
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F398DBEDD8E5DB0E1332C156970F3DFDEA39FDF6.cer
File: F398DBEDD8E5DB0E1332C156970F3DFDEA39FDF6.cer (raw, json)
Hash identifier: PWkL0fJGq+GCjxbWvUp7ay2E8+pGTDFEr3gNVvXI8b4=
Subject key identifier: F3:98:DB:ED:D8:E5:DB:0E:13:32:C1:56:97:0F:3D:FD:EA:39:FD:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 595A2FD17D657A4AD18F4341800AD6E98B785C5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/F398DBEDD8E5DB0E1332C156970F3DFDEA39FDF6.mft
caRepository: rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 11 Dec 2024 20:18:50 +0000
Certificate not after: Wed 10 Dec 2025 20:23:50 +0000
Subordinate resources: AS: 271007
IP: 170.254.236.0/22
IP: 2804:74d8::/32
Validation: Failed, certificate revoked on Thu 19 Dec 2024 12:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5a:2f:d1:7d:65:7a:4a:d1:8f:43:41:80:0a:d6:e9:8b:78:5c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 11 20:18:50 2024 GMT
Not After : Dec 10 20:23:50 2025 GMT
Subject: CN=F398DBEDD8E5DB0E1332C156970F3DFDEA39FDF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:9d:6d:f4:a7:7b:29:bc:18:4f:f0:b3:36:
14:95:74:41:f3:bf:47:f0:d6:f7:d0:23:6a:f1:2b:
69:fb:89:65:07:c1:e3:91:ae:77:47:21:19:96:7c:
ab:67:fa:74:9d:4a:31:9d:6d:48:bc:75:b5:6a:fc:
67:b3:9f:82:bd:52:5b:19:fe:c3:c0:d3:db:4c:c2:
11:b0:62:2e:76:6a:7b:46:3d:41:fc:89:5f:ec:5a:
18:26:81:da:0d:36:46:9f:50:e4:fe:7c:bc:97:01:
4e:01:2f:30:5d:12:b1:fb:fd:50:2c:32:b6:b6:0a:
e3:ab:db:be:7c:46:53:02:81:b3:c9:54:df:c5:88:
98:74:c8:60:6b:52:9f:01:fe:5b:15:2d:48:91:31:
0e:5b:c5:93:9c:81:2f:2c:c0:ae:63:78:44:f2:97:
98:e1:9e:d2:3e:2b:b8:62:52:0d:ba:46:53:3c:70:
0c:db:e2:0c:85:d8:56:4e:71:1a:77:69:d8:57:92:
c3:3c:cf:54:86:d6:e7:f9:7d:de:54:a6:4e:19:4d:
c2:f8:ba:0e:c8:c7:13:ff:a2:f8:97:56:bc:e8:87:
a8:29:ef:4d:46:b7:81:2b:80:4d:20:e0:2c:48:cb:
0c:23:25:d5:69:79:69:fc:25:b7:6f:7f:56:ab:ba:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F3:98:DB:ED:D8:E5:DB:0E:13:32:C1:56:97:0F:3D:FD:EA:39:FD:F6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/F398DBEDD8E5DB0E1332C156970F3DFDEA39FDF6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.236.0/22
IPv6:
2804:74d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271007
Signature Algorithm: sha256WithRSAEncryption
db:cf:de:b2:57:22:a8:db:1b:7b:4f:aa:38:85:0d:53:1e:95:
20:1a:ed:08:fa:13:8c:86:6e:31:2e:29:8f:b0:5d:f5:e4:f8:
f1:6f:1d:e3:6d:b9:56:58:26:32:21:50:e6:03:9f:45:af:8b:
cf:9c:53:22:48:d8:09:70:9b:96:61:b8:8f:21:51:86:2a:51:
96:36:44:a8:17:9a:c6:78:81:30:78:07:1a:9a:89:33:07:70:
20:fb:1a:70:7e:50:82:db:f6:39:34:54:56:bb:77:78:8d:5c:
09:4f:84:39:4a:41:d7:57:ba:aa:99:9f:69:46:92:e5:8f:85:
d7:7d:01:3c:48:db:a1:6b:a8:16:3a:03:65:45:cc:cf:40:2f:
4d:d7:6c:d1:75:50:fb:fd:d5:2d:d6:65:20:bb:9e:0f:cd:06:
da:3b:7f:95:05:b7:3c:7f:65:6a:82:22:23:79:ff:5c:37:68:
f5:8c:02:1e:c1:14:34:41:51:6f:9d:ed:11:4c:eb:3d:27:c3:
58:a9:cd:36:4c:fe:f9:fa:d8:ac:26:4e:d0:4c:fc:07:b3:c0:
f3:f9:65:20:5c:ee:ae:31:a1:85:9f:2e:14:79:d3:5b:95:05:
94:bb:cf:db:b5:71:c3:7d:6a:d1:1d:98:0f:21:6c:f3:2d:2f:
8e:eb:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:55 2025 by rpki-client