Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
File: 21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer (raw, json)
Hash identifier: x2y6/yfMsdhhIwje036Fdh1V2+YITGJzoDohb956txA=
Subject key identifier: 21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5A25FAD10AA4988531E7DEFD4D97EF9F903C8599
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
caRepository: rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 06 Nov 2024 20:41:57 +0000
Certificate not after: Wed 05 Nov 2025 20:46:57 +0000
Subordinate resources: AS: 262316
IP: 131.221.200.0/22
IP: 138.117.192.0/22
IP: 167.250.152.0/22
IP: 177.74.64.0/20
IP: 177.124.48.0/22
IP: 2804:7c0::/32
Validation: Failed, certificate revoked on Wed 16 Apr 2025 13:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:25:fa:d1:0a:a4:98:85:31:e7:de:fd:4d:97:ef:9f:90:3c:85:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 6 20:41:57 2024 GMT
Not After : Nov 5 20:46:57 2025 GMT
Subject: CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:b7:2b:c4:e2:2c:80:da:cb:4d:a4:1d:f9:
5b:47:6d:92:09:4c:c7:4f:70:01:94:e9:d9:72:bf:
f1:d4:26:e8:09:fc:c0:99:9f:67:0e:c5:4a:96:37:
43:be:af:e0:52:6b:97:10:4a:9d:f4:07:a2:83:39:
9f:72:09:62:2e:09:9e:c1:82:e8:f1:a6:33:8e:08:
55:2f:a4:47:1d:4d:db:eb:28:a5:85:d5:5d:c0:cf:
2e:33:af:15:41:a2:7e:bc:af:c4:3b:3b:f2:e4:88:
ec:d5:f7:a5:21:fd:63:1b:11:05:0f:a3:1b:55:45:
c2:f6:15:37:b8:60:58:03:60:c8:cc:93:77:2c:0b:
aa:ed:a5:55:32:63:d1:bf:fe:07:26:b9:a2:2f:5b:
99:0c:8f:a0:89:17:be:c5:91:44:5b:13:f8:4a:c6:
76:6e:7f:24:71:e8:6e:ee:b3:d7:ec:50:27:d0:72:
81:04:25:9f:70:d6:09:d4:a9:dc:f2:98:b4:69:05:
d2:01:8d:32:ee:33:dc:14:40:15:24:8f:5b:b7:54:
01:00:69:ee:a4:65:33:fc:af:52:25:7c:bd:57:2c:
61:a1:8d:b3:76:1e:02:14:d9:94:b1:0e:26:59:64:
48:ec:33:05:c3:4f:0c:25:1d:c9:7f:c5:53:57:07:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.200.0/22
138.117.192.0/22
167.250.152.0/22
177.74.64.0/20
177.124.48.0/22
IPv6:
2804:7c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262316
Signature Algorithm: sha256WithRSAEncryption
b1:34:56:ae:f0:63:b2:36:af:01:14:1e:fe:1b:3e:77:d9:13:
02:34:9a:92:73:09:28:d9:2c:d3:ba:84:b0:54:ad:b6:93:41:
17:de:5d:1b:6d:89:92:c8:ef:b8:46:a9:9e:cc:72:64:2c:52:
1d:c8:b8:a1:40:06:c0:b3:dd:a9:c1:90:bd:ae:9e:04:a8:7f:
0c:c4:a5:71:52:f4:07:0e:8f:c7:95:bb:9b:a3:61:40:cd:c1:
84:3c:7e:7d:58:72:b4:c4:3a:f6:fa:40:75:cf:45:86:a8:a8:
28:d5:08:42:42:d8:02:59:2c:07:4f:10:a5:92:fa:71:32:7b:
d7:fe:01:59:d9:5b:09:0e:1e:e2:d9:48:02:28:6f:78:d6:a6:
72:a5:e9:a1:a0:98:b1:c4:80:83:20:c0:36:61:b0:7d:ce:77:
8b:73:15:ed:bc:49:1b:3e:91:b1:7b:d4:d0:1c:64:01:e7:8f:
5d:42:62:e3:01:4c:35:ca:3d:4f:4b:72:2f:ff:62:fa:89:c4:
d1:50:4e:65:61:ce:f3:e0:2a:91:3b:29:03:18:e5:eb:d9:3d:
34:1e:89:f0:26:67:29:e4:ad:89:57:33:b3:e8:1e:24:c0:a9:
0e:07:1c:ab:17:96:c3:36:01:06:df:9b:23:4b:39:6c:24:f8:
0e:bf:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:22 2025 by rpki-client on console.sobornost.net