Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF0B5F25976F064D90E18C539238F8C5EE00D07F.cer
File:                     EF0B5F25976F064D90E18C539238F8C5EE00D07F.cer (raw, json)
Hash identifier:          0spYiwUCPACr1NE2PGaF2sHIJZUOXQnT3b+2E7d3ZhM=
Subject key identifier:   EF:0B:5F:25:97:6F:06:4D:90:E1:8C:53:92:38:F8:C5:EE:00:D0:7F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71F71D746460157B0FCFD1FC2267AE02F7820C78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/EF0B5F25976F064D90E18C539238F8C5EE00D07F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Feb 2025 17:23:42 +0000
Certificate not after:    Thu 05 Feb 2026 17:28:42 +0000
Subordinate resources:    AS: 271582
                          IP: 45.165.180.0/22
                          IP: 2804:7dc8::/32

Validation:               Failed, certificate revoked on Sun 23 Feb 2025 23:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f7:1d:74:64:60:15:7b:0f:cf:d1:fc:22:67:ae:02:f7:82:0c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 17:23:42 2025 GMT
            Not After : Feb  5 17:28:42 2026 GMT
        Subject: CN=EF0B5F25976F064D90E18C539238F8C5EE00D07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:45:76:30:85:e7:ac:ff:b9:bc:b6:52:45:
                    19:58:bb:a7:05:6c:aa:d1:50:65:ff:39:87:d6:d0:
                    e9:99:61:7b:ee:ad:05:78:d5:17:8c:dd:9f:35:8e:
                    a6:96:b7:db:97:a7:a2:c1:73:c6:e2:bd:40:4b:20:
                    e5:a8:ef:ab:d3:2e:54:28:2a:88:31:0e:da:46:d2:
                    7f:5b:19:60:7a:d1:60:ea:59:c7:8e:45:90:7e:fd:
                    ed:e2:eb:45:bc:1e:c2:8b:3b:a5:29:06:56:5f:e8:
                    1b:61:e8:5f:9b:26:40:c8:36:44:08:b0:73:0d:ff:
                    33:48:ff:d4:fc:fc:ce:79:09:40:90:cd:ae:e4:15:
                    af:61:9e:84:2e:54:39:5b:80:78:6e:f3:13:20:3d:
                    f5:ac:0b:96:6f:5d:4d:ee:42:c7:f8:79:e3:45:8d:
                    73:d9:eb:64:e6:ce:57:ea:16:9a:8b:55:52:54:6c:
                    d2:9c:b3:c2:fa:be:71:29:2f:6f:e4:d2:b6:25:4d:
                    25:14:6d:16:da:24:59:44:bf:4d:6e:49:88:51:81:
                    3e:46:9f:ce:d3:6c:b8:c1:a8:90:87:3d:8d:7f:b1:
                    4f:a7:0d:21:12:19:f8:e1:61:7a:b4:7d:26:ab:ee:
                    a6:3b:39:79:d3:ba:62:05:8e:eb:a3:74:e0:3b:27:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:0B:5F:25:97:6F:06:4D:90:E1:8C:53:92:38:F8:C5:EE:00:D0:7F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/EF0B5F25976F064D90E18C539238F8C5EE00D07F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.180.0/22
                IPv6:
                  2804:7dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271582

    Signature Algorithm: sha256WithRSAEncryption
         aa:28:34:cf:dd:92:df:31:2e:ee:c0:44:28:cc:e1:2b:35:0c:
         64:02:be:28:86:44:cb:96:97:5f:ba:22:94:d4:1a:ef:c2:76:
         14:5d:b7:77:ab:57:95:3a:98:79:e9:c8:26:57:c5:99:48:d4:
         b8:9b:c3:ca:5f:7e:40:ff:1c:e7:fe:7d:c0:68:b9:2a:51:60:
         61:67:7c:ac:be:fc:ed:a9:ca:1c:8b:0a:4a:81:d9:1b:d0:2e:
         fa:61:36:77:72:28:9e:4d:3e:ed:b9:bb:95:6e:df:a8:ac:3e:
         c2:6b:1f:4a:bb:b0:c7:cc:12:a7:dd:0e:83:4e:62:6f:50:2c:
         3d:c4:59:68:93:d4:e3:e2:9e:3c:67:a1:4b:a4:2d:a5:6a:bb:
         89:a3:0b:07:02:92:b2:b2:28:d7:c0:b4:4c:48:f3:ca:bf:31:
         39:b7:85:c9:67:e6:6c:ec:80:a6:7e:fa:8d:8b:f4:e3:e7:0b:
         a3:8b:c7:77:42:83:b1:0f:37:5b:b9:e8:9b:c6:b1:e6:d1:6c:
         6f:8d:36:d3:23:8d:92:24:50:28:ae:be:28:2c:b0:f6:f9:d0:
         08:39:cd:97:44:66:af:94:83:e7:90:e4:c1:e5:de:67:89:82:
         3c:a1:fe:c2:b8:f1:60:cd:28:2c:9d:9d:ae:be:75:21:3b:46:
         f4:b9:d4:89
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUcfcddGRgFXsPz9H8ImeuAveCDHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMDYxNzIzNDJaFw0yNjAyMDUxNzI4NDJaMDMxMTAvBgNV
BAMTKEVGMEI1RjI1OTc2RjA2NEQ5MEUxOEM1MzkyMzhGOEM1RUUwMEQwN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dEV2MIXnrP+5vLZSRRlYu6cF
bKrRUGX/OYfW0OmZYXvurQV41ReM3Z81jqaWt9uXp6LBc8bivUBLIOWo76vTLlQo
KogxDtpG0n9bGWB60WDqWceORZB+/e3i60W8HsKLO6UpBlZf6Bth6F+bJkDINkQI
sHMN/zNI/9T8/M55CUCQza7kFa9hnoQuVDlbgHhu8xMgPfWsC5ZvXU3uQsf4eeNF
jXPZ62TmzlfqFpqLVVJUbNKcs8L6vnEpL2/k0rYlTSUUbRbaJFlEv01uSYhRgT5G
n87TbLjBqJCHPY1/sU+nDSESGfjhYXq0fSar7qY7OXnTumIFjuujdOA7JyC1AgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvC18ll28GTZDh
jFOSOPjF7gDQfzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVzhi
NzhGWHZrUVdBdWgxNWdpaHByOVhScm0zSkFFN2JqSE1pWkwxRFl3QS8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVzhi
NzhGWHZrUVdBdWgxNWdpaHByOVhScm0zSkFFN2JqSE1pWkwxRFl3QS8wL0VGMEI1
RjI1OTc2RjA2NEQ5MEUxOEM1MzkyMzhGOEM1RUUwMEQwN0YubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi2ltDANBAIAAjAHAwUAKAR9yDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEJN4wDQYJKoZIhvcNAQELBQADggEBAKooNM/dkt8xLu7ARCjM
4Ss1DGQCviiGRMuWl1+6IpTUGu/CdhRdt3erV5U6mHnpyCZXxZlI1Libw8pffkD/
HOf+fcBouSpRYGFnfKy+/O2pyhyLCkqB2RvQLvphNndyKJ5NPu25u5Vu36isPsJr
H0q7sMfMEqfdDoNOYm9QLD3EWWiT1OPinjxnoUukLaVqu4mjCwcCkrKyKNfAtExI
88q/MTm3hcln5mzsgKZ++o2L9OPnC6OLx3dCg7EPN1u56JvGsebRbG+NNtMjjZIk
UCiuvigssPb50Ag5zZdEZq+Ug+eQ5MHl3meJgjyh/sK48WDNKCydna6+dSE7RvS5
1Ik=
-----END CERTIFICATE-----
Generated at Tue Feb 25 03:42:56 2025 by rpki-client on console.sobornost.net