Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
File: 767F272B321E8F16F6202C66AA9057CC10E66ECA.cer (raw, json)
Hash identifier: nrN1BTHEGPypfBwoVdwa782ZF4ErBS51r9eZBZqfTAM=
Subject key identifier: 76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7D8076B3D5A2F67FEE1B1BC870A2A0EDCD16FAC7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft
caRepository: rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 21 Feb 2025 13:45:14 +0000
Certificate not after: Fri 20 Feb 2026 13:50:14 +0000
Subordinate resources: AS: 53225
IP: 177.137.16.0/20
IP: 186.251.128.0/20
IP: 2804:644::/32
Validation: Failed, certificate revoked on Tue 22 Apr 2025 16:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:80:76:b3:d5:a2:f6:7f:ee:1b:1b:c8:70:a2:a0:ed:cd:16:fa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 21 13:45:14 2025 GMT
Not After : Feb 20 13:50:14 2026 GMT
Subject: CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:d7:24:88:69:5c:e0:ff:f2:8a:50:db:89:
0f:78:52:fd:1d:a6:7b:a7:2f:74:70:c0:0a:57:ff:
f1:b0:ef:b0:5b:f4:b5:04:4f:03:1c:53:28:8f:21:
e3:bc:c8:e8:29:36:c8:0c:85:b4:03:a1:3f:ec:86:
5f:e3:ef:9d:cc:e3:37:69:fb:d2:b8:1b:2e:a7:4e:
d5:4b:76:55:b1:41:c4:ce:50:38:b4:73:18:92:09:
2b:2c:d9:b2:41:a3:01:6d:e6:db:5b:f2:8e:fb:0c:
fd:69:21:3b:d4:2e:fe:07:f4:b1:90:d3:10:be:d0:
d8:8d:97:02:61:6e:8d:9e:8f:cb:19:c5:35:07:85:
2e:35:3b:25:e3:27:a0:88:d5:08:2e:00:09:fd:05:
84:c7:10:28:34:45:5f:34:65:20:07:e8:40:93:e8:
d7:38:a8:66:cb:20:74:15:6d:14:fb:cd:0c:15:77:
0e:0c:4d:fe:fa:04:f0:80:50:f6:51:91:35:fa:5a:
48:bd:7f:60:78:bc:51:b1:d6:f2:55:c7:d6:d3:09:
33:0a:d4:5c:dd:90:5c:36:ad:e0:a4:37:b9:76:9b:
8c:37:2b:03:e3:ed:53:1e:92:64:93:b3:58:27:71:
98:9c:1e:96:6c:b6:ac:84:27:b0:c0:46:fd:cb:69:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.16.0/20
186.251.128.0/20
IPv6:
2804:644::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53225
Signature Algorithm: sha256WithRSAEncryption
97:de:9d:2a:9b:35:de:38:df:06:59:d0:f6:6a:79:ae:91:ca:
ec:b4:29:07:08:32:e6:8f:3c:70:a3:fc:2f:91:51:b5:13:97:
34:9f:b7:2b:9d:4f:86:c5:61:23:56:d1:87:00:f0:28:a5:9c:
68:3f:b2:6e:db:3b:1e:be:ca:55:82:08:d0:40:af:a3:17:bf:
75:fe:43:a8:a5:7f:80:eb:54:f2:2a:60:67:1c:39:94:66:94:
1c:10:7f:49:51:56:49:45:30:ad:81:31:13:2f:65:56:44:c5:
39:4e:bf:5b:29:38:4f:65:74:5a:22:85:97:2d:56:eb:f9:b1:
c3:86:12:62:7f:f7:df:18:ac:87:8b:0a:1c:8a:05:34:4f:c1:
b9:4b:48:c1:e7:f5:70:b7:04:a5:aa:6e:24:e0:2b:f4:9b:d1:
d7:44:dd:dc:6d:a7:8e:73:4b:8a:44:a5:6b:73:0e:c5:00:f1:
10:71:0a:a5:e4:d5:fc:6d:c0:d1:f0:4a:b9:80:4d:d2:4e:f4:
3d:7c:92:e9:60:a4:b2:2a:e9:da:7c:7b:57:fc:8f:68:cb:62:
22:b2:96:e1:13:aa:25:8e:fb:81:7f:06:cf:22:f0:9f:0b:33:
e4:08:bb:d8:17:d3:e7:ee:19:4f:64:20:f1:8e:b0:ba:0f:59:
7a:29:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:26 2025 by rpki-client