Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA264193DBA14B087B35BEAC6C81BF37B91B8D01.cer
File: AA264193DBA14B087B35BEAC6C81BF37B91B8D01.cer (raw, json)
Hash identifier: NGJEUzxGgsqK/I6FUkuqkSLuH2VEkAZyCgJ1at5EQ6M=
Subject key identifier: AA:26:41:93:DB:A1:4B:08:7B:35:BE:AC:6C:81:BF:37:B9:1B:8D:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 082CE6375BABB7E049FFFF1894043BCAA185701C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/1/AA264193DBA14B087B35BEAC6C81BF37B91B8D01.mft
caRepository: rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 24 Jan 2025 14:44:10 +0000
Certificate not after: Fri 23 Jan 2026 14:49:10 +0000
Subordinate resources: AS: 52641
IP: 177.125.132.0/22
IP: 201.55.204.0/22
IP: 2804:191c::/32
Validation: Failed, certificate revoked on Fri 24 Jan 2025 15:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:2c:e6:37:5b:ab:b7:e0:49:ff:ff:18:94:04:3b:ca:a1:85:70:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 24 14:44:10 2025 GMT
Not After : Jan 23 14:49:10 2026 GMT
Subject: CN=AA264193DBA14B087B35BEAC6C81BF37B91B8D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:f5:3e:d9:a8:11:7e:84:57:85:84:75:c4:
6b:f7:d9:61:22:b5:56:5f:e8:db:86:07:dc:e9:87:
01:5f:31:a6:1c:5f:77:50:a6:f9:fc:15:53:14:69:
89:89:80:44:5d:d1:d2:25:79:cc:8c:44:d6:17:87:
43:0e:ba:0d:f0:1d:e4:c5:b3:9a:ed:1e:c0:82:d2:
63:5d:33:9b:a3:f8:28:6b:8a:ca:80:89:9e:0e:3d:
75:07:fc:6d:0f:cf:4b:c7:8b:f5:bb:5c:da:19:b1:
a9:60:ae:54:58:63:be:c2:01:18:bd:84:55:a1:be:
e3:09:0e:85:c7:7a:2a:cb:e2:f9:7c:6a:d4:4b:e6:
7b:6f:ce:0c:5c:a1:88:2d:18:71:63:65:2a:57:a6:
f2:7d:8b:c7:f0:0d:8d:f1:e6:5a:88:a1:cd:00:d6:
be:0a:24:d3:3f:1e:c1:9f:42:e8:78:9f:ca:42:b9:
0a:96:29:6f:f4:99:9d:96:20:33:5b:9e:a7:51:8f:
b7:45:a8:16:72:29:85:e6:d5:2d:a8:c6:5b:77:77:
ae:d5:b8:ea:74:a1:32:35:ef:19:37:05:9c:e7:1c:
79:09:61:f0:dc:4a:7c:ff:e1:e6:2a:41:e2:4b:36:
ec:9c:e6:6e:ac:fb:01:4b:b0:0b:c9:5d:b1:be:12:
74:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AA:26:41:93:DB:A1:4B:08:7B:35:BE:AC:6C:81:BF:37:B9:1B:8D:01
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/1/AA264193DBA14B087B35BEAC6C81BF37B91B8D01.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.132.0/22
201.55.204.0/22
IPv6:
2804:191c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52641
Signature Algorithm: sha256WithRSAEncryption
8f:20:d6:11:99:40:80:70:bd:e0:97:ce:d2:05:98:e2:a0:1d:
0f:a4:7a:90:46:ce:ed:c7:6a:aa:06:c4:a6:3c:03:54:30:fa:
c1:ba:b0:93:47:c2:d6:cc:c1:4e:04:59:2b:14:9c:c6:2d:1f:
00:60:35:91:df:a3:b4:9d:5a:f5:35:87:7b:d0:51:3a:a1:e9:
25:00:72:ba:43:a6:ca:de:8f:21:9b:a0:49:f7:9c:2c:96:49:
00:9d:27:fe:36:1c:83:ef:27:37:3a:95:6d:c8:36:08:1c:a3:
e4:4a:3b:6d:e6:ec:89:53:45:30:e1:56:c4:13:98:ee:15:f9:
cf:c4:37:82:64:00:58:a6:f6:a9:67:97:02:0d:08:24:f8:e3:
fb:61:21:f3:1f:ac:a1:b1:fe:78:2f:d4:e5:57:4b:41:df:9f:
a9:a6:37:5b:72:c3:d9:53:04:8a:66:41:a0:6a:ba:f4:63:6f:
84:5b:3d:47:09:77:c7:f7:bf:dc:30:93:25:8b:2b:5a:cc:02:
d4:af:78:a0:8b:46:a5:27:72:90:85:76:05:ca:78:66:c0:6e:
c2:c3:6d:ac:2a:07:a8:a2:f9:89:ec:19:7d:1d:7a:29:2b:34:
2c:d7:6a:5f:b2:d6:35:47:0f:ac:b9:d8:ac:de:25:1d:8c:77:
d0:87:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:04 2025 by rpki-client