Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/18D5FE8378EA3FD3A9F89AD5592D5B3298BAE4A9.cer
File: 18D5FE8378EA3FD3A9F89AD5592D5B3298BAE4A9.cer (raw, json)
Hash identifier: ItB3WSnl1x2dN+/7IKkRq6/NJZwhzR2aQfaPBolY7YE=
Subject key identifier: 18:D5:FE:83:78:EA:3F:D3:A9:F8:9A:D5:59:2D:5B:32:98:BA:E4:A9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 10F0CEE877E0458A0B7BA17EE33B69A8D7805300
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/18D5FE8378EA3FD3A9F89AD5592D5B3298BAE4A9.mft
caRepository: rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 03 Jun 2025 11:33:47 +0000
Certificate not after: Tue 02 Jun 2026 11:38:47 +0000
Subordinate resources: AS: 52549
IP: 177.86.36.0/22
IP: 200.95.176.0/22
IP: 2804:cbc::/32
Validation: Failed, certificate revoked on Tue 03 Jun 2025 11:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f0:ce:e8:77:e0:45:8a:0b:7b:a1:7e:e3:3b:69:a8:d7:80:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 3 11:33:47 2025 GMT
Not After : Jun 2 11:38:47 2026 GMT
Subject: CN=18D5FE8378EA3FD3A9F89AD5592D5B3298BAE4A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:23:87:ee:fd:a1:21:30:9f:a1:62:f6:f2:
90:fb:6f:22:60:5c:53:c0:a5:cb:74:8b:76:c4:25:
b9:e1:24:1d:0f:2d:7f:57:6c:84:c0:df:16:65:24:
72:e2:28:49:40:c4:25:9d:ef:25:be:08:34:90:88:
91:e8:f7:9b:2a:b4:72:48:89:d8:b5:d6:d5:a0:be:
c2:21:8e:e0:8d:d8:b0:40:98:ca:fc:dc:53:1f:07:
47:1e:c0:2c:47:34:77:f7:b4:2f:f1:8d:75:2b:1e:
24:59:ce:58:25:4d:09:3e:25:d4:17:22:ca:66:7a:
67:8b:60:b5:5d:9b:16:86:43:5c:01:a4:40:cb:b8:
f0:2d:cf:49:08:2c:81:de:89:61:7b:77:a4:6c:7c:
02:06:f2:51:0b:e9:d6:9d:80:bd:c0:0a:0e:48:10:
62:98:1c:82:ad:cb:32:0d:e5:23:9e:cf:ad:65:7b:
f6:d8:0a:0f:e3:08:fe:21:bf:37:c0:00:b8:5a:99:
87:2e:8c:17:4d:04:f2:68:ec:41:57:7a:4a:14:29:
09:44:22:01:69:bf:14:cc:12:2e:36:57:90:fb:58:
b1:c8:37:71:d8:ff:d0:51:c7:0c:b6:e6:38:0f:66:
b3:ab:8f:6c:ab:81:40:27:5d:40:f2:90:30:bb:7e:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
18:D5:FE:83:78:EA:3F:D3:A9:F8:9A:D5:59:2D:5B:32:98:BA:E4:A9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/18D5FE8378EA3FD3A9F89AD5592D5B3298BAE4A9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.86.36.0/22
200.95.176.0/22
IPv6:
2804:cbc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52549
Signature Algorithm: sha256WithRSAEncryption
33:6f:4d:f5:34:5b:39:43:d6:5a:f3:c7:93:05:30:f8:5b:6d:
c1:11:e2:14:31:28:70:68:de:70:1a:3c:d8:5c:01:fa:f1:41:
57:eb:a3:6d:49:31:de:e9:c6:62:9d:9b:61:53:2f:d3:92:27:
2f:9a:9c:41:c3:6f:90:dc:83:37:b1:a6:e2:4f:5e:2b:8c:0f:
78:3b:5a:93:b3:a5:fc:04:e6:41:3d:e9:cb:17:83:a7:5b:54:
64:f7:b1:46:e3:21:83:35:b8:48:64:3f:13:88:1a:64:95:69:
ef:f2:5a:58:8b:a1:97:51:9c:53:b8:a0:57:20:31:7d:a8:09:
51:7b:f9:7e:ac:0b:00:4c:ef:ad:61:79:1b:4b:35:e3:b8:34:
9e:e6:65:99:02:0d:7a:92:0e:ea:d3:a9:6f:82:c7:15:2c:cc:
15:1c:4a:ce:63:b4:b6:18:d2:67:b2:a3:dc:ab:35:be:f0:88:
9c:36:bb:d4:9b:f2:ab:f6:6a:c5:e0:f6:cb:5d:5a:16:6b:b7:
d1:cf:8e:1c:1a:04:3e:18:3e:b8:67:9b:43:04:d5:64:1d:a1:
b0:b6:e6:d5:f8:69:eb:c2:69:2f:44:43:78:3b:82:af:c6:71:
0e:55:1e:f5:d6:82:32:20:22:b1:5b:b7:33:72:bb:18:57:d0:
30:86:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:37 2025 by rpki-client