Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
File: D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer (raw, json)
Hash identifier: TuXcv5/yZwLUfRF/pukQlxmK9xs2y2Byb5Tpo8c/n10=
Subject key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 16A223B870031DE2A354EBAA6060FD0B313408FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
caRepository: rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Mar 2025 18:36:39 +0000
Certificate not after: Wed 04 Mar 2026 18:41:39 +0000
Subordinate resources: AS: 268446
IP: 45.161.16.0/22
IP: 2804:5158::/32
Validation: Failed, certificate revoked on Fri 13 Jun 2025 17:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a2:23:b8:70:03:1d:e2:a3:54:eb:aa:60:60:fd:0b:31:34:08:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 5 18:36:39 2025 GMT
Not After : Mar 4 18:41:39 2026 GMT
Subject: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c5:28:33:87:4e:ae:93:f5:aa:a8:f8:9d:62:
f1:41:6c:cd:a7:3f:ea:7c:0d:69:49:4c:e3:f8:2f:
c1:41:cd:ed:61:48:23:62:ef:94:7b:43:99:6d:92:
9b:55:26:fc:23:c6:3b:57:7a:60:ee:b3:ce:3f:89:
99:94:9a:58:ba:05:21:ca:51:fd:24:1b:c2:c5:cc:
48:7b:82:82:05:b8:a6:0e:c9:b2:c5:7b:60:3a:07:
77:24:5f:53:d5:a1:d5:ed:ac:b5:da:3b:38:29:65:
98:2c:10:ca:cf:bf:4a:00:d4:a8:cb:51:40:a8:b3:
90:e2:eb:d7:6c:cd:d9:7d:2b:8d:4e:3b:16:b8:1d:
02:83:6a:fe:e8:40:44:c8:e5:df:9e:a2:2d:04:f8:
2a:6c:87:65:5c:fd:92:ac:7d:fc:c0:b9:70:5f:cd:
c0:3a:c3:3d:60:bc:41:f0:6b:67:68:8b:66:79:36:
5e:8b:37:b5:4f:cf:1d:d6:6b:02:fd:7f:d9:e3:22:
59:54:86:9a:73:e4:a7:7a:c2:b6:ff:63:ee:61:71:
e6:5a:85:22:9a:a1:05:17:76:9d:e2:cc:d1:e6:2f:
86:54:2e:52:e3:36:05:75:53:ab:8a:22:f6:8a:c0:
7e:85:b3:79:5d:5a:b8:b0:ae:1a:8e:cd:92:62:a9:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.16.0/22
IPv6:
2804:5158::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268446
Signature Algorithm: sha256WithRSAEncryption
7d:22:06:97:5a:c7:52:72:51:b3:8c:9a:95:ba:3d:db:9e:f7:
19:9a:6e:7b:78:fb:bb:e5:b5:82:8f:af:28:f8:7e:d0:af:68:
c7:16:4b:81:7b:a7:53:e4:13:25:56:c0:d4:29:d0:d7:2f:db:
66:0e:69:fc:b0:b4:44:a6:18:8b:97:4b:25:9c:23:04:93:1b:
0f:7c:a9:d6:ca:81:17:a2:e9:d1:7f:ec:4e:63:f6:e8:3e:2e:
e3:0b:9a:17:a3:58:38:7b:12:fb:f8:b1:8b:04:28:6a:72:99:
62:3f:b8:c9:18:58:b6:2e:04:08:30:76:1b:26:e1:a4:97:3b:
4f:71:62:10:0b:96:55:b5:bf:fd:71:71:37:67:62:88:2e:d9:
b9:eb:c9:13:b4:ce:a5:c4:aa:0f:18:f6:65:99:20:e2:36:24:
b1:2e:8e:ea:2b:34:73:51:13:8e:36:b0:aa:29:a3:50:ca:b1:
e2:29:d8:cc:2b:a3:a1:d8:10:4a:c0:44:11:18:74:ba:9e:53:
01:7a:7f:1a:b5:21:94:c4:c8:1d:fa:ef:c2:37:4a:4a:eb:23:
eb:de:4b:57:02:3d:44:1f:2e:fb:7e:84:7c:62:26:96:f5:82:
10:78:6f:d6:df:34:e2:7e:20:4d:d3:c3:a0:b7:30:89:38:ac:
61:81:c6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:08:13 2025 by rpki-client