Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F941687822F2EE9E3E960B3C9B9A34FE1A7605DD.cer
File: F941687822F2EE9E3E960B3C9B9A34FE1A7605DD.cer (raw, json)
Hash identifier: Vjc6IddXakUqlJcnVwwvO/CEGqHWK9sIQsab4NvVPgs=
Subject key identifier: F9:41:68:78:22:F2:EE:9E:3E:96:0B:3C:9B:9A:34:FE:1A:76:05:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 53729DCCFF726B58A0E103DF9762E588BEE051A0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/F941687822F2EE9E3E960B3C9B9A34FE1A7605DD.mft
caRepository: rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 13 Dec 2024 13:40:01 +0000
Certificate not after: Fri 12 Dec 2025 13:45:01 +0000
Subordinate resources: AS: 61700
IP: 131.0.112.0/22
IP: 170.78.64.0/22
IP: 2804:1af4::/32
Validation: Failed, certificate revoked on Tue 31 Dec 2024 11:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:72:9d:cc:ff:72:6b:58:a0:e1:03:df:97:62:e5:88:be:e0:51:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 13 13:40:01 2024 GMT
Not After : Dec 12 13:45:01 2025 GMT
Subject: CN=F941687822F2EE9E3E960B3C9B9A34FE1A7605DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:d2:1a:73:d6:54:4f:6c:e8:7a:44:b9:00:
bd:e0:e1:75:0f:9b:0b:fd:60:2e:42:d7:1c:c7:8b:
13:32:11:d5:cb:47:0e:4f:83:f2:61:1f:85:8c:91:
a7:74:0c:44:87:16:d5:dc:75:d3:76:c2:68:74:ce:
46:09:b2:ce:7f:a4:04:1e:7d:fb:14:97:b1:e4:da:
09:9e:e0:2c:8d:7a:ce:c0:7e:e9:fd:70:49:7b:72:
73:5a:92:8f:2c:6c:8e:0f:3e:f7:96:3f:71:4f:da:
50:fe:ea:9a:08:aa:ab:40:b3:15:15:af:89:99:8b:
ec:c8:aa:9f:b3:b2:9f:0a:df:20:cb:84:9e:dc:7f:
19:19:a4:23:2c:45:9c:dd:c4:c7:f7:df:fa:c5:ee:
d8:37:38:ac:38:b6:03:58:89:96:68:23:75:c4:57:
89:e3:f8:23:f0:ec:42:a5:86:2b:e0:ad:24:aa:af:
a3:31:da:5a:6c:e3:2c:ad:d3:de:59:81:50:92:87:
73:39:20:14:e5:c4:35:12:69:98:a1:06:b7:5e:04:
5e:45:74:e7:54:60:07:11:45:4b:50:c0:8a:0e:ae:
1f:07:08:86:45:03:55:0e:f6:86:4e:f2:82:3b:03:
52:80:32:b7:12:83:a5:d8:cd:ea:49:ba:8a:20:ab:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F9:41:68:78:22:F2:EE:9E:3E:96:0B:3C:9B:9A:34:FE:1A:76:05:DD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/F941687822F2EE9E3E960B3C9B9A34FE1A7605DD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.112.0/22
170.78.64.0/22
IPv6:
2804:1af4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61700
Signature Algorithm: sha256WithRSAEncryption
33:ed:60:83:fc:53:74:81:e8:45:f6:f6:f7:b9:85:b7:87:d8:
5d:e9:7a:76:55:d3:ac:06:cd:7d:aa:8b:3f:c2:10:99:aa:a2:
91:78:07:98:4f:11:49:5b:d8:fe:90:ac:0f:32:b3:57:46:a0:
8f:da:41:51:e1:19:c4:4f:d6:d1:64:f4:5b:d0:25:3c:d5:fd:
7c:15:9e:08:23:e3:53:51:f2:96:1b:c8:bd:87:b3:88:d6:15:
bd:2a:d3:58:46:07:84:3b:76:5a:ed:a3:69:c7:f1:24:53:f1:
dc:8c:5d:99:0a:f9:75:bd:18:53:c7:3e:b1:cf:91:56:ff:33:
c5:88:20:fa:84:87:f5:a8:16:42:28:e0:5a:69:2d:ed:eb:ea:
97:05:9a:da:7f:cc:1a:69:ee:39:ce:70:0b:2c:f6:16:be:35:
4e:45:d1:4b:41:dc:27:74:25:30:d2:ff:26:1d:a1:f6:a7:63:
77:38:40:f2:52:d7:6d:5c:d3:89:ee:e7:11:33:c7:be:47:68:
7d:38:eb:4a:b2:1a:bf:4c:bd:d0:c2:ed:f5:61:59:1a:86:9e:
a1:36:ec:69:82:51:a6:6b:8e:e4:a3:34:52:4d:38:ea:3e:76:
5e:6e:d3:33:9a:58:3d:e8:43:fe:d4:7c:47:97:cc:d1:60:d4:
e6:dc:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:26 2025 by rpki-client