Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
File: FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer (raw, json)
Hash identifier: CufLWkjqGwZMi9Dehd3t20QBZ4GXRIz0MUNpQP6im8U=
Subject key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5CFE54D231BC19A73B7C6E4181DB04C22D99ABDF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.mft
caRepository: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 02 Feb 2025 14:56:40 +0000
Certificate not after: Sun 01 Feb 2026 15:01:40 +0000
Subordinate resources: AS: 267216
IP: 45.231.172.0/22
IP: 2804:4a10::/32
Validation: Failed, certificate revoked on Fri 07 Mar 2025 10:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:fe:54:d2:31:bc:19:a7:3b:7c:6e:41:81:db:04:c2:2d:99:ab:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 2 14:56:40 2025 GMT
Not After : Feb 1 15:01:40 2026 GMT
Subject: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:62:8a:06:fd:88:ee:6b:cf:37:6a:b0:0a:
9f:3e:0b:4c:23:3e:70:ca:31:fd:c2:05:82:5b:47:
6f:a0:98:95:c9:6e:0f:88:0e:dc:40:f7:8a:54:97:
2b:04:95:08:c1:2e:a6:69:e1:2a:5e:0d:b7:ed:33:
35:63:1e:b3:ac:01:c9:87:a5:b8:e7:06:4e:96:fa:
3e:48:2d:75:fc:62:e5:d4:c4:65:a9:75:9f:73:df:
91:a5:6f:ff:9b:14:51:63:03:dd:98:ae:3d:84:f9:
ec:7d:ed:b9:51:0a:06:d9:2e:ff:97:e6:54:13:17:
92:b2:0f:aa:73:6a:ff:09:c6:ec:28:cc:0c:db:7b:
e4:30:1e:73:b4:90:7d:2b:22:0c:de:f5:17:d7:92:
47:f4:4d:bf:10:ff:dc:93:9c:41:13:3c:a0:f9:50:
e8:86:95:cb:c1:22:ad:b0:74:7e:64:3b:ae:63:7b:
d3:43:f3:08:b4:7b:0e:b0:72:ad:0a:f4:d3:79:03:
4a:90:87:fd:9b:8b:df:7a:16:3d:ec:b8:1f:42:89:
7b:89:29:94:71:7e:63:c0:e9:06:ff:1c:78:eb:55:
4d:ba:b2:ed:75:7d:ad:0b:95:c4:24:97:55:5f:50:
38:fc:9c:13:61:01:28:93:87:27:4b:c5:cc:bd:c9:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.172.0/22
IPv6:
2804:4a10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267216
Signature Algorithm: sha256WithRSAEncryption
77:21:89:b6:49:a9:4f:56:1a:0b:57:1c:90:b8:36:82:a2:50:
77:b6:ca:07:3c:c5:aa:f3:9e:9f:0d:4f:62:63:69:18:a5:62:
22:19:d0:e8:89:b9:e8:d9:1d:65:30:8f:5c:65:c0:bc:43:20:
dc:90:5e:bc:29:51:48:b0:0d:c0:79:7e:21:69:1f:94:44:d3:
2c:4d:83:73:21:84:b1:be:6e:aa:a6:5e:aa:9a:a5:57:3f:2f:
2a:99:63:1a:43:f3:8c:b6:69:1e:aa:af:51:61:3b:3c:2d:60:
56:3c:da:29:5e:f6:14:ea:f9:72:9c:0f:2f:12:38:e6:0e:93:
44:82:09:3f:2c:d9:5a:d7:0e:e6:3f:f4:29:cd:5c:d1:6f:a1:
8e:da:73:87:45:68:1a:4a:ac:9e:f1:98:32:08:7c:d9:17:f5:
1a:af:49:ab:60:dd:49:df:aa:d0:3c:d1:99:fc:d9:8a:10:b2:
89:44:c7:33:28:d5:aa:7f:03:5e:8d:c9:df:6d:e2:c9:9c:1c:
24:9a:8f:b3:2e:ea:2c:3a:2b:23:10:76:52:f1:d1:c7:cc:5b:
20:da:48:cf:61:e0:2b:61:7d:a1:37:89:03:23:1b:2d:b0:ca:
5f:9d:7f:a3:fa:2a:36:79:21:cb:d3:5b:10:a3:d9:04:ce:18:
62:aa:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:09 2025 by rpki-client