287D57D96D036C529C9616F5E53D9E23B6716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:24:e7:ba:91:4a:55:60:b6:12:0b:0a:89:9b:
1d:c7:72:1b:51:dc:31:62:e9:e8:ab:e9:3b:22:df:
a9:20:06:4d:f9:7d:02:74:21:5a:c6:66:de:f7:e5:
c4:65:ba:ea:d1:54:31:60:88:b4:69:e2:4b:ec:ab:
52:40:79:25:a8:2c:b8:9a:96:01:7d:39:84:8a:a9:
11:da:e9:f9:08:6d:7f:73:fb:7b:5b:ed:96:9b:8a:
a3:ab:60:0b:4f:68:08:9f:e4:16:17:ba:34:a1:04:
61:bf:fd:c1:10:c6:dd:c0:82:15:0a:b3:d6:07:27:
c8:b4:16:1a:af:19:58:0f:e9:48:a8:76:06:64:10:
1b:20:66:2c:19:08:2c:ff:2c:7b:48:54:48:b9:66:
7d:f1:b9:d8:02:e7:ac:e4:2b:16:01:52:f0:5b:f9:
37:6f:85:0b:40:ad:9a:34:6b:c2:9e:d1:fc:60:7b:
05:1b:6c:f2:96:67:8f:82:06:b0:d5:50:e9:2f:2f:
75:28:52:0e:b5:e4:f8:fe:00:cf:c2:fa:56:88:1f:
82:41:02:c3:67:16:39:4f:a4:d9:f1:19:bc:01:b0:
40:38:fb:4d:fd:03:a7:30:5d:22:cf:b8:28:d9:aa:
bd:bb:1f:9d:93:76:44:4e:c8:35:94:90:7e:91:50:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:72:87:D5:7D:96:D0:36:C5:29:C9:61:6F:5E:53:D9:E2:3B:67:16
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/D97287D57D96D036C529C9616F5E53D9E23B6716.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:854c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272570
Signature Algorithm: sha256WithRSAEncryption
77:9a:b2:67:d3:de:b8:18:df:f6:5a:5f:67:dd:ae:e8:8e:87:
eb:76:aa:e4:4a:95:7d:9a:29:99:db:14:86:1c:cc:54:ef:cf:
9b:0e:73:e4:46:90:2a:ab:da:0f:1b:79:58:a4:34:90:5f:e4:
10:13:3a:96:59:24:f5:02:c0:d3:11:17:14:be:50:e7:2e:e1:
26:d2:f9:bf:9b:f0:5d:d4:89:57:e7:18:e7:e5:34:8a:c6:c0:
d7:55:ae:6a:0c:31:db:b0:d8:72:69:15:d8:28:ba:9f:26:1d:
2a:9b:29:0e:52:20:02:9f:ba:0e:56:8e:3b:14:89:ac:e4:18:
04:27:92:f3:d6:49:4f:42:f0:bc:7c:e5:cb:51:c4:2b:73:37:
57:85:36:72:22:10:d2:ec:02:b9:e8:58:ef:98:e1:32:f4:1e:
a7:9b:e2:0a:d9:27:f4:90:20:27:7b:c9:3e:ab:df:31:79:4b:
cb:a6:2b:52:9f:98:ea:62:c0:b3:29:6a:0c:26:5f:4a:d0:1a:
56:ba:9a:2d:be:4c:ec:26:fa:36:bf:1e:a1:d7:17:59:e2:51:
c7:d0:5b:46:5e:8e:5f:b9:f1:5f:57:e7:8b:38:53:be:e1:ba:
11:15:60:10:29:1a:72:44:10:f6:6b:68:2a:78:f6:cb:47:a2:
6c:be:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:43 2025 by rpki-client