Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer
File:                     8C50B18948FB749C5395482072FE7285BFCC98F1.cer (raw, json)
Hash identifier:          jKTyYJMu0g3rMHLFYNRFCPn5Pb+5yUHo5DC7KU8F3Yg=
Subject key identifier:   8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C8131817058EB2B2792C2BD84ED4CE88AB8AD63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/8C50B18948FB749C5395482072FE7285BFCC98F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Feb 2023 23:44:03 +0000
Certificate not after:    Sat 24 Feb 2024 23:49:03 +0000
Subordinate resources:    AS: 271557
                          IP: 181.233.188.0/22
                          IP: 2804:7d60::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:81:31:81:70:58:eb:2b:27:92:c2:bd:84:ed:4c:e8:8a:b8:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 25 23:44:03 2023 GMT
            Not After : Feb 24 23:49:03 2024 GMT
        Subject: CN=8C50B18948FB749C5395482072FE7285BFCC98F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:3a:96:31:e5:cd:23:fc:64:f5:28:bd:b3:
                    7a:26:f5:12:e6:86:10:df:a6:ce:1f:d8:e3:6c:ea:
                    93:15:74:f6:42:b1:e0:54:95:da:64:01:4a:0c:73:
                    f4:74:bf:17:d0:46:aa:24:6a:1d:a4:5b:60:34:71:
                    46:6c:36:7a:84:1b:8d:aa:41:31:47:ac:2b:e5:97:
                    ff:3d:d7:20:e2:ab:a6:9a:2e:6f:04:1b:5f:27:0d:
                    a8:69:94:ae:45:f3:81:f2:6f:1a:dc:b8:98:1a:9d:
                    79:b6:f7:59:42:a9:3b:ed:36:94:d5:da:2f:bd:d0:
                    48:17:77:55:23:d0:a4:14:73:17:45:eb:14:35:94:
                    2a:be:2e:7f:90:17:40:9b:42:f8:c4:3b:3e:79:2d:
                    fa:b3:bf:8c:bb:c6:e4:6a:6d:37:ff:f1:d7:b5:28:
                    d1:c2:82:c1:e3:41:01:e5:fa:17:f3:8d:04:30:aa:
                    61:7f:f3:ba:d1:3e:90:f3:9c:69:89:3f:51:7a:06:
                    52:b1:d6:f8:f6:41:be:a2:fa:42:f3:9f:48:f2:d4:
                    2b:28:f3:0a:b1:27:aa:3a:95:2b:ba:7d:8e:90:24:
                    9d:8a:bc:c4:bf:41:03:b6:ee:04:15:a6:e2:8a:3e:
                    3b:da:19:3e:29:a6:9c:d1:18:ae:9f:81:53:64:39:
                    53:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/8C50B18948FB749C5395482072FE7285BFCC98F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/22
                IPv6:
                  2804:7d60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271557

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:11:f1:9d:4d:bb:c6:2e:05:c2:c7:4e:2e:48:a0:3a:13:
         7d:36:a7:d4:65:71:15:e0:b6:6e:02:05:60:1f:07:88:68:5a:
         1a:da:28:02:9a:41:96:12:b9:53:d6:22:e2:9b:cc:c5:a2:be:
         71:3d:e7:bc:9c:86:81:09:0e:e0:9f:0c:b7:95:dd:2a:65:bb:
         45:50:f3:30:b9:f4:9a:a8:d7:6d:3a:10:b7:94:20:8d:87:e8:
         14:87:94:7b:06:05:19:cb:d1:7a:bb:73:1f:86:79:30:c8:a3:
         67:89:93:59:45:4f:92:c7:4a:48:87:2f:ec:59:da:d8:ae:c3:
         64:a6:d5:68:c0:91:e6:9b:c1:21:98:0d:b4:e4:b4:da:c8:82:
         ec:f6:44:2a:74:e2:43:67:71:85:bc:3b:1f:4c:5e:a8:c8:39:
         08:f2:f8:8d:69:0f:87:c9:d9:84:23:24:8b:fb:6e:87:9a:56:
         75:a0:78:82:54:19:ab:03:8a:03:94:e3:c8:1c:08:ea:46:42:
         4b:ea:b1:89:22:53:7e:27:6d:89:87:78:fe:63:18:dc:1d:4f:
         a2:8b:24:35:2e:54:ca:1b:b6:01:b9:9a:4c:ab:67:a1:42:4e:
         a3:e5:f6:e3:4d:bc:1d:5f:72:4f:0a:9f:e5:f2:6d:96:85:cc:
         44:af:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:19:06 2023 by rpki-client on console-fra.rpki-client.org