
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
File: E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer (raw, json)
Hash identifier: nulVwAKabVsMasa2in5NTNDYglDLGzax9AhXhVrSwdk=
Subject key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0A5AB1F6B88E9D0899F714A06295E6B9D30BFEB8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.mft
caRepository: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 08 Feb 2025 00:32:01 +0000
Certificate not after: Sat 07 Feb 2026 00:37:01 +0000
Subordinate resources: AS: 262590
IP: 138.122.248.0/22
IP: 170.231.172.0/22
IP: 177.84.192.0/21
IP: 2804:684::/32
Validation: Failed, certificate revoked on Tue 04 Mar 2025 13:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5a:b1:f6:b8:8e:9d:08:99:f7:14:a0:62:95:e6:b9:d3:0b:fe:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 8 00:32:01 2025 GMT
Not After : Feb 7 00:37:01 2026 GMT
Subject: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:77:88:01:fe:f1:3e:bf:3e:64:3a:69:71:
36:50:ed:ba:a4:a5:54:86:78:ec:dd:ef:ad:32:05:
b9:53:62:c1:28:41:fd:9d:91:08:9a:a5:ad:ab:85:
27:5a:35:27:15:dc:d6:ee:a1:23:2c:f8:04:89:ec:
1b:3d:88:58:08:64:16:be:78:09:7b:4d:d1:5f:ab:
40:7e:35:56:96:0d:5e:60:a8:a1:2b:3e:bf:36:56:
dd:13:a6:2b:69:5e:e2:67:d3:8c:61:a1:2a:24:74:
61:41:c2:3f:12:9e:d6:42:79:02:81:e2:de:dd:75:
b8:c6:41:ff:05:2b:2d:67:cb:57:7a:13:f8:4a:c5:
e8:4e:7d:5c:85:8e:68:2e:b2:5b:78:2a:85:95:90:
6a:c6:3f:60:fe:9b:64:6c:41:e3:55:93:32:45:d9:
b3:60:b5:48:17:39:74:20:13:7f:74:26:99:a7:00:
a8:b9:04:af:73:c0:b6:3c:ea:24:6e:11:03:f0:50:
f9:59:38:57:8d:ea:c4:d1:58:a2:9b:fb:bb:78:e9:
94:e3:9b:cf:9b:f2:71:52:43:06:d4:ac:6b:ac:1c:
6b:3e:4f:a0:53:b7:d8:6b:e2:6b:66:e3:7f:93:58:
23:73:32:8a:95:8a:c4:cb:b1:dd:0b:b9:5c:6e:90:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.248.0/22
170.231.172.0/22
177.84.192.0/21
IPv6:
2804:684::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262590
Signature Algorithm: sha256WithRSAEncryption
76:f0:d6:fd:48:42:66:a0:23:67:31:84:c8:35:7d:48:f3:19:
4c:d2:7c:79:42:23:1c:e8:37:5e:78:24:09:e4:65:7a:e4:4b:
f1:c3:df:8d:f4:8b:f2:01:d5:77:cb:26:1d:ed:6e:bb:1b:4a:
19:4b:b0:0b:3e:86:81:55:cd:8a:88:28:84:3f:d8:62:34:c7:
e3:45:0d:a4:95:ec:12:07:a9:b3:ed:55:84:a5:48:ed:8d:df:
e9:b1:16:2a:c9:33:54:dc:27:d4:68:71:b9:74:77:2a:57:71:
e2:f0:a7:ab:9d:6d:00:67:01:e1:53:7e:98:09:d4:7b:1d:be:
ee:47:84:7a:68:47:4f:53:32:44:b9:21:e0:66:f0:27:a3:d1:
f1:5f:a7:9a:b5:e3:6b:dc:6c:0e:55:65:0b:d5:c9:77:b6:7f:
f2:e4:bd:b2:75:14:e3:da:45:df:f7:13:ac:51:ef:5f:02:11:
dc:18:7e:73:ee:df:ca:33:b1:bc:1b:53:fc:f5:86:22:95:99:
8d:f3:d4:a8:bb:5a:da:50:1a:68:2e:96:05:bb:9b:c3:2a:0a:
b7:fc:ea:d4:07:6c:73:74:3b:a3:fe:5c:04:c2:a7:76:8b:45:
ee:9e:56:62:d4:d6:84:27:99:a5:d1:15:2d:fc:a5:01:53:ec:
0b:58:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:57 2025 by rpki-client