Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
File: 8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer (raw, json)
Hash identifier: 2MeTapCFesDqizFRW3NPmSeoGNSq4f/WIUDGGXzm7sM=
Subject key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 70A80322044FCE1E1830EA89119B11CE87381520
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
caRepository: rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 06 Mar 2025 23:01:13 +0000
Certificate not after: Thu 05 Mar 2026 23:06:13 +0000
Subordinate resources: AS: 271017
IP: 200.219.0.0/22
IP: 2804:7500::/32
Validation: Failed, certificate revoked on Sun 23 Mar 2025 14:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a8:03:22:04:4f:ce:1e:18:30:ea:89:11:9b:11:ce:87:38:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 6 23:01:13 2025 GMT
Not After : Mar 5 23:06:13 2026 GMT
Subject: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:7f:5d:bd:e4:5b:90:b2:e9:63:f3:d8:0d:
de:f4:23:be:77:48:a3:50:86:c5:6c:2a:66:f9:63:
a0:cc:c9:98:e6:d0:62:57:44:cd:b7:20:b3:ef:d1:
11:cf:d1:2e:4f:2d:19:39:6c:b9:71:f4:f9:1f:48:
14:88:af:f4:d5:48:8b:24:f6:7d:b9:c5:d5:b0:6f:
50:5b:87:87:24:28:cc:82:b9:22:8b:8f:99:dc:ea:
82:69:f6:df:ca:a5:eb:a2:5d:7b:57:82:c9:7c:6d:
33:5d:f0:20:81:11:88:a0:c2:ad:7c:56:90:f3:bf:
57:95:e8:4d:82:5d:62:4d:97:b7:0b:6e:ba:02:19:
7e:58:77:b6:8c:ac:d0:73:5c:09:8d:f6:41:9b:0b:
1b:d5:21:fe:cf:33:87:b6:70:4d:ec:dc:84:6e:14:
96:7a:19:0f:cb:4a:64:ff:d7:82:e0:94:41:29:e8:
e4:a2:15:ce:56:3f:ee:26:dc:e6:10:9d:79:5d:32:
0d:9e:57:ea:85:6e:93:dc:1a:70:e5:df:07:89:f1:
1d:d5:4f:64:90:b3:28:80:a8:a6:c2:77:28:23:25:
da:c6:a2:9d:5b:23:96:a7:17:fc:84:2b:2b:e8:a1:
8c:a4:42:84:1e:cd:e8:63:5f:59:b3:af:e6:82:c6:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.0.0/22
IPv6:
2804:7500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271017
Signature Algorithm: sha256WithRSAEncryption
cd:e5:b1:82:4d:64:fb:33:73:7c:b5:c7:d8:2f:84:e4:cb:1f:
a6:5c:85:db:36:10:c1:fb:e8:05:5d:df:b4:c7:39:01:ef:1f:
fa:93:9c:60:33:87:32:38:26:96:5d:2a:a9:25:59:6c:76:48:
b6:70:f3:3d:77:5d:8c:60:68:24:c9:be:88:de:dc:c8:37:2e:
61:ce:6c:37:91:3c:3f:18:b4:b8:7d:91:27:dc:56:af:23:21:
8d:2d:5b:f6:e3:6a:a3:47:d2:e1:1a:de:5c:35:c6:26:b4:a8:
3e:c2:61:71:a5:52:1b:9c:3f:20:1d:1a:df:70:af:fa:ba:e6:
24:09:11:de:a4:0b:19:5b:d7:7b:85:54:57:11:44:3d:81:bb:
17:57:ab:56:26:23:e7:3b:61:7e:e8:76:a9:65:7b:7f:61:d1:
cf:a8:f1:ed:7a:9b:37:35:90:b7:d3:4b:5c:05:5d:75:28:c3:
ba:49:c9:99:e5:99:93:1c:43:e7:18:12:b7:8b:64:2a:f6:e6:
28:e7:07:c6:1c:a2:db:b0:57:00:e5:56:00:67:49:b1:7e:a3:
a1:b0:18:07:96:35:47:94:8a:f6:a0:14:b2:77:3d:b0:4d:8c:
18:d7:9a:7a:13:69:e6:00:8c:44:90:0b:cd:4a:9f:8f:56:80:
65:22:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:59:04 2025 by rpki-client