Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.cer
File: D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.cer (raw, json)
Hash identifier: irKGmv+MSWn9r5D/7nylf9DGaM999h6s7k6beSHiDC8=
Subject key identifier: D9:B5:5D:E2:DD:29:45:6B:0C:FB:2E:D2:81:84:37:4E:BC:A8:DE:9B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 76FEAFB55E42A3861CFD380843ABE034AF5AA182
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.mft
caRepository: rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 04 Oct 2024 23:07:10 +0000
Certificate not after: Fri 03 Oct 2025 23:12:10 +0000
Subordinate resources: AS: 263326
IP: 191.7.176.0/21
IP: 2804:1458::/32
Validation: Failed, certificate revoked on Wed 26 Mar 2025 23:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:fe:af:b5:5e:42:a3:86:1c:fd:38:08:43:ab:e0:34:af:5a:a1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 4 23:07:10 2024 GMT
Not After : Oct 3 23:12:10 2025 GMT
Subject: CN=D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:69:11:21:d2:55:f9:b0:37:d7:f2:09:70:
38:df:18:b9:44:05:4e:02:8e:e2:6e:f8:81:8f:43:
30:50:28:16:e4:3b:8f:da:c9:b1:ca:e1:6d:4f:35:
a0:b9:a1:a1:ea:03:b3:77:a8:ca:4f:0f:01:03:1a:
61:da:13:a3:ef:26:96:8c:81:4b:fd:1e:36:d0:f2:
b1:dc:64:71:2c:48:55:06:50:82:4a:ef:36:a3:3f:
c8:ff:9b:2b:cc:20:80:3a:38:ac:e1:39:e4:c2:16:
e9:d8:62:7c:30:3b:4c:d0:23:fb:03:8d:5e:c9:4f:
0e:b5:87:56:87:97:5c:eb:a5:3b:ce:3f:9b:8d:64:
64:82:26:e0:ca:99:bc:0f:22:f6:1a:74:d5:d5:0b:
78:7a:4d:71:a9:61:56:f5:59:1a:b3:41:70:e7:b1:
a4:61:56:de:99:86:4e:25:45:d1:4b:13:dc:81:ec:
47:ce:ea:d5:64:7d:68:c8:31:18:c0:f0:9c:81:70:
98:7c:b9:ac:da:fe:7a:05:b3:43:3f:8b:f0:da:8b:
6f:bc:25:02:a4:33:39:df:7a:6b:1e:a8:9a:a4:c8:
fd:ea:a8:10:15:bc:57:91:9f:d2:97:8e:12:d7:f2:
87:a2:fd:e4:37:be:33:6c:e9:19:59:2a:98:e9:78:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:B5:5D:E2:DD:29:45:6B:0C:FB:2E:D2:81:84:37:4E:BC:A8:DE:9B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.7.176.0/21
IPv6:
2804:1458::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263326
Signature Algorithm: sha256WithRSAEncryption
9c:42:4d:2a:45:3c:07:83:48:87:5d:17:9d:01:5e:2c:09:5a:
7c:4e:8c:43:5d:6a:fb:0c:22:16:a4:6d:53:e9:52:b2:07:15:
34:cd:0a:a2:87:59:0d:56:bf:46:f4:3a:ca:37:35:cc:37:41:
5f:37:9c:5e:e9:4f:2f:d7:8b:ef:cd:9e:b4:c2:e7:e7:b1:ae:
a9:0c:b1:00:56:34:05:e4:55:7e:75:d8:f7:a9:11:86:69:8c:
84:b0:ec:74:7a:a6:c4:4d:6f:07:51:08:95:58:7b:cf:41:e6:
06:17:10:40:90:a0:a7:79:03:d2:82:64:0b:5f:4c:86:a8:07:
2f:74:c7:88:0a:0b:fd:49:18:83:37:38:3b:0a:2d:76:24:3b:
6d:46:41:d1:e7:4c:b4:c4:2a:a5:d2:b1:4e:41:77:57:cc:75:
63:bd:28:c9:21:00:ab:e8:a5:1c:58:c0:ab:f1:02:2d:44:2e:
b8:5b:f2:0d:46:4c:89:eb:18:6f:19:c5:a4:ca:3d:f7:c5:97:
6c:dd:7b:af:39:52:18:f1:49:55:61:5d:3a:6a:10:b4:56:c5:
45:8c:c2:61:eb:52:71:0a:f3:f7:9e:8c:5e:ef:17:08:a9:90:
80:63:c8:5f:e0:d4:6d:84:a7:a2:d0:ae:42:57:ef:b0:4a:aa:
0c:f2:f2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:29 2025 by rpki-client