Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6.cer
File: FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6.cer (raw, json)
Hash identifier: +xNFJtGFw8aHzyjpYUAbj7ZX75ss6u6eBFa9ipZL7gk=
Subject key identifier: FE:8B:1C:C2:05:65:AA:F3:44:9D:BB:55:AF:3C:8D:50:6A:AB:18:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 640F1E5AE6D0D8517DB5803CBEDD8D43563EF12A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6.mft
caRepository: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 25 Feb 2025 00:49:35 +0000
Certificate not after: Tue 24 Feb 2026 00:54:35 +0000
Subordinate resources: AS: 61882
IP: 131.0.48.0/22
IP: 2804:1abc::/32
Validation: Failed, certificate revoked on Mon 17 Mar 2025 21:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0f:1e:5a:e6:d0:d8:51:7d:b5:80:3c:be:dd:8d:43:56:3e:f1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 25 00:49:35 2025 GMT
Not After : Feb 24 00:54:35 2026 GMT
Subject: CN=FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:ab:89:cc:91:80:2d:71:d9:e3:dd:7b:f5:
02:f1:f1:65:46:dd:a2:d8:dd:7a:86:ab:c0:65:dc:
a8:27:e3:86:5c:51:27:75:26:5d:6e:e0:37:8a:36:
41:47:b2:c5:9e:4f:70:0a:cc:71:5a:f2:ea:b4:92:
e6:18:09:d6:2e:5d:01:6b:8b:48:06:14:bf:09:a7:
b1:b2:f3:1c:9f:27:50:7b:6b:e0:ba:3c:1c:1d:6c:
41:3f:cb:46:a5:eb:5e:f5:b5:eb:5b:20:d4:31:a5:
ac:92:ee:96:8c:53:75:bc:22:10:21:2d:9e:d6:1e:
b8:a4:e7:77:d5:0a:c8:b2:04:ae:70:85:b3:3a:80:
52:ee:ba:83:37:fb:b9:bd:31:52:8f:62:fe:9f:2c:
08:61:05:c6:a2:5a:8a:9c:41:62:73:53:ad:cd:dc:
00:52:5a:ef:73:d3:2d:0d:0d:d2:ed:72:0e:5a:a6:
57:d8:f1:51:a2:6c:dc:d4:18:80:ff:65:28:00:16:
0c:a4:5f:ae:c7:8b:83:b4:12:fd:56:ef:ed:6e:dd:
94:61:b1:38:5c:6b:73:4d:eb:38:d9:e2:11:88:75:
89:4f:e3:16:d9:5d:8e:aa:25:8b:50:97:4a:1e:ec:
cc:ac:79:c1:5d:b1:dc:64:4c:ce:d2:70:e6:b7:05:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FE:8B:1C:C2:05:65:AA:F3:44:9D:BB:55:AF:3C:8D:50:6A:AB:18:F6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.48.0/22
IPv6:
2804:1abc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61882
Signature Algorithm: sha256WithRSAEncryption
16:50:69:1e:a9:35:8d:4b:91:a7:0c:ab:df:37:bd:1b:0c:69:
68:c3:9b:eb:3d:e6:ee:90:f1:82:19:75:23:d0:77:da:a3:cb:
d7:11:70:d9:20:46:1d:8f:5c:82:ef:29:33:3b:ad:ee:e5:cd:
7f:26:86:4c:0e:e0:df:c7:5c:61:e7:09:90:17:23:f6:cc:80:
6e:77:e9:f5:6f:db:cd:60:d0:e4:2b:fa:0b:cc:4a:7a:4d:37:
8e:4b:ff:9e:bb:5d:e9:6b:20:4e:76:87:18:e0:6c:8a:47:56:
fc:f3:e8:2a:14:df:d9:4f:26:6d:75:79:0f:52:31:e4:e2:65:
b0:08:65:8d:dd:8c:10:f1:30:ad:80:76:ee:49:2b:3b:ea:2d:
43:9b:25:38:4c:17:69:7f:5f:0e:1e:84:cc:ec:c1:31:22:63:
89:6e:5b:e2:98:ae:cd:e3:32:0a:9e:d2:72:ea:15:12:c7:66:
3c:d1:b7:16:ae:12:cc:f2:9b:cc:a2:db:85:97:10:39:18:f0:
5e:df:f0:1c:6d:c2:e7:ca:18:c4:bf:c4:ab:e5:63:8e:e8:a8:
ea:bf:f9:40:35:14:cd:48:3d:85:d3:89:8b:52:3a:ac:e7:d4:
5f:fc:28:cf:74:4a:fa:80:2f:c4:23:e7:6a:01:29:7b:9d:f6:
c4:5f:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:42 2025 by rpki-client