Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer
File: 22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer (raw, json)
Hash identifier: Ihc7q4SgzasglJ1siOJUPJPJ6vYwZBjfgctUQpuxjvQ=
Subject key identifier: 22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6FE29894A4F26EE04F46726A688025B5EC9C6E76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.mft
caRepository: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 17 Mar 2025 17:35:36 +0000
Certificate not after: Mon 16 Mar 2026 17:40:36 +0000
Subordinate resources: AS: 271699
IP: 45.228.36.0/22
IP: 2804:7fa0::/32
Validation: Failed, certificate revoked on Sat 10 May 2025 23:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e2:98:94:a4:f2:6e:e0:4f:46:72:6a:68:80:25:b5:ec:9c:6e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 17 17:35:36 2025 GMT
Not After : Mar 16 17:40:36 2026 GMT
Subject: CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:a9:db:dd:71:7f:f8:3d:ae:5b:91:08:ac:
47:f9:fc:97:78:2e:fa:35:0c:5b:ff:47:d3:6a:02:
8f:d7:9a:52:50:41:dd:53:05:22:02:ce:3a:6c:d3:
a6:4e:f8:66:9a:44:4e:3c:ba:42:5b:85:c6:a5:8e:
d1:26:f9:50:3d:1c:14:fe:c8:f3:a6:71:4a:b5:56:
b9:cb:72:45:36:45:fc:c9:14:0f:db:ff:e1:6e:ab:
9b:d6:50:1f:1b:24:7f:1f:8a:d8:b4:b0:8b:0f:1a:
47:de:b3:fe:14:65:6c:81:cd:37:72:86:ba:bd:31:
a3:40:0c:78:95:58:b8:79:61:e1:ef:78:13:73:41:
a0:2e:8a:22:ef:15:b1:2e:76:99:a0:12:40:0e:63:
0c:70:c6:db:39:2a:9b:6e:53:09:6b:75:6c:88:03:
27:d7:09:75:16:d2:4b:7e:f1:e5:c6:a2:f8:95:a1:
a6:02:81:ed:a5:e5:05:a7:67:ef:28:af:0b:4b:42:
87:f8:49:3f:7f:19:ba:3e:ae:7c:f9:99:d1:83:c4:
fc:86:b1:c2:f4:39:9d:90:91:0f:4b:87:49:2e:9e:
97:3b:1c:25:cb:ed:ca:ef:3e:68:bc:0c:00:8d:f6:
11:f2:14:86:1c:54:92:f6:d6:f9:4b:02:1e:32:09:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.36.0/22
IPv6:
2804:7fa0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271699
Signature Algorithm: sha256WithRSAEncryption
3a:8a:be:12:70:42:2a:30:81:09:d1:47:bd:46:2f:1d:07:c3:
23:e1:ac:58:9b:08:57:a6:5d:74:60:6d:81:19:d9:33:ba:c6:
4f:32:88:9a:76:44:69:68:c5:a3:bb:6e:b7:81:ee:e9:2f:62:
9b:76:59:72:f8:19:af:60:ea:69:42:40:2d:f4:4f:cb:d8:dc:
9e:f2:f4:47:ef:77:1f:e7:34:11:2a:4c:ac:82:45:37:db:de:
f8:1c:3f:87:6b:4a:7d:60:62:66:7b:18:e3:39:ee:a6:61:7d:
d5:f2:35:e8:09:e5:d8:60:af:28:08:2e:25:f6:c5:b2:f8:d0:
e7:c5:a6:0a:30:d4:6c:54:20:98:f7:24:44:1a:b4:5c:7d:72:
53:76:7a:11:15:5f:01:66:be:09:86:cc:a4:f6:a6:bf:2d:c7:
f7:9f:7b:57:6e:1e:31:af:04:4c:4d:4a:e5:d4:3e:e6:84:38:
29:71:45:2d:41:d1:d7:e4:0f:ab:7b:10:c1:e8:d4:5e:ac:b4:
ae:ab:db:80:e3:7f:03:3b:c7:50:30:81:7c:ff:b3:7b:29:f6:
ae:6b:d1:32:3b:3a:ef:40:29:fb:a3:b2:0f:3c:88:aa:e8:53:
af:c9:df:00:7c:b5:b9:52:14:1e:b4:95:13:ba:5a:d9:4d:f0:
1e:17:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:04:41 2025 by rpki-client