Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.cer
File: 4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.cer (raw, json)
Hash identifier: C+ZsJ2Yepsu/CKK+eX1XakL//DCz13823xXgIhZvQLY=
Subject key identifier: 4E:2A:FD:0A:2B:BA:64:72:89:85:B8:44:3F:C5:00:D9:EF:1D:96:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5F3CB96FB60B578303E811A0E184B1A23AF19046
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.mft
caRepository: rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 31 Dec 2024 11:33:39 +0000
Certificate not after: Tue 30 Dec 2025 11:38:39 +0000
Subordinate resources: AS: 61700
IP: 131.0.112.0/22
IP: 170.78.64.0/22
IP: 2804:1af4::/32
Validation: Failed, certificate revoked on Sat 05 Apr 2025 02:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:3c:b9:6f:b6:0b:57:83:03:e8:11:a0:e1:84:b1:a2:3a:f1:90:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 31 11:33:39 2024 GMT
Not After : Dec 30 11:38:39 2025 GMT
Subject: CN=4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:c0:44:79:ec:57:3e:69:8e:06:da:4a:4a:
35:29:35:97:81:48:4e:9c:42:8f:0d:ba:d8:2a:76:
0f:a4:48:22:69:fd:f8:6d:ce:f2:06:61:29:87:21:
d5:13:8d:ff:84:94:e2:d1:c6:f4:66:24:47:eb:e8:
4c:64:76:46:89:86:66:64:32:a5:65:e5:78:c3:ec:
6b:c6:86:39:fe:b4:41:a5:be:c5:b8:4f:04:e3:c6:
b3:e9:f9:0e:e2:f3:e6:1e:81:e3:20:69:da:60:bd:
af:44:7e:a0:79:2c:81:94:74:5d:c2:04:c5:0b:0a:
94:06:ff:24:b7:6f:43:a6:d0:a2:94:f5:a9:36:64:
7a:5e:1c:ff:5f:07:8e:d7:78:f2:ad:bc:46:f3:88:
19:cd:42:f6:59:e4:cd:c0:fc:85:b9:83:89:a5:82:
4a:27:5c:e7:7d:98:52:81:d8:34:2b:e2:f0:dc:f4:
c5:1f:32:91:57:85:d0:70:c0:5e:39:56:12:02:c3:
4b:58:66:46:ca:a1:f6:21:b8:03:bb:97:f3:bb:cd:
7a:f5:10:80:7a:18:2f:8a:be:15:99:b4:31:66:97:
6d:06:8d:be:8b:69:33:d8:41:5e:69:8f:2b:5a:dd:
73:b5:7a:88:57:d8:7b:35:11:39:42:9b:0e:88:22:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4E:2A:FD:0A:2B:BA:64:72:89:85:B8:44:3F:C5:00:D9:EF:1D:96:FF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.112.0/22
170.78.64.0/22
IPv6:
2804:1af4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61700
Signature Algorithm: sha256WithRSAEncryption
8f:a7:ce:9c:2d:50:01:c2:a9:ca:8d:f9:a0:0c:95:06:65:b6:
aa:6f:2d:3b:b9:a7:c3:4d:20:42:4e:e1:86:a9:7f:d8:15:cb:
f9:ca:9a:93:15:4e:66:8e:02:00:ef:04:3d:60:d2:6e:61:d8:
fd:bc:83:a1:87:1e:81:c8:fa:5a:ae:bc:30:0f:19:8b:7d:49:
0f:38:fe:fc:fc:b4:1b:ee:0c:6f:a0:92:d1:14:dd:42:c3:a1:
ec:b3:30:7c:45:42:6c:18:d7:08:22:56:41:92:16:17:bc:00:
a1:6d:6b:f9:84:33:78:eb:d0:a1:20:4a:2f:4b:0f:5e:5e:9a:
ac:c1:d5:92:9d:c1:0c:d6:1f:c8:bd:9f:90:c2:ed:80:54:58:
36:65:3f:5b:03:33:e9:fd:19:6b:35:80:1a:29:be:07:61:37:
4c:f3:69:80:f5:b8:c0:cd:12:67:54:62:e5:dd:44:7d:dc:44:
f6:4b:2f:24:10:41:38:a0:11:19:c6:6b:27:1a:05:99:d0:e9:
a5:2d:13:0b:7c:16:4b:86:46:f0:49:03:3a:d0:61:27:fb:e2:
a2:43:b8:53:8c:b7:b8:2e:86:df:9f:75:57:0d:50:30:ef:54:
1f:9e:f8:fd:cb:f5:14:19:80:20:37:b9:78:f9:1f:77:f8:2b:
5e:cf:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:58 2025 by rpki-client