Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
File: 3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer (raw, json)
Hash identifier: kz9V3WW3IwM9iqIeTngm+sNYN/lpmJtPnQNOt2FsTEg=
Subject key identifier: 3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 06827FA927DD6654F4903F69A5D30118E93AE418
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.mft
caRepository: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 25 Mar 2025 16:15:14 +0000
Certificate not after: Tue 24 Mar 2026 16:20:14 +0000
Subordinate resources: AS: 267059
IP: 45.228.108.0/22
IP: 2804:4784::/32
Validation: Failed, certificate revoked on Sun 30 Mar 2025 16:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:82:7f:a9:27:dd:66:54:f4:90:3f:69:a5:d3:01:18:e9:3a:e4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 25 16:15:14 2025 GMT
Not After : Mar 24 16:20:14 2026 GMT
Subject: CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:65:61:ee:1d:0b:9d:04:47:d1:c6:d2:c6:
fd:1a:f8:a7:c2:c8:bb:fc:79:8c:41:04:eb:0a:0e:
dc:86:48:d7:6a:06:99:c0:84:62:06:57:d1:21:88:
8c:72:6a:6e:fd:e2:63:85:d4:34:8a:f8:0d:71:3f:
ac:fb:47:5f:57:30:13:ec:73:49:4f:84:7d:a5:30:
fd:c6:b4:e7:65:1a:20:37:cb:a7:d8:7b:96:68:3c:
6d:91:47:49:65:75:99:76:c1:77:8c:e4:26:2f:de:
90:d5:d4:7c:a8:9b:b2:9f:d3:4b:cf:55:1d:04:1d:
95:d4:d5:d0:bd:97:ea:76:f1:89:3e:1b:88:61:ab:
78:4f:e2:2b:73:f6:4a:3d:76:71:59:9e:64:a4:85:
50:bd:0d:39:30:e1:72:31:10:67:13:df:8c:4b:8d:
34:e4:ff:ca:88:25:87:c0:61:e7:75:1b:c9:d6:c6:
dc:d0:36:da:52:e9:55:a0:11:b8:fb:3d:6f:e3:37:
4c:59:2d:fe:7c:33:7d:44:95:0a:ab:49:31:df:99:
38:a4:ee:e6:a8:b7:90:52:4b:c5:19:c0:e4:b3:70:
23:74:fc:3e:f3:fa:92:3f:af:3b:07:dd:35:2e:a8:
8b:d8:2b:b1:4d:69:6a:77:7f:c8:f3:41:1c:27:f1:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.108.0/22
IPv6:
2804:4784::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267059
Signature Algorithm: sha256WithRSAEncryption
b5:93:6e:5c:97:56:5e:32:b4:22:35:4e:df:01:3b:7c:16:55:
1a:86:20:7a:97:98:7a:a3:75:0f:56:cc:26:32:d8:b0:fb:25:
d3:fb:67:d1:bf:3c:47:51:1b:67:1d:7d:f1:2c:fa:64:46:e1:
45:53:c4:2a:b8:8a:16:d9:82:4b:8e:2b:52:56:9c:69:c6:7c:
c4:1c:17:41:fd:5f:ba:64:20:77:f4:d7:3b:e7:eb:1f:26:7d:
cc:01:ce:e5:d5:20:10:9c:2a:9e:00:85:b0:ab:4f:f2:aa:66:
7e:37:ae:d3:f4:5e:40:21:14:f7:e2:a7:62:3a:52:b9:ec:42:
e8:a2:04:3b:41:d4:95:57:56:78:a1:79:2b:72:4e:c3:e4:48:
dd:1a:e5:a0:8a:e9:b7:84:e7:2a:52:a1:3a:cc:c7:d3:1b:5f:
3b:d9:69:e0:1d:36:22:9e:2c:e3:62:50:f1:ba:f7:7f:67:c3:
2e:a7:54:1b:49:a2:21:39:6e:90:cb:c9:2a:c8:91:0f:7d:f7:
91:d0:4c:00:1a:60:b7:62:88:f0:8b:70:e7:f8:08:22:6d:55:
e5:dd:72:e3:42:f5:31:ec:0f:eb:bb:de:88:a5:58:e3:3e:a4:
3e:a9:91:6f:16:12:7e:2c:ac:4d:c7:02:1d:a0:46:e7:86:f4:
e0:2d:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:20 2025 by rpki-client