
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28542F5ACD485BC6F699A30F45B064F48B14B25D.cer
File: 28542F5ACD485BC6F699A30F45B064F48B14B25D.cer (raw, json)
Hash identifier: EaRrnV+IOUsYwPtw984mWF6qlKldAtf5ST0CvknjItU=
Subject key identifier: 28:54:2F:5A:CD:48:5B:C6:F6:99:A3:0F:45:B0:64:F4:8B:14:B2:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5B95642D1E0E84F9DAE39F357EBF8210B931632E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.mft
caRepository: rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 12 May 2025 14:58:31 +0000
Certificate not after: Mon 11 May 2026 15:03:31 +0000
Subordinate resources: AS: 264023
IP: 143.0.252.0/22
IP: 2804:2994::/32
Validation: Failed, certificate revoked on Sat 02 Aug 2025 02:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:95:64:2d:1e:0e:84:f9:da:e3:9f:35:7e:bf:82:10:b9:31:63:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 12 14:58:31 2025 GMT
Not After : May 11 15:03:31 2026 GMT
Subject: CN=28542F5ACD485BC6F699A30F45B064F48B14B25D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:03:3a:20:f4:37:59:64:1c:99:f2:3d:1e:
c0:c9:74:ba:1f:b3:05:85:dd:55:04:fc:cf:8c:28:
01:47:a3:5d:03:d6:40:5a:0f:b2:59:51:e0:d1:d4:
f6:af:54:87:94:85:39:61:e6:5b:ec:7a:ce:23:5e:
e6:0f:18:a9:d5:a2:90:21:23:44:a7:61:82:fe:9e:
5f:84:81:ad:5c:68:21:61:11:fc:89:aa:19:22:3d:
b2:f5:56:26:47:b6:73:40:c6:46:b9:3d:6f:2f:c3:
8e:05:7f:98:8b:59:79:e6:ca:db:42:1d:29:52:4c:
31:b5:eb:e8:e8:1e:12:cb:72:c8:52:6d:b4:b4:72:
8c:e0:dc:4f:51:64:a3:82:ac:b8:c6:ca:23:51:67:
ce:ff:5e:3d:12:2d:06:20:3a:59:17:f1:20:62:6b:
90:c1:b1:41:2c:2f:2d:26:78:ca:7f:c2:df:45:00:
9b:49:7d:28:54:70:03:d0:39:21:5c:d2:61:9e:8b:
6c:90:d9:26:04:15:d9:39:55:36:ec:9e:25:e2:80:
56:58:ea:f5:13:78:e6:c5:36:4e:3e:c9:4e:e0:7e:
4f:1a:1b:a4:f3:96:7f:f2:ac:07:74:7e:c9:c1:e2:
e3:67:8c:a7:66:2b:03:68:e9:99:35:b7:63:c4:70:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
28:54:2F:5A:CD:48:5B:C6:F6:99:A3:0F:45:B0:64:F4:8B:14:B2:5D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.252.0/22
IPv6:
2804:2994::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264023
Signature Algorithm: sha256WithRSAEncryption
9e:e1:65:a1:8b:35:70:c3:13:32:89:71:c5:52:2f:84:d9:69:
54:9d:40:48:c2:a2:85:6f:b3:5a:b9:54:79:95:80:dc:ef:63:
26:7f:45:cf:aa:c5:e1:25:60:31:d4:90:f3:b4:25:d0:59:21:
6a:44:89:0e:a0:31:34:9b:cf:de:bb:ad:45:53:0a:a7:bc:61:
f8:d2:cd:4a:44:90:37:a6:06:38:92:38:e3:c2:9e:ab:dc:7d:
17:01:2f:b3:4f:9f:28:0b:a7:b7:29:a5:cc:a9:6f:94:4f:f5:
3e:3b:6e:42:cf:dc:ea:de:3d:f2:3f:07:9d:f6:42:33:ff:a7:
07:0a:c1:c2:87:5a:9e:64:e7:c9:5e:38:7e:20:6f:66:d9:bc:
e1:9f:c3:10:42:2d:37:30:1f:3f:fb:41:8d:ce:13:5b:17:30:
21:f4:57:f3:58:7e:85:d6:84:4d:ec:2e:ea:78:53:ca:39:1f:
fc:3d:f9:e4:f6:c4:2f:d3:b0:eb:0b:7a:cd:df:bf:80:33:88:
0b:41:d9:53:3e:68:d0:8f:a7:35:4f:48:14:77:f5:3b:c3:ec:
d5:d0:fa:f7:b6:2c:7f:00:62:79:a0:11:c4:f7:99:45:fa:f4:
f8:12:c3:b0:f0:5b:fb:87:84:cb:e4:42:2f:9d:19:75:68:f4:
a1:38:2a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:34:25 2025 by rpki-client