Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F7A661D41807C209AA73B724D7CD621DF1A4172.cer
File: 2F7A661D41807C209AA73B724D7CD621DF1A4172.cer (raw, json)
Hash identifier: nUJtVTwffL/DvkvStVPSHYyhgkP/VivElkL8gLEt9G0=
Subject key identifier: 2F:7A:66:1D:41:80:7C:20:9A:A7:3B:72:4D:7C:D6:21:DF:1A:41:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 035B2D8D466EC33B4D1224B7DA99D6D29F5096BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/2F7A661D41807C209AA73B724D7CD621DF1A4172.mft
caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 07 Nov 2024 20:35:05 +0000
Certificate not after: Thu 06 Nov 2025 20:40:05 +0000
Subordinate resources: AS: 28220
IP: 45.4.64.0/22
IP: 138.0.100.0/22
IP: 168.227.108.0/22
IP: 168.228.68.0/22
IP: 170.82.92.0/22
IP: 177.89.0.0/16
IP: 177.137.192.0/20
IP: 179.96.192.0/21
IP: 179.96.240.0/20
IP: 179.190.128.0/17
IP: 186.192.16.0/20
IP: 186.193.96.0/20
IP: 186.208.208.0/21
IP: 186.235.0.0/20
IP: 186.236.192.0/19
IP: 186.251.112.0/21
IP: 187.49.192.0/20
IP: 187.60.64.0/19
IP: 187.61.128.0/17
IP: 187.86.96.0/20
IP: 187.87.112.0/20
IP: 187.108.64.0/20
IP: 187.109.176.0/20
IP: 187.111.224.0/19
IP: 189.45.16.0/20
IP: 189.124.128.0/17
IP: 191.241.40.0/21
IP: 200.233.80.0/20
IP: 201.148.188.0/22
IP: 2804:54::/32
IP: 2804:2140::/32
Validation: Failed, certificate revoked on Thu 07 Nov 2024 20:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5b:2d:8d:46:6e:c3:3b:4d:12:24:b7:da:99:d6:d2:9f:50:96:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 7 20:35:05 2024 GMT
Not After : Nov 6 20:40:05 2025 GMT
Subject: CN=2F7A661D41807C209AA73B724D7CD621DF1A4172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:c7:63:47:46:32:9f:54:ee:0c:8d:84:39:
35:5c:1b:d2:b1:c1:ef:46:01:14:98:95:3d:44:33:
d4:7f:0c:25:6e:f6:ea:64:ac:ca:ef:2f:84:69:2e:
0f:84:36:0b:94:b9:7e:e0:c4:56:20:74:87:b8:39:
f7:ec:62:ca:86:ed:02:42:5b:b7:c9:2d:d7:95:c8:
67:8b:9f:68:84:06:c2:e1:d4:0e:aa:54:a4:4b:3b:
06:40:75:35:92:37:4e:53:a6:16:f6:92:c5:4f:72:
0b:9e:b2:3a:99:f5:0c:39:0a:1a:fd:97:19:fd:05:
2d:1c:6d:95:58:09:97:52:cd:7a:03:d1:f1:33:24:
ac:be:d1:a6:49:5d:68:b1:90:cb:81:1b:49:ef:54:
ed:57:03:96:fc:fb:dd:5d:84:1e:a6:9d:8c:7b:66:
65:d9:13:61:87:b9:df:f4:9b:f7:fd:f2:a8:f1:30:
26:33:61:dc:f4:61:1b:70:4c:17:16:ad:89:37:b1:
7e:ca:9f:72:71:4f:fb:f0:4f:64:91:48:29:c9:46:
c0:ba:25:d6:fe:b6:2f:5c:d7:02:b6:b1:9f:36:eb:
2e:f1:f7:74:2b:bb:98:bd:11:87:a9:14:85:60:5e:
40:40:e9:57:fe:2c:81:02:f2:f8:dc:fc:08:6c:e6:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2F:7A:66:1D:41:80:7C:20:9A:A7:3B:72:4D:7C:D6:21:DF:1A:41:72
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/2F7A661D41807C209AA73B724D7CD621DF1A4172.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.64.0/22
138.0.100.0/22
168.227.108.0/22
168.228.68.0/22
170.82.92.0/22
177.89.0.0/16
177.137.192.0/20
179.96.192.0/21
179.96.240.0/20
179.190.128.0/17
186.192.16.0/20
186.193.96.0/20
186.208.208.0/21
186.235.0.0/20
186.236.192.0/19
186.251.112.0/21
187.49.192.0/20
187.60.64.0/19
187.61.128.0/17
187.86.96.0/20
187.87.112.0/20
187.108.64.0/20
187.109.176.0/20
187.111.224.0/19
189.45.16.0/20
189.124.128.0/17
191.241.40.0/21
200.233.80.0/20
201.148.188.0/22
IPv6:
2804:54::/32
2804:2140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28220
Signature Algorithm: sha256WithRSAEncryption
79:1c:1f:27:e5:f2:76:bd:96:4a:cc:91:db:98:ea:1c:19:e1:
80:5b:a7:a4:de:ec:5c:5c:84:5f:99:81:ce:ee:85:f0:f5:37:
78:3e:ff:46:78:fe:d0:ca:96:ca:2b:33:c2:93:d1:97:04:1f:
d0:eb:41:71:bc:cd:42:6a:19:5a:6a:76:db:12:ce:64:73:61:
da:f5:dc:c9:52:10:ce:dc:14:ec:98:3e:a0:aa:b0:a7:15:e2:
20:f6:1e:6e:91:fd:e1:50:c6:9d:dd:3e:7b:fa:50:18:c7:39:
50:a2:7f:ae:3c:a1:09:6b:d8:08:25:eb:b9:39:62:14:af:11:
5e:24:27:87:5b:ac:f8:04:3c:b9:15:4d:ee:8f:82:f2:90:f7:
f6:8b:85:e7:db:c9:0a:84:dc:bf:b4:33:5d:72:19:d6:99:64:
0e:93:62:7e:49:52:5c:30:9c:8b:f9:f9:a3:c6:5b:76:ab:ca:
9e:9e:b6:f7:03:dc:4b:81:8c:fb:2c:37:6f:b0:f1:ad:14:39:
e8:8a:9e:22:a4:d8:80:24:57:93:4d:6f:40:7f:04:76:6f:cc:
1e:ab:12:de:a5:1b:7b:df:56:11:db:5f:39:8f:9d:77:71:ed:
4f:57:34:15:9c:0d:d7:f1:02:9e:32:c6:30:27:c4:d3:7f:4e:
8c:86:d1:70
-----BEGIN CERTIFICATE-----
MIIG4jCCBcqgAwIBAgIUA1stjUZuwztNEiS32pnW0p9QlrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDcyMDM1MDVaFw0yNTExMDYyMDQwMDVaMDMxMTAvBgNV
BAMTKDJGN0E2NjFENDE4MDdDMjA5QUE3M0I3MjREN0NENjIxREYxQTQxNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa98djR0Yyn1TuDI2EOTVcG9Kx
we9GARSYlT1EM9R/DCVu9upkrMrvL4RpLg+ENguUuX7gxFYgdIe4OffsYsqG7QJC
W7fJLdeVyGeLn2iEBsLh1A6qVKRLOwZAdTWSN05Tphb2ksVPcguesjqZ9Qw5Chr9
lxn9BS0cbZVYCZdSzXoD0fEzJKy+0aZJXWixkMuBG0nvVO1XA5b8+91dhB6mnYx7
ZmXZE2GHud/0m/f98qjxMCYzYdz0YRtwTBcWrYk3sX7Kn3JxT/vwT2SRSCnJRsC6
Jdb+ti9c1wK2sZ826y7x93Qru5i9EYepFIVgXkBA6Vf+LIEC8vjc/Ahs5t2nAgMB
AAGjggPsMIID6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvemYdQYB8IJqn
O3JNfNYh3xpBcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmRH
QVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhFZUIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJk
R0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAvMkY3
QTY2MUQ0MTgwN0MyMDlBQTczQjcyNEQ3Q0Q2MjFERjFBNDE3Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHgBggrBgEFBQcB
BwEB/wSB0DCBzTCBtAQCAAEwga0DBAItBEADBAKKAGQDBAKo42wDBAKo5EQDBAKq
UlwDAwCxWQMEBLGJwAMEA7NgwAMEBLNg8AMEB7O+gAMEBLrAEAMEBLrBYAMEA7rQ
0AMEBLrrAAMEBbrswAMEA7r7cAMEBLsxwAMEBbs8QAMEB7s9gAMEBLtWYAMEBLtX
cAMEBLtsQAMEBLttsAMEBbtv4AMEBL0tEAMEB718gAMEA7/xKAMEBMjpUAMEAsmU
vDAUBAIAAjAOAwUAKAQAVAMFACgEIUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
bjwwDQYJKoZIhvcNAQELBQADggEBAHkcHyfl8na9lkrMkduY6hwZ4YBbp6Te7Fxc
hF+Zgc7uhfD1N3g+/0Z4/tDKlsorM8KT0ZcEH9DrQXG8zUJqGVpqdtsSzmRzYdr1
3MlSEM7cFOyYPqCqsKcV4iD2Hm6R/eFQxp3dPnv6UBjHOVCif648oQlr2Agl67k5
YhSvEV4kJ4dbrPgEPLkVTe6PgvKQ9/aLhefbyQqE3L+0M11yGdaZZA6TYn5JUlww
nIv5+aPGW3aryp6etvcD3EuBjPssN2+w8a0UOeiKniKk2IAkV5NNb0B/BHZvzB6r
Et6lG3vfVhHbXzmPnXdx7U9XNBWcDdfxAp4yxjAnxNN/ToyG0XA=
-----END CERTIFICATE-----
Generated at Thu May 15 13:44:09 2025 by rpki-client