Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.cer
File: 96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.cer (raw, json)
Hash identifier: zA9MCcbOc0IMwwIsyFMhh5x0u0UK7QZtR1Zdggn4+j0=
Subject key identifier: 96:A1:36:EE:6B:67:D4:BA:C2:6D:97:F4:62:E9:8E:A2:6B:74:AC:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7F703D735ECF44C7D57B0E634CD98430FED7E826
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.mft
caRepository: rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 17 Jan 2025 13:41:30 +0000
Certificate not after: Fri 16 Jan 2026 13:46:30 +0000
Subordinate resources: AS: 28585
IP: 187.87.128.0/20
IP: 2804:7c::/32
Validation: Failed, certificate revoked on Fri 17 Jan 2025 14:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:70:3d:73:5e:cf:44:c7:d5:7b:0e:63:4c:d9:84:30:fe:d7:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 17 13:41:30 2025 GMT
Not After : Jan 16 13:46:30 2026 GMT
Subject: CN=96A136EE6B67D4BAC26D97F462E98EA26B74ACB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:5e:56:d7:f1:a8:51:a2:a4:ac:2e:7c:ef:
92:c9:cb:9e:94:6c:51:bb:0e:15:fa:6d:e2:76:df:
cd:f1:6a:3e:b3:b8:6c:88:b6:f1:db:ac:b6:00:6b:
fc:8b:36:6d:ee:f3:b4:90:25:bc:ed:40:a7:e2:40:
b7:d3:ce:25:3e:7c:6f:96:12:0a:39:08:71:c4:98:
bf:47:88:06:7c:88:78:28:3a:ca:4c:f8:04:c7:b4:
ca:61:22:e6:a2:d0:1c:5d:c9:55:dd:a2:66:48:2b:
b8:7a:b7:6b:06:6c:0e:e5:e6:60:a9:71:a5:0f:aa:
fd:b1:0f:7b:cf:62:d7:c7:4b:60:a8:10:39:fa:2c:
b3:4a:a9:09:ba:9f:19:29:71:ae:af:d5:e8:c2:a4:
b2:b7:39:63:53:2a:55:96:a8:d7:52:de:85:a8:fc:
87:5c:76:69:02:ba:b7:9d:70:1e:73:fc:bf:17:f1:
da:5d:bf:4d:f1:ba:75:e1:7a:92:69:8e:91:27:55:
7a:f1:95:f1:0c:5b:be:88:10:2c:30:e4:46:ca:b7:
16:1d:9b:f6:8b:85:2b:b3:8f:a4:a0:5d:f8:4b:9d:
6e:28:f4:21:17:af:91:0b:7b:bf:5e:2f:99:88:72:
da:d9:90:35:cc:86:fc:1b:d2:e7:22:91:92:5a:c3:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:A1:36:EE:6B:67:D4:BA:C2:6D:97:F4:62:E9:8E:A2:6B:74:AC:B2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.87.128.0/20
IPv6:
2804:7c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28585
Signature Algorithm: sha256WithRSAEncryption
d7:26:fb:c6:e2:0b:48:4b:05:8c:73:59:c7:b2:bf:b8:c9:60:
62:78:65:73:a1:23:74:1c:cb:22:8a:2c:92:72:66:f8:40:65:
83:3d:a1:49:a4:a1:05:b3:d1:46:ff:f1:7d:1b:0d:bb:61:29:
37:c6:9f:9b:90:24:8b:31:17:56:6d:8b:a8:3d:5d:5e:6c:59:
f1:d8:b4:a9:97:45:58:e0:ab:40:4e:d9:23:c5:9b:28:80:a3:
05:3c:8b:9f:30:5b:ea:4c:eb:b3:1d:8d:f8:7b:19:a3:71:c5:
57:db:a1:e1:6b:43:0a:c7:a6:12:04:ca:fc:3c:1a:b8:ca:3b:
79:29:82:e2:8d:6e:e9:e8:5b:0f:8b:f0:55:78:cf:6f:bf:54:
77:f7:ee:a8:73:24:62:7e:fe:15:7d:27:94:00:cb:45:62:a8:
f1:ad:79:d4:b0:e8:b1:05:3a:0e:cc:77:db:2a:a5:e8:fe:fc:
d3:fa:3f:70:08:0c:b0:1d:79:a3:f7:30:a9:97:42:01:b8:46:
aa:02:b7:28:16:2e:b0:a2:ca:37:71:fa:ba:91:a8:47:c7:b4:
c5:ba:46:90:d0:ff:9d:96:2f:76:a3:f6:1f:6f:4d:f7:49:a6:
33:4e:dc:37:59:e5:e7:86:30:8d:44:27:c2:ca:a7:c0:d6:58:
70:5d:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:00 2025 by rpki-client