Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer
File: 3A9605B2DF9025F5056C61296B879441CB6D80F9.cer (raw, json)
Hash identifier: z9KGSU+Z5AdOCAgItptvOVrn+DpnrDPIksBHUHjrxvc=
Subject key identifier: 3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 28C079302DA7D6F013921A2598BAB01E0E3B30F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.mft
caRepository: rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 06 Mar 2025 09:30:14 +0000
Certificate not after: Thu 05 Mar 2026 09:35:14 +0000
Subordinate resources: AS: 268528
IP: 45.162.216.0/22
IP: 2804:5298::/32
Validation: Failed, certificate revoked on Wed 23 Apr 2025 05:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c0:79:30:2d:a7:d6:f0:13:92:1a:25:98:ba:b0:1e:0e:3b:30:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 6 09:30:14 2025 GMT
Not After : Mar 5 09:35:14 2026 GMT
Subject: CN=3A9605B2DF9025F5056C61296B879441CB6D80F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:41:8d:eb:38:68:30:68:65:67:bb:ea:b8:
54:ae:bf:2c:e9:d9:e5:b1:80:9c:60:3c:da:52:c3:
cd:06:66:8e:4c:1c:0e:73:b3:c9:ba:ca:a5:99:dd:
fc:4e:f5:02:4c:57:35:1c:4b:d1:d2:51:f3:f6:ad:
94:1d:16:ad:42:ba:b6:c6:5c:a5:69:e7:47:0d:b7:
70:ab:79:ca:8a:98:d1:e2:33:91:ce:70:0d:12:75:
4b:c8:ee:0a:e1:6a:43:0d:84:f0:91:de:ee:23:8f:
6e:f1:19:60:7e:16:82:1d:53:db:42:34:c9:81:e5:
21:48:69:de:0f:2f:51:a3:b5:b4:0f:80:e5:e4:11:
1a:62:96:86:3f:d3:31:36:b1:ee:8b:cd:9f:7f:5e:
8e:78:d8:ae:92:55:c9:73:bb:15:85:53:64:b0:b9:
13:be:73:ab:2f:5c:8b:0a:d8:0c:f6:02:d3:30:fe:
b3:0f:9d:0f:79:bd:d1:47:f6:17:31:15:3f:67:1f:
78:f2:6e:09:a2:6e:72:8d:af:74:01:88:6b:42:df:
e9:a1:79:e3:d1:7f:6d:ce:d8:39:fe:83:a2:0a:09:
84:24:23:79:b6:42:b9:b8:c3:4f:a7:7c:aa:f4:d8:
9b:ad:69:7a:b8:4d:2d:ee:e8:5b:23:a8:06:5c:ce:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.216.0/22
IPv6:
2804:5298::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268528
Signature Algorithm: sha256WithRSAEncryption
58:04:7e:28:d6:61:88:cd:2d:14:74:86:8a:12:51:1b:24:21:
62:ef:8e:32:1d:d0:38:a9:9e:ad:fb:55:0c:34:e9:7d:91:19:
a4:4c:22:d5:31:d6:f9:5f:78:24:f5:72:91:74:f1:66:31:5c:
fe:be:55:a0:8f:bf:ee:62:78:b0:30:b8:6a:89:a0:25:fd:a2:
f4:0d:67:b2:ee:4b:34:d0:87:81:0a:72:b1:be:85:e4:4b:29:
21:71:70:b3:97:7e:4d:c9:69:ad:38:07:52:5d:15:98:ca:52:
38:05:ee:25:5d:a0:5f:ca:62:21:ae:69:3d:c6:9b:7a:d8:0e:
5f:ca:75:7d:41:8b:09:18:0c:78:ab:83:e4:2d:6c:91:30:a0:
ed:48:7e:fe:7b:9a:66:0d:f9:e7:f0:fc:bd:9b:38:1a:36:30:
f7:d8:92:da:60:36:a1:72:eb:a4:68:53:c1:37:a5:51:a5:f6:
fd:95:0e:07:cf:d7:a5:88:a8:c5:3d:04:c7:62:46:7f:c3:06:
93:65:f9:c6:8a:4d:b0:19:dc:9f:37:c5:8a:c8:49:46:2a:01:
bf:e9:ad:96:07:f4:05:a7:1b:db:57:bf:85:86:80:43:4b:d6:
88:6f:28:65:d4:a1:65:8b:10:d9:30:0d:a7:4e:30:da:a4:58:
a9:15:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:24:02 2025 by rpki-client