Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9687E9759E87C680DEC08116FB6F44EC73175390.cer
File: 9687E9759E87C680DEC08116FB6F44EC73175390.cer (raw, json)
Hash identifier: PjsYhBaLZnZWYHSqiV70blK5Uu3+8i3QU8gFr1XjQN0=
Subject key identifier: 96:87:E9:75:9E:87:C6:80:DE:C0:81:16:FB:6F:44:EC:73:17:53:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4685F31DFE5B200CA52CDFA575959F86FD4FB1D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/9687E9759E87C680DEC08116FB6F44EC73175390.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 22 Apr 2025 12:25:52 +0000
Certificate not after: Tue 21 Apr 2026 12:30:52 +0000
Subordinate resources: AS: 28649
AS: 28668
IP: 45.6.148.0/22
IP: 45.175.112.0/22
IP: 45.180.212.0/22
IP: 131.0.200.0/22
IP: 131.161.164.0/22
IP: 138.118.96.0/22
IP: 138.204.88.0/22
IP: 138.255.68.0/22
IP: 143.137.88.0/22
IP: 143.255.224.0/22
IP: 143.255.232.0/22
IP: 168.121.64.0/22
IP: 168.196.28.0/22
IP: 168.227.32.0/22
IP: 170.0.20.0/22
IP: 170.79.208.0/22
IP: 170.80.148.0/22
IP: 170.83.120.0/22
IP: 170.83.140.0/22
IP: 170.231.104.0/22
IP: 170.238.48.0/22
IP: 170.244.252.0/22
IP: 177.52.0.0/20
IP: 177.125.200.0/22
IP: 177.131.64.0/19
IP: 179.108.0.0/20
IP: 179.108.176.0/21
IP: 179.125.128.0/17
IP: 186.195.208.0/20
IP: 186.209.64.0/20
IP: 186.211.16.0/20
IP: 186.249.128.0/19
IP: 186.251.224.0/22
IP: 187.85.32.0/20
IP: 187.94.160.0/19
IP: 187.95.160.0/20
IP: 187.109.128.0/19
IP: 189.1.144.0/20
IP: 189.36.224.0/20
IP: 189.50.96.0/20
IP: 189.91.224.0/19
IP: 189.124.32.0/20
IP: 189.124.64.0/20
IP: 191.243.248.0/21
IP: 191.253.32.0/21
IP: 200.236.192.0/20
IP: 200.236.224.0/19
IP: 201.33.64.0/20
IP: 201.33.192.0/20
IP: 201.77.112.0/20
IP: 201.77.176.0/20
IP: 2001:12b4::/32
IP: 2804:a4::/32
IP: 2804:474::/32
IP: 2804:4ec::/32
IP: 2804:5f4::/32
IP: 2804:868::/32
IP: 2804:a00::/32
IP: 2804:c28::/32
IP: 2804:c30::/32
IP: 2804:2894::/32
Validation: Failed, certificate revoked on Tue 06 May 2025 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:85:f3:1d:fe:5b:20:0c:a5:2c:df:a5:75:95:9f:86:fd:4f:b1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 22 12:25:52 2025 GMT
Not After : Apr 21 12:30:52 2026 GMT
Subject: CN=9687E9759E87C680DEC08116FB6F44EC73175390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:04:d9:d2:7f:b1:8d:ac:e2:1f:4d:01:fb:
82:77:c7:4e:d4:45:83:86:4f:e0:dc:84:0c:f0:51:
7e:70:96:db:eb:f8:9f:f8:49:8c:0d:2a:9e:75:b5:
3a:64:79:61:d0:6c:b9:40:5c:ff:d2:45:26:86:73:
7f:b6:55:08:37:a1:f2:08:4e:33:59:f3:71:f8:2f:
c1:e1:57:ad:6f:c7:0a:f2:b6:d4:9d:40:7a:72:cb:
79:4a:c7:4f:03:e0:d5:44:b3:85:c0:4e:e7:4b:38:
8b:32:b6:f1:86:e8:c7:19:e4:3d:14:03:54:8c:46:
89:40:b9:66:ad:ae:44:57:d7:55:71:ab:4c:48:71:
28:35:72:4e:53:5d:c4:f7:eb:5a:47:df:5d:3b:9a:
21:54:cc:a6:5f:e9:89:ae:41:a8:40:85:36:c7:9b:
52:ee:d6:79:3f:3f:82:16:2b:e2:12:23:e5:9f:38:
20:68:c7:89:33:c0:31:16:2c:dc:8c:99:95:59:76:
a5:9f:b3:9e:f8:68:4a:b5:05:6d:27:0c:7d:34:9f:
46:33:6a:41:2c:b6:26:ef:68:3b:68:53:8f:41:86:
c1:00:51:0c:7d:53:bd:0d:0e:de:8d:b7:5f:aa:78:
41:04:22:bd:62:5d:53:70:b0:7a:3c:d7:8e:0d:93:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:87:E9:75:9E:87:C6:80:DE:C0:81:16:FB:6F:44:EC:73:17:53:90
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/9687E9759E87C680DEC08116FB6F44EC73175390.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.148.0/22
45.175.112.0/22
45.180.212.0/22
131.0.200.0/22
131.161.164.0/22
138.118.96.0/22
138.204.88.0/22
138.255.68.0/22
143.137.88.0/22
143.255.224.0/22
143.255.232.0/22
168.121.64.0/22
168.196.28.0/22
168.227.32.0/22
170.0.20.0/22
170.79.208.0/22
170.80.148.0/22
170.83.120.0/22
170.83.140.0/22
170.231.104.0/22
170.238.48.0/22
170.244.252.0/22
177.52.0.0/20
177.125.200.0/22
177.131.64.0/19
179.108.0.0/20
179.108.176.0/21
179.125.128.0/17
186.195.208.0/20
186.209.64.0/20
186.211.16.0/20
186.249.128.0/19
186.251.224.0/22
187.85.32.0/20
187.94.160.0/19
187.95.160.0/20
187.109.128.0/19
189.1.144.0/20
189.36.224.0/20
189.50.96.0/20
189.91.224.0/19
189.124.32.0/20
189.124.64.0/20
191.243.248.0/21
191.253.32.0/21
200.236.192.0/20
200.236.224.0/19
201.33.64.0/20
201.33.192.0/20
201.77.112.0/20
201.77.176.0/20
IPv6:
2001:12b4::/32
2804:a4::/32
2804:474::/32
2804:4ec::/32
2804:5f4::/32
2804:868::/32
2804:a00::/32
2804:c28::/32
2804:c30::/32
2804:2894::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28649
28668
Signature Algorithm: sha256WithRSAEncryption
a0:21:c5:96:9e:c2:8f:31:85:8b:f0:4a:f9:ad:cd:74:dc:17:
60:7a:27:6f:1e:45:23:de:15:de:44:7a:b8:49:46:c5:fd:de:
ce:dc:eb:da:10:2f:2b:05:3b:0e:02:b9:a9:77:94:4d:b0:fc:
a4:86:a3:a1:0a:c2:5e:69:2a:b7:c5:c1:f0:de:ab:cc:ba:0b:
d1:75:68:c6:ea:0b:18:80:e2:9f:20:a6:73:7a:fd:36:96:a6:
e5:b5:50:76:9f:56:0c:bf:12:d3:53:82:84:10:9a:41:0e:93:
32:54:68:e4:c1:b9:33:80:b5:b1:61:3c:ef:25:1a:c8:bf:40:
d0:3a:5d:95:bb:62:63:bb:d3:c8:09:bc:52:e1:38:eb:ac:d4:
e4:53:2d:f2:46:ce:7c:6c:35:6f:6a:94:b6:f6:5d:c4:f3:f2:
53:b0:3f:32:f7:48:26:1d:b2:43:3e:b0:9c:98:1d:2a:39:e6:
ab:87:5d:65:f4:f5:31:7d:25:31:e5:f5:eb:4c:7c:61:59:2b:
c9:16:ef:56:cf:d5:7c:48:f3:07:01:c4:d1:d8:62:cc:b2:f3:
57:24:fe:21:f8:6f:1c:c6:5a:ff:7d:1c:96:14:8d:d6:8d:7b:
e8:b3:63:62:b6:2e:d8:bf:3f:c6:5e:a6:a1:b7:cc:b3:f7:d4:
dd:e0:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:59:14 2025 by rpki-client