Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/77ECEA714D52EA899257544C9C30919818871F72.cer
File:                     77ECEA714D52EA899257544C9C30919818871F72.cer (raw, json)
Hash identifier:          /AlPcckk5fD3CgwQAZSgfqCj4hIjdela/qfemyir+EI=
Subject key identifier:   77:EC:EA:71:4D:52:EA:89:92:57:54:4C:9C:30:91:98:18:87:1F:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       42DD272F13FA144B91EC5560C4FC5E93C12C28C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/77ECEA714D52EA899257544C9C30919818871F72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 Apr 2024 01:49:33 +0000
Certificate not after:    Sat 19 Apr 2025 01:54:33 +0000
Subordinate resources:    AS: 266971
                          IP: 45.225.8.0/22
                          IP: 2804:4624::/32

Validation:               Failed, certificate revoked on Sat 20 Apr 2024 03:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:dd:27:2f:13:fa:14:4b:91:ec:55:60:c4:fc:5e:93:c1:2c:28:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 20 01:49:33 2024 GMT
            Not After : Apr 19 01:54:33 2025 GMT
        Subject: CN=77ECEA714D52EA899257544C9C30919818871F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:df:73:22:35:36:b4:23:79:76:b4:fc:83:
                    1a:2e:88:a9:cc:d2:a4:f3:50:ff:16:f1:ae:9e:db:
                    ff:1d:9f:42:bc:bf:2b:2c:4d:f6:61:34:69:f1:b5:
                    69:c8:58:a6:98:58:2f:08:9a:bc:53:09:61:93:ac:
                    52:af:22:c6:10:f1:79:df:f7:19:21:b3:0f:71:12:
                    30:d5:b5:0c:2d:94:c8:c6:1f:52:53:dd:8c:ef:51:
                    85:df:fc:4b:a8:24:93:05:a9:f1:67:65:30:cb:d0:
                    ce:79:18:be:f9:4a:4f:e4:87:68:fa:a5:de:ff:06:
                    85:de:55:67:12:93:72:d3:56:6d:86:d6:aa:ac:68:
                    43:9d:76:b3:4e:f7:ad:ea:18:dd:6b:dd:60:0f:4b:
                    38:0f:63:30:6a:c6:f6:73:3e:e4:c7:00:bf:e8:d7:
                    34:6f:a3:28:19:23:9a:e2:2c:d2:71:00:97:0d:3d:
                    57:25:cb:ca:19:03:a1:34:31:85:c2:bb:b5:a3:82:
                    96:aa:77:e8:67:f8:28:3d:c2:9c:d0:cb:39:4a:12:
                    99:b8:05:75:3f:b4:9d:95:c7:1d:7a:21:7e:11:83:
                    e0:77:91:3b:85:3e:d4:90:88:37:71:f9:52:5c:a7:
                    55:98:de:c0:e6:98:ec:9e:a1:8d:f9:b4:63:a7:a7:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:EC:EA:71:4D:52:EA:89:92:57:54:4C:9C:30:91:98:18:87:1F:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/77ECEA714D52EA899257544C9C30919818871F72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.8.0/22
                IPv6:
                  2804:4624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266971

    Signature Algorithm: sha256WithRSAEncryption
         bc:9d:25:dd:2f:cf:68:f3:d9:b5:68:4b:d1:62:bb:b0:55:f5:
         20:40:6c:d3:34:3a:f7:47:37:e3:e3:5e:af:fa:e9:97:e0:dd:
         ba:17:8d:04:4b:5a:31:4d:8a:b7:17:69:70:4b:af:e5:b4:c3:
         90:d8:07:3e:28:1d:81:da:0b:14:99:d4:34:5b:26:62:ec:3d:
         85:a5:51:e2:bb:a5:d1:4f:dc:c2:ac:e9:b4:d7:0d:e3:11:9b:
         ec:79:0d:a2:84:17:9a:b7:e3:90:f0:af:b9:aa:25:53:49:18:
         e0:8f:fa:40:3b:3c:b0:64:a2:57:8c:48:6d:9c:8a:e9:b6:90:
         22:a6:34:b1:6e:b6:49:23:84:f2:54:89:4b:d8:30:89:97:e2:
         e3:a0:32:45:c2:06:0c:45:22:4a:6c:9a:73:69:03:75:95:df:
         44:64:5d:4e:ee:16:c5:6c:5a:5d:fa:e0:cc:ad:22:57:38:95:
         02:ca:a4:f3:a0:de:e2:9f:65:a0:ac:95:5d:4c:bd:9d:c7:77:
         4c:7d:01:36:58:9f:34:51:dc:84:3a:7e:3f:4b:ed:59:0d:4e:
         5f:ed:09:72:fb:93:61:63:d0:62:52:97:8b:f8:42:18:28:a1:
         73:ab:ca:09:c4:72:96:4b:de:1b:e0:32:7b:e1:4e:ff:8e:5b:
         f6:23:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 07:46:11 2024 by rpki-client on console.sobornost.net