Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E099C399B33A5BD4B09B4048096B814CE28EFBD9.cer
File: E099C399B33A5BD4B09B4048096B814CE28EFBD9.cer (raw, json)
Hash identifier: qa6QR+JEy6Wn1GbciisRZOoI4VO4dnk4+m2f9UMmTw4=
Subject key identifier: E0:99:C3:99:B3:3A:5B:D4:B0:9B:40:48:09:6B:81:4C:E2:8E:FB:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 72C54EAA678DA37ED2223E82676D951EDAA53196
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/E099C399B33A5BD4B09B4048096B814CE28EFBD9.mft
caRepository: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 06 May 2025 20:02:19 +0000
Certificate not after: Tue 05 May 2026 20:07:19 +0000
Subordinate resources: AS: 264397
IP: 131.161.92.0/22
IP: 164.163.36.0/22
IP: 170.239.96.0/22
IP: 2804:1dd4::/32
Validation: Failed, certificate revoked on Wed 07 May 2025 20:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c5:4e:aa:67:8d:a3:7e:d2:22:3e:82:67:6d:95:1e:da:a5:31:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 6 20:02:19 2025 GMT
Not After : May 5 20:07:19 2026 GMT
Subject: CN=E099C399B33A5BD4B09B4048096B814CE28EFBD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:c3:06:69:92:be:d9:46:55:11:f9:d6:88:
c3:d1:d5:db:ab:7b:7d:88:74:6d:4d:cc:df:a2:53:
ad:6d:05:97:65:a3:31:36:35:5a:17:f8:7f:08:c1:
2c:ba:6f:53:0c:08:61:16:9e:b8:e0:67:c9:8e:25:
99:bb:93:9a:5e:00:96:0e:ab:3d:d8:3a:bb:ed:12:
8c:5c:dd:94:62:74:1d:4d:83:73:45:e0:d4:6f:b7:
23:d8:d5:1a:05:13:a1:6c:64:10:11:55:6f:aa:7f:
24:c4:26:f1:ca:11:57:73:e7:f2:ee:57:31:58:bf:
25:a7:21:fc:1c:f5:fb:80:5c:23:a6:82:43:df:46:
70:c3:29:a8:19:7f:fb:37:72:53:cb:15:bf:7e:47:
de:24:d4:ef:96:07:0a:e1:c4:5a:45:0c:2f:f7:7e:
e8:b2:3e:5e:63:a7:34:d0:0a:3b:7e:37:9e:26:8a:
7c:67:ae:87:f0:13:da:d7:a4:37:e6:1d:53:34:61:
70:dd:90:7f:cc:4b:69:1b:0e:1e:48:e2:bb:1a:7e:
34:44:a0:53:4f:d5:b8:1a:4d:0a:89:14:38:8e:22:
d7:19:af:9b:c9:0f:1e:53:1f:33:fa:30:d2:c4:ec:
b2:0d:5c:03:ca:74:ac:24:3a:32:23:a3:63:14:19:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E0:99:C3:99:B3:3A:5B:D4:B0:9B:40:48:09:6B:81:4C:E2:8E:FB:D9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/E099C399B33A5BD4B09B4048096B814CE28EFBD9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.92.0/22
164.163.36.0/22
170.239.96.0/22
IPv6:
2804:1dd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264397
Signature Algorithm: sha256WithRSAEncryption
99:39:a1:ac:a8:20:f4:2c:88:81:8a:ae:b4:eb:97:26:e3:de:
07:43:17:ba:f5:d9:3c:c2:a9:54:2c:0b:9a:07:df:54:1c:5c:
e2:ea:7a:00:8f:19:d9:55:46:d3:67:42:31:2c:73:d1:63:ed:
b4:e9:df:12:74:69:6c:e8:36:6c:4b:0a:c2:17:09:f8:a3:80:
4e:43:22:5c:64:d9:db:98:c5:e1:0f:c9:dc:a5:e4:69:cb:4e:
a5:b6:0e:52:c9:15:b4:95:cd:cd:33:f2:48:a7:a8:95:12:1c:
f9:47:b1:e9:b0:b9:e0:45:e0:16:58:a8:70:b2:68:fc:19:f9:
65:5d:73:24:9f:f7:c1:33:d9:5d:9b:b1:04:de:7a:78:32:df:
62:4d:5d:85:86:9b:0b:f9:6b:bd:cd:a3:53:fd:56:e0:52:18:
4d:3e:78:69:94:d2:bd:5f:1a:43:c8:33:03:12:6f:87:f1:4f:
bb:6d:ea:da:64:f0:52:b2:77:cb:0f:8e:d5:d4:89:1a:9c:f4:
af:09:47:d2:9d:48:a8:f3:9a:9f:42:4e:81:4b:93:00:a1:ef:
3c:15:86:44:bb:a1:83:21:62:58:ae:93:e4:55:a4:12:8e:8c:
57:ef:91:3c:2a:05:54:35:e2:77:fa:b2:de:bb:85:b5:9d:ae:
c6:79:47:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:27:36 2025 by rpki-client