
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
File: 57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer (raw, json)
Hash identifier: 8L80ZRbG4Y+6R/5QH6fzP6jhnF3YJXJupKwqDAn1dhk=
Subject key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 59E1E850BDAC92FF1727EC49FF15F0AE82EE146E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
caRepository: rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 20 Aug 2024 18:01:25 +0000
Certificate not after: Tue 19 Aug 2025 18:06:25 +0000
Subordinate resources: AS: 28128
IP: 168.195.32.0/22
IP: 187.19.48.0/20
IP: 2804:3458::/32
Validation: Failed, certificate revoked on Sat 01 Mar 2025 19:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e1:e8:50:bd:ac:92:ff:17:27:ec:49:ff:15:f0:ae:82:ee:14:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 20 18:01:25 2024 GMT
Not After : Aug 19 18:06:25 2025 GMT
Subject: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:b9:ab:09:df:39:f9:ac:0a:cc:e2:8a:0c:
96:ba:06:19:35:9a:c4:da:8d:e1:d8:9c:db:c5:59:
be:91:ab:d0:b5:90:9d:ef:96:74:c7:31:ef:c0:0b:
52:21:cb:0f:d9:05:75:0f:50:46:0d:24:b8:0a:b6:
5c:9e:71:05:e1:46:44:3b:17:4d:12:a3:a6:b7:df:
ec:e2:7b:2c:fc:60:47:0f:de:e4:4b:5a:26:ad:7e:
35:aa:45:d9:85:6e:92:bb:08:dd:c4:5d:37:21:61:
46:14:df:05:7b:b9:cb:fc:30:36:39:a9:33:d2:7b:
ba:e3:7e:d2:be:6c:64:6c:0e:94:37:bc:46:37:07:
c6:68:d2:49:d7:95:26:9f:d9:0f:be:94:ec:17:67:
66:ad:a3:ef:a1:ea:76:94:d2:93:9c:b8:63:35:1c:
2f:cc:09:d0:d5:49:92:52:69:1f:50:36:6d:db:bf:
79:d6:4d:5c:38:0f:4c:2f:4a:50:f7:49:ba:ad:73:
41:9a:b8:0c:8e:f4:bd:f6:6f:6f:5d:14:f0:19:e0:
ab:45:64:bd:85:64:b2:a5:c3:39:fe:60:ce:e4:ba:
a0:3e:2f:fc:67:83:cb:45:6e:6a:73:33:32:25:2e:
79:d8:aa:f8:03:eb:dd:a1:b6:56:ab:54:dd:d9:71:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.32.0/22
187.19.48.0/20
IPv6:
2804:3458::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28128
Signature Algorithm: sha256WithRSAEncryption
80:b9:1a:da:e3:0f:f1:3f:70:5c:2e:d1:37:e2:0b:32:6a:14:
b5:73:5b:6f:48:0b:f2:1c:38:f8:c7:74:f0:f8:cd:84:2f:12:
f3:b4:94:c1:38:70:da:6d:0e:2f:a1:f3:68:6b:cf:24:ea:57:
2f:ec:93:24:66:27:16:a6:b3:e4:9b:1c:18:da:87:a5:89:16:
a9:dd:c3:c2:35:bc:33:6e:7d:90:78:1f:5b:68:07:17:bb:90:
d6:6c:6e:b8:b9:f4:e6:92:27:fe:5b:19:58:cc:2a:d4:02:f4:
5b:ec:91:fb:b7:c6:61:36:14:10:9d:dd:3c:a4:44:ce:0f:27:
b0:71:06:3a:aa:27:8b:99:aa:8b:63:c6:64:b3:02:27:ea:74:
f1:bd:c8:ee:13:8d:ce:2b:4a:8c:ba:27:be:07:4c:09:ab:4a:
06:01:38:58:6d:a2:3c:2e:70:fd:bf:6c:5c:3a:bb:25:ee:64:
03:85:6e:6a:e2:73:bb:40:44:40:65:2f:87:63:ac:c9:3e:73:
d2:80:73:33:d1:d1:ca:cd:8a:5b:ef:88:51:10:73:21:a9:7a:
9d:e7:4c:41:33:18:37:67:a4:89:8e:2d:82:c3:17:a4:16:12:
ae:be:8c:9e:7f:4b:a9:16:f5:9e:86:b1:2a:39:a5:5d:73:42:
76:9c:cf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:32:41 2025 by rpki-client