Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FE440F56233EEEC4627A6AA0E1DFFE3C9ABE3F31.cer
File: FE440F56233EEEC4627A6AA0E1DFFE3C9ABE3F31.cer (raw, json)
Hash identifier: YtE8HmKwk3JHa0LA9D+RCCJRiHulswNcboPH9i3cN/s=
Subject key identifier: FE:44:0F:56:23:3E:EE:C4:62:7A:6A:A0:E1:DF:FE:3C:9A:BE:3F:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4B41523AC5FAB92B5162EE1B7776A050F7B9B622
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/FE440F56233EEEC4627A6AA0E1DFFE3C9ABE3F31.mft
caRepository: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 26 Nov 2024 00:06:52 +0000
Certificate not after: Tue 25 Nov 2025 00:11:52 +0000
Subordinate resources: AS: 264360
IP: 131.161.28.0/22
IP: 138.255.132.0/22
IP: 2804:1d50::/32
Validation: Failed, certificate revoked on Thu 12 Dec 2024 19:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:41:52:3a:c5:fa:b9:2b:51:62:ee:1b:77:76:a0:50:f7:b9:b6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 26 00:06:52 2024 GMT
Not After : Nov 25 00:11:52 2025 GMT
Subject: CN=FE440F56233EEEC4627A6AA0E1DFFE3C9ABE3F31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:ed:5b:55:86:ea:66:a4:76:b0:d3:e5:ee:
fd:ec:f7:6e:eb:9e:df:ca:f8:d5:4a:ba:fa:d1:b5:
97:00:f2:04:51:b0:6d:c1:41:7a:ef:1b:34:b3:dd:
bb:c5:e3:d0:cd:7b:4c:5f:12:bc:1e:74:e1:15:77:
8d:da:b3:f6:8f:a7:6d:8b:78:4f:c5:4b:70:84:a6:
9f:c4:9a:39:a4:88:7d:97:c1:89:f0:ed:b6:46:96:
6f:a7:20:0e:8d:b9:53:95:bf:44:73:3b:b2:02:a7:
22:9b:0f:88:45:d7:a9:cc:d9:be:1e:47:fa:61:ab:
e9:9b:7f:be:67:4e:6c:20:66:e5:76:f5:35:e3:89:
d8:4a:10:2c:6f:8f:b7:dc:c4:a6:6b:36:22:96:3e:
59:4d:e0:34:0c:f2:06:68:6f:9f:e7:98:34:e8:53:
40:04:ae:76:91:5d:23:2d:e9:5d:e5:4d:c3:78:94:
07:33:3a:9d:fd:bc:cb:4f:14:90:f1:4e:61:14:56:
bc:a9:13:ad:ec:60:92:7a:c7:14:22:1e:77:23:24:
9c:4e:6c:b3:76:0d:10:c0:ee:41:1b:30:a6:2e:52:
cb:3d:08:0d:03:1e:6f:97:57:ff:6e:e8:25:d7:91:
37:db:57:4c:ad:6e:b2:b2:df:e4:86:4e:03:86:21:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FE:44:0F:56:23:3E:EE:C4:62:7A:6A:A0:E1:DF:FE:3C:9A:BE:3F:31
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/FE440F56233EEEC4627A6AA0E1DFFE3C9ABE3F31.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.28.0/22
138.255.132.0/22
IPv6:
2804:1d50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264360
Signature Algorithm: sha256WithRSAEncryption
95:06:78:57:bf:a4:79:d1:66:0a:81:c5:d7:9d:06:fd:83:86:
98:9f:8d:34:75:5c:85:ba:82:a5:3f:66:5d:0d:13:73:16:92:
d7:40:69:25:22:d7:82:9d:6d:41:62:3b:52:a7:24:cf:60:d4:
cb:0f:f7:a3:10:60:ff:9b:12:e3:ee:72:04:7b:a4:3b:9e:10:
35:64:44:92:bc:8b:ef:f1:ca:8a:e1:42:40:82:d3:41:c0:e0:
76:37:31:0e:e4:51:d4:62:b9:ce:a6:55:1e:fd:b7:97:66:42:
ef:0f:6f:71:c9:f2:1c:6b:7f:a1:ea:55:e5:d7:e0:56:79:ec:
6f:29:ee:a7:78:80:62:05:c7:25:ed:80:8e:47:1b:41:82:67:
0a:42:e2:b5:1f:dd:89:03:b6:09:d4:b8:a0:a1:1c:b4:63:99:
91:d7:53:3f:65:67:37:92:c4:e2:1e:ca:09:40:eb:65:86:61:
fd:2e:86:f0:bb:3c:f9:71:e6:9b:2e:33:9c:87:2c:23:81:c1:
14:56:8e:dc:61:d0:d7:6e:01:4f:9d:e2:d9:07:eb:2e:ee:7e:
9f:ac:af:5d:bd:1d:f9:23:bf:c8:7f:7c:3b:16:08:85:13:c2:
31:ca:45:db:db:b2:41:ce:53:a6:24:09:1b:7b:9e:06:a2:6a:
0e:b2:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:23 2025 by rpki-client