Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
File: 652C747C27E6032DB35E33D140A8860A69786CD4.cer (raw, json)
Hash identifier: bcIOOB62anlYqflKZLqAF8CTct4Z7OFEkajVlCoRxss=
Subject key identifier: 65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5D01DE39013D5A1CE5F1F9FC844DC31AD3A56D09
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.mft
caRepository: rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 21 May 2025 19:25:04 +0000
Certificate not after: Wed 20 May 2026 19:30:04 +0000
Subordinate resources: AS: 263656
IP: 168.197.76.0/22
IP: 177.52.144.0/21
IP: 177.66.28.0/22
IP: 200.215.160.0/22
IP: 201.139.84.0/22
IP: 2804:10fc::/32
Validation: Failed, certificate revoked on Wed 21 May 2025 19:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:01:de:39:01:3d:5a:1c:e5:f1:f9:fc:84:4d:c3:1a:d3:a5:6d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 21 19:25:04 2025 GMT
Not After : May 20 19:30:04 2026 GMT
Subject: CN=652C747C27E6032DB35E33D140A8860A69786CD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:91:cd:eb:38:29:29:09:d3:76:30:02:10:
54:c5:56:c0:26:9e:1a:10:11:7b:af:a2:bd:2a:14:
9b:62:14:15:67:25:2f:32:45:29:66:0d:70:65:2d:
f7:3c:97:24:93:b9:3d:1b:79:4e:08:1d:1a:3a:f5:
e4:ec:c9:40:89:84:f8:c4:e1:cc:21:42:da:46:cf:
2b:e8:66:fb:bb:7c:14:be:59:10:64:29:f0:88:16:
7d:48:fe:2b:c8:38:bc:80:36:cd:ca:6c:a6:4b:15:
17:78:69:f3:6b:1c:15:ea:4a:57:94:67:4b:6f:9d:
05:d2:1e:af:b3:ec:4d:6e:ed:9c:c4:2f:12:da:5d:
95:8b:94:49:38:7b:b8:8a:31:56:12:5a:a0:05:df:
7b:9e:30:95:ea:30:0c:df:28:60:86:2e:43:2c:f1:
ba:e8:6a:fe:e4:1e:76:86:ef:53:67:8c:21:cd:3e:
20:2f:43:59:31:30:5d:2f:c3:97:81:66:a6:03:dd:
99:45:47:d4:1f:38:f7:be:43:2b:3d:4e:27:5f:50:
ad:a6:36:2d:99:35:df:f2:41:2c:ef:d8:ca:a4:14:
82:06:70:9f:37:a8:2f:96:d8:c2:8e:b9:33:d6:18:
9e:80:a5:7d:cb:83:68:14:5b:97:dc:c9:10:26:f8:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.76.0/22
177.52.144.0/21
177.66.28.0/22
200.215.160.0/22
201.139.84.0/22
IPv6:
2804:10fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263656
Signature Algorithm: sha256WithRSAEncryption
3e:6e:56:41:0f:ee:08:ff:dd:d2:cc:01:85:0e:c1:8f:e1:9a:
bb:79:8b:c9:87:0d:e2:b3:73:f1:5f:79:24:f2:36:56:7b:9c:
18:de:13:43:07:98:e7:f4:d5:7a:b6:32:60:68:85:53:91:85:
8a:66:c5:b1:01:26:60:89:92:ed:22:b8:d9:ce:8a:64:d1:b3:
79:52:6a:81:dc:03:28:38:af:e0:ec:0c:8e:cf:cd:ad:e9:c0:
68:89:81:c4:95:3e:04:18:78:3c:f8:67:c4:7f:4b:50:fa:4f:
a7:a6:15:1c:ff:0f:d0:0e:23:3d:54:b2:6f:6a:7f:c4:3f:0a:
47:56:1f:31:98:80:94:bd:ef:0d:17:25:e9:85:aa:34:a1:33:
6d:aa:32:45:4a:ce:3e:e1:2e:1d:76:28:69:70:fe:f8:84:0c:
89:43:d4:ba:f4:ea:7b:4f:c6:77:b1:f5:24:17:de:8b:0e:f2:
c8:2b:38:28:4b:e8:89:13:bd:4f:04:66:bd:b0:ce:0f:95:4f:
94:34:39:4e:46:9c:08:85:dc:79:e4:f0:c3:04:89:94:f2:67:
e8:56:4f:60:5b:1e:99:42:e3:f8:de:4d:06:fd:fc:83:aa:68:
37:a5:99:43:bb:68:a5:fd:c2:86:37:8e:97:12:34:34:3c:aa:
de:ce:90:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:42:29 2025 by rpki-client