Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.cer
File:                     ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.cer (raw, json)
Hash identifier:          t44GFDNtnea/LoGLfe6Fdn8QKiZqwwl2sOEp+nK/i90=
Subject key identifier:   ED:7A:28:B5:CA:14:6B:E4:F2:06:7D:18:78:68:9F:7A:B7:5A:C3:F5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E7AFFE400D1413736DA3A576245936AF60C1EC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Mar 2025 14:08:10 +0000
Certificate not after:    Mon 30 Mar 2026 14:13:10 +0000
Subordinate resources:    AS: 267992
                          IP: 45.167.68.0/22
                          IP: 2804:5658::/32

Validation:               Failed, certificate revoked on Mon 14 Apr 2025 01:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7a:ff:e4:00:d1:41:37:36:da:3a:57:62:45:93:6a:f6:0c:1e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 31 14:08:10 2025 GMT
            Not After : Mar 30 14:13:10 2026 GMT
        Subject: CN=ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:6c:fd:a6:58:bf:06:2f:20:fe:01:55:30:
                    54:d3:6f:ad:52:90:31:a5:e6:8d:c7:4f:b4:17:ae:
                    ad:5d:b7:f2:3f:90:99:1a:6d:44:5f:34:86:60:25:
                    fd:dd:de:6c:6c:06:54:dc:6d:19:6c:fc:24:f3:09:
                    30:3b:74:b7:6e:f7:9b:5c:63:13:25:b9:d2:36:11:
                    2d:93:3c:43:fa:78:9f:fe:a8:ae:6b:bb:5c:11:79:
                    68:50:09:da:59:1f:05:54:06:26:1e:f7:1d:87:82:
                    87:08:fd:72:2d:ca:b6:1f:93:35:00:85:c2:05:a1:
                    3d:30:f8:ae:ab:4c:d1:92:cf:3d:42:39:a3:b0:94:
                    f1:50:75:9c:40:3a:3a:0b:c4:7b:6d:a2:cf:dc:21:
                    af:36:29:49:a3:b2:71:b4:3f:3c:7f:bb:60:2d:7f:
                    ce:d5:8b:e5:08:48:02:9b:ab:0b:23:88:e3:2c:ee:
                    22:d0:09:99:5a:83:54:bd:a9:62:cf:9b:e4:63:a0:
                    c3:3f:79:39:4d:56:5a:cf:9f:3d:37:13:7b:fe:4f:
                    ab:11:7a:65:7f:77:9c:da:ff:dd:31:08:5b:08:82:
                    c2:d7:8c:19:e2:b4:aa:47:54:b0:b5:e4:26:cb:47:
                    f2:82:de:43:f7:d3:3f:14:f2:c0:96:bf:89:ae:53:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:7A:28:B5:CA:14:6B:E4:F2:06:7D:18:78:68:9F:7A:B7:5A:C3:F5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.68.0/22
                IPv6:
                  2804:5658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267992

    Signature Algorithm: sha256WithRSAEncryption
         02:70:06:a3:59:70:fa:ce:97:cf:d5:7a:eb:cc:32:e4:77:ca:
         de:eb:07:6d:cb:f9:e1:3c:0c:80:b2:aa:bb:6c:a1:10:2a:2d:
         27:57:db:14:de:d1:3b:de:73:e1:48:67:fb:9d:e4:ce:a5:79:
         df:f8:86:a4:54:dd:ed:c5:c3:86:d3:5c:26:99:89:06:9b:41:
         c2:9d:97:93:67:b7:88:2d:93:74:08:d7:65:53:c1:ba:95:36:
         e8:8f:e8:d2:81:eb:95:29:50:d5:94:cf:88:c3:cb:16:f7:ea:
         bb:fb:82:10:09:9b:df:ef:1f:a8:3c:e9:c2:1d:15:ca:3d:09:
         f7:19:84:a8:1f:ea:d3:c6:41:0a:68:19:1a:d4:31:f8:2c:4b:
         db:ab:f5:a3:45:11:49:56:62:72:f9:91:f0:cf:32:56:1c:b2:
         eb:ce:35:a3:64:0b:d1:77:51:1a:32:b8:07:2e:aa:2b:c6:23:
         ec:61:8f:35:c3:f8:77:4a:0a:af:ec:1a:0f:9c:6a:8d:be:4f:
         a1:65:e9:7e:e7:68:cb:b5:72:1b:94:50:f4:ee:8d:60:03:6e:
         1d:bd:e7:86:32:9c:4b:e1:28:18:ec:62:e7:cc:dc:2f:64:55:
         17:98:2b:28:d5:3c:a2:8e:ed:f7:3a:10:17:09:ae:23:f9:e2:
         50:3a:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net