
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.cer
File: 528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.cer (raw, json)
Hash identifier: yyGB7SEmgBIGEfZfA8hs6sU7L3cOHb7Khm/tRBIKybI=
Subject key identifier: 52:8B:51:EB:43:72:AB:42:ED:44:6E:A2:B5:E0:AD:21:A6:C6:96:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 799D8F5E6E3CAFDD24A7340F9BFE7F1CBCCD26F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.mft
caRepository: rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 07 Apr 2025 15:03:18 +0000
Certificate not after: Mon 06 Apr 2026 15:08:18 +0000
Subordinate resources: AS: 271657
IP: 45.225.112.0/22
IP: 2804:7ef4::/32
Validation: Failed, certificate revoked on Mon 14 Apr 2025 22:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9d:8f:5e:6e:3c:af:dd:24:a7:34:0f:9b:fe:7f:1c:bc:cd:26:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 7 15:03:18 2025 GMT
Not After : Apr 6 15:08:18 2026 GMT
Subject: CN=528B51EB4372AB42ED446EA2B5E0AD21A6C6968B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:b8:72:e6:b0:57:45:28:16:77:1e:19:70:
1f:4a:8f:14:1b:a2:43:83:fd:b6:16:9c:b7:50:ec:
4a:a7:cc:61:38:5b:4d:9d:2d:de:e7:8e:bb:34:c7:
0a:12:b8:34:22:2a:7a:fd:47:8a:9d:d4:89:18:64:
c8:c5:df:ab:66:cf:32:aa:5d:f7:b0:4d:7d:c6:33:
5f:b2:0e:83:47:6b:3d:85:0e:91:c8:75:75:73:de:
e3:4d:80:ec:01:cf:fd:fe:79:3b:b9:39:52:52:e5:
c4:e8:1b:42:9c:15:b9:0c:73:59:95:65:67:fa:56:
29:e2:6d:2e:0a:c4:7f:b9:01:45:9c:08:11:b5:4d:
09:ea:e9:c5:fd:21:50:91:5b:fc:4d:db:cf:32:1a:
8c:da:2e:68:38:86:e5:21:32:62:b5:69:27:0c:63:
89:70:38:37:a2:f4:b8:43:96:ed:33:4b:26:00:1f:
27:b5:f7:4a:09:ad:3a:0d:63:a6:19:26:1e:30:a2:
09:5f:0a:ed:38:19:1e:df:07:87:d4:21:be:cc:c5:
46:50:b5:56:e1:51:01:8d:a3:08:1e:02:61:f3:f5:
44:2b:5a:66:4e:27:da:84:f6:74:77:28:22:aa:22:
bd:57:63:ed:41:63:61:f5:8b:e7:19:e0:81:51:77:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
52:8B:51:EB:43:72:AB:42:ED:44:6E:A2:B5:E0:AD:21:A6:C6:96:8B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.112.0/22
IPv6:
2804:7ef4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271657
Signature Algorithm: sha256WithRSAEncryption
14:b5:16:3a:19:72:61:0c:d8:ee:d6:72:69:3c:5b:cb:92:f8:
ae:5c:39:2c:88:6f:ad:ba:4c:e0:ac:c0:bb:d7:09:52:5d:cc:
24:9c:c8:e6:72:b3:03:dd:e3:11:fe:80:6a:ab:f9:2b:76:19:
34:c0:e2:ea:20:02:d1:ea:cb:a3:06:f1:73:d5:20:6e:b0:50:
32:6f:34:c3:c6:ac:74:dc:4e:5d:d3:b3:a7:f2:bf:fd:3d:a5:
16:f9:56:e2:48:0e:16:e0:84:67:bd:bf:2e:ba:f2:6f:5f:89:
ca:8f:cf:cc:9b:93:a7:7c:16:07:8d:0a:e7:bb:82:4a:b4:4d:
16:1b:d4:bf:22:7f:95:7c:90:ed:31:e4:d4:0d:c7:9d:de:55:
20:30:03:18:c2:f7:c7:a8:9b:c0:55:18:9c:c4:8d:72:a8:7b:
3a:3a:f6:37:04:c0:4e:7e:70:45:e5:51:08:12:11:90:58:9b:
f4:bf:2e:4f:78:f0:b0:eb:b7:5f:06:e6:54:38:b1:c9:14:8f:
2b:3b:e2:e4:81:74:d1:f8:a9:79:70:9f:da:83:a9:93:fd:62:
81:12:45:6f:79:e7:fd:39:c1:13:4c:6d:3a:59:ef:b6:b1:8a:
c4:7b:eb:be:4c:d8:80:c4:57:a9:73:d5:1b:a8:6d:11:aa:f7:
4c:9d:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:11 2025 by rpki-client on console.sobornost.net