Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer
File: F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer (raw, json)
Hash identifier: Q/CGPkadm04AO9Tmf7HYt+YQ+A0tpVdSck2Q1NShw08=
Subject key identifier: F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 62182620AE3FCE05BA0A74DE517E62F293CF9AD5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.mft
caRepository: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 31 Aug 2024 14:10:34 +0000
Certificate not after: Sat 30 Aug 2025 14:15:34 +0000
Subordinate resources: AS: 268091
IP: 45.169.24.0/22
IP: 2804:57dc::/32
Validation: Failed, certificate revoked on Fri 14 Feb 2025 17:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:18:26:20:ae:3f:ce:05:ba:0a:74:de:51:7e:62:f2:93:cf:9a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 31 14:10:34 2024 GMT
Not After : Aug 30 14:15:34 2025 GMT
Subject: CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:44:e3:41:54:79:ef:9d:77:b8:a1:35:e9:
7c:9e:6f:02:b1:a1:9b:33:93:b6:49:2f:b6:bb:02:
13:f0:a0:7e:69:bd:c0:3e:64:9d:6c:5c:35:47:89:
2e:df:5c:4c:c9:5c:32:39:7b:6a:74:a6:f5:18:77:
1a:b2:37:a9:ce:ef:70:69:eb:57:74:30:3b:4f:35:
f7:a1:c4:52:65:65:e8:10:9c:ee:ab:f2:22:97:29:
9f:a3:28:c2:a5:d8:7c:41:4a:40:b2:2a:ef:8f:16:
99:d7:05:18:d8:99:bf:50:c5:e7:00:84:78:4c:c4:
29:5f:c9:4e:77:f1:4a:51:3e:76:4d:4f:ee:56:b9:
c4:a2:49:1f:ad:ea:96:e6:f5:cb:3e:81:55:e3:cc:
5f:9f:6c:5f:9c:1a:a3:da:b5:0e:8d:8a:3b:2a:3f:
45:68:5c:44:04:58:fe:4c:d6:19:7e:50:f3:0f:5c:
ac:35:bb:16:cf:f8:4d:20:b5:67:60:d9:37:7f:e4:
64:6e:7a:d5:01:5f:d0:26:6c:9c:8a:db:32:1d:b7:
cf:24:2d:68:dc:a6:95:64:e5:c9:c6:dd:96:96:b5:
eb:b3:6d:ca:90:e8:02:b3:af:bc:2c:0d:35:b0:bf:
bd:ca:01:3d:cb:c0:35:78:8f:11:fd:96:eb:98:da:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.24.0/22
IPv6:
2804:57dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268091
Signature Algorithm: sha256WithRSAEncryption
90:46:60:76:30:69:8a:01:1f:9b:5a:a3:ab:83:3b:ee:7d:fc:
13:f4:62:50:68:d2:f3:b7:cc:fe:3e:72:a0:03:46:fb:5c:45:
f2:cd:4e:aa:7b:72:db:f9:e0:a9:d8:04:9c:13:a4:cc:57:4f:
11:44:89:38:7b:d6:1e:3b:12:d6:99:5c:cf:7d:74:6b:ac:a3:
5c:e3:f8:4d:80:e9:e4:19:67:cf:ad:35:c4:39:be:c5:bb:2a:
70:38:ea:1b:46:81:c8:3b:0b:5d:21:a5:2e:cc:62:7a:f3:23:
98:1e:19:78:21:2d:65:c8:c9:47:e7:0a:52:5b:d2:0c:cc:9b:
0f:44:06:6c:55:c2:c7:fb:5d:02:16:a5:89:60:3b:c5:84:1d:
06:1d:3b:f3:ac:10:2a:a2:0a:aa:46:55:bc:19:30:ca:04:36:
d4:d2:c6:f6:51:34:92:91:7c:6d:be:84:6f:e4:ea:00:e4:c3:
f5:cf:0e:72:58:16:bf:c5:ef:c6:19:07:cb:29:3a:3d:b0:f7:
b7:d7:23:fc:3c:45:b4:00:fd:aa:87:fe:bd:a4:02:25:6d:80:
27:4b:05:1c:88:60:a9:b6:bf:51:01:d0:b8:ed:4b:b2:28:11:
e7:4a:0c:bb:df:01:b0:64:b7:be:a3:99:53:47:c2:a6:7c:b3:
99:36:ad:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:07 2025 by rpki-client