Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.cer
File: CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.cer (raw, json)
Hash identifier: 0ik5GkIxT12zoaAu49+rVxQTSZJOAN9V4ByQBYucmQQ=
Subject key identifier: CD:30:B1:01:39:C2:FD:27:FD:78:AA:A0:33:9B:7B:F9:7C:F0:7B:2E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 64B66BB522218C1E72CCC3F33BB306A9EACF818B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.mft
caRepository: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 02 Apr 2025 18:45:54 +0000
Certificate not after: Wed 01 Apr 2026 18:50:54 +0000
Subordinate resources: AS: 28238
IP: 186.216.224.0/20
IP: 187.0.128.0/20
Validation: Failed, certificate revoked on Sat 12 Apr 2025 12:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b6:6b:b5:22:21:8c:1e:72:cc:c3:f3:3b:b3:06:a9:ea:cf:81:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 2 18:45:54 2025 GMT
Not After : Apr 1 18:50:54 2026 GMT
Subject: CN=CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:6d:71:0d:bf:46:5d:11:6c:7d:07:30:7b:
7e:e3:23:30:21:88:59:59:53:88:92:5c:7b:e6:f7:
86:4e:48:bf:be:f1:1f:73:43:d7:52:3a:7a:cc:68:
b5:88:ed:a6:3f:31:69:89:15:38:83:e0:59:df:97:
db:d9:d3:6a:81:d1:66:cd:fb:2e:9d:13:ec:81:d6:
74:67:be:58:93:b4:9d:76:48:c2:ea:86:b9:fa:7d:
b0:c8:6c:70:3c:29:6a:26:2a:d4:9e:35:ac:cc:19:
6a:9c:24:4a:f9:e5:ae:99:d2:4b:fa:ab:30:66:f7:
cc:0b:b0:57:e2:56:26:5b:4b:df:7e:f2:36:75:82:
ee:c8:87:e6:af:e2:dc:70:01:0d:45:c6:52:ad:c5:
5b:3f:04:3d:0d:f1:ae:2c:35:9e:a5:4a:3e:34:fb:
44:35:29:a2:f4:f8:4b:98:fa:63:45:6e:9d:b5:5a:
db:be:34:d2:1e:7c:8c:3a:10:b0:53:9f:86:db:4f:
3f:da:c4:1d:8a:7c:04:7c:c6:ef:e0:c3:84:83:db:
39:aa:d1:e6:fc:9b:4f:49:b5:cc:a4:2b:ed:6d:bf:
ba:0a:0a:46:20:75:4f:67:69:15:99:3f:3a:70:2f:
bb:e0:44:00:b1:81:bd:e6:f1:84:98:38:a5:ca:8c:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:30:B1:01:39:C2:FD:27:FD:78:AA:A0:33:9B:7B:F9:7C:F0:7B:2E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.216.224.0/20
187.0.128.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28238
Signature Algorithm: sha256WithRSAEncryption
1e:c7:65:1d:76:89:04:6b:bf:6c:0f:cb:f3:b3:23:d6:55:f9:
58:e4:af:07:c0:72:b8:e6:aa:ff:22:89:12:fb:1e:8a:a8:09:
92:e0:62:d0:e5:20:f2:a2:f6:fc:80:d0:ec:09:a8:c3:a4:c1:
8c:bd:59:f1:94:48:2f:a8:9b:e6:31:76:bd:b6:d5:ef:03:97:
1b:8f:7f:2e:05:3f:93:d9:00:43:32:b0:b5:a9:5d:63:84:fc:
05:ae:86:d1:62:9e:00:db:ac:a2:c5:ce:10:0f:7a:8c:8f:e5:
62:f9:15:30:d4:fb:83:2d:1b:f1:ca:49:b3:7b:4b:b3:ba:82:
8d:46:ff:bf:56:f5:b7:9a:ee:92:e8:fc:41:3d:2e:0d:a4:aa:
c5:0b:8c:27:1f:5b:04:56:6a:6e:37:a7:02:05:99:9a:08:73:
e1:a6:fb:33:dc:a3:6f:68:a2:d8:0e:fc:75:42:a9:d8:ff:0c:
c4:07:5f:1c:92:50:74:b7:05:da:10:0e:d7:47:5c:b2:e1:7d:
73:d6:49:db:e6:aa:cd:67:ab:0b:bd:d5:29:03:9e:96:8c:4c:
1a:4a:e9:93:fb:c8:d4:c0:a6:77:69:60:61:c6:b6:3a:c9:f9:
63:46:14:24:4c:f8:76:a6:1e:71:58:52:7d:02:ad:50:ca:d9:
4b:6c:b8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:01:28 2025 by rpki-client