Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/00F177A532971DACF94FC9D35094F3F30F7DB522.cer
File:                     00F177A532971DACF94FC9D35094F3F30F7DB522.cer (raw, json)
Hash identifier:          rem895Gzy7L+ATD0K01cMCBy5ugKCSEsod+GHJCPEHE=
Subject key identifier:   00:F1:77:A5:32:97:1D:AC:F9:4F:C9:D3:50:94:F3:F3:0F:7D:B5:22
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D6068C42F550705E00DA75B9288C6EAEFBD5E90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/00F177A532971DACF94FC9D35094F3F30F7DB522.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Sep 2024 14:10:22 +0000
Certificate not after:    Thu 18 Sep 2025 14:15:22 +0000
Subordinate resources:    AS: 266965
                          IP: 45.226.60.0/22
                          IP: 2804:460c::/32

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 19:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:60:68:c4:2f:55:07:05:e0:0d:a7:5b:92:88:c6:ea:ef:bd:5e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 19 14:10:22 2024 GMT
            Not After : Sep 18 14:15:22 2025 GMT
        Subject: CN=00F177A532971DACF94FC9D35094F3F30F7DB522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:55:03:58:ca:9a:83:08:a0:b3:43:2a:6e:
                    79:9e:56:c5:2b:db:8b:0e:8d:cd:b2:a9:cf:22:d8:
                    e4:9f:56:79:31:b3:50:05:b3:ce:85:59:b6:42:40:
                    c5:ed:6b:57:e5:b1:a8:98:93:8e:48:5b:4e:84:6e:
                    56:27:f2:6d:a2:0d:d8:72:0f:24:93:0a:3b:59:09:
                    b8:e4:9c:76:ed:a0:b7:36:ab:9b:94:cb:cc:e1:58:
                    f5:50:22:0a:af:a8:14:6e:9e:38:90:c6:b9:72:10:
                    4c:ce:f4:c1:9e:c6:47:86:3d:c8:67:a0:f8:25:b5:
                    ef:c6:30:d2:a0:50:80:52:b2:24:72:be:fd:0c:8e:
                    96:27:77:7b:17:18:72:c4:5f:4f:f6:3d:cb:85:dc:
                    6d:26:75:d7:3d:52:42:9d:a0:66:60:0d:c9:17:9b:
                    58:51:0f:6e:e8:71:00:8c:37:e5:ac:94:fa:d4:c1:
                    ed:7d:ea:3a:1e:a1:32:e2:49:a8:29:b1:ea:b9:28:
                    49:19:9a:70:cf:2f:37:8f:76:eb:2a:d1:93:1f:6e:
                    70:d0:4f:73:38:ac:a3:c6:8a:d2:88:b6:ec:bb:0d:
                    0d:50:09:28:db:d0:96:36:3b:69:47:1b:3b:37:8d:
                    9e:84:35:83:1f:81:78:31:52:f6:27:46:ad:06:a9:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:F1:77:A5:32:97:1D:AC:F9:4F:C9:D3:50:94:F3:F3:0F:7D:B5:22
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/00F177A532971DACF94FC9D35094F3F30F7DB522.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.60.0/22
                IPv6:
                  2804:460c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266965

    Signature Algorithm: sha256WithRSAEncryption
         a2:88:15:7b:8c:74:83:c6:31:f5:8a:00:ab:9e:ef:c5:b7:33:
         1f:56:cf:51:21:13:81:99:93:11:3d:a9:86:aa:4d:7b:49:ff:
         56:c0:e6:3b:39:11:e5:9a:64:3a:ec:e7:81:64:96:45:6c:22:
         55:db:f6:6a:a8:83:b0:b0:b1:af:cc:af:de:4d:f5:f0:4c:97:
         35:b4:9b:90:c1:08:3f:c3:d9:80:2c:66:04:bf:af:2c:50:16:
         67:36:87:56:93:3a:ff:fd:97:b0:87:89:14:57:ff:21:0e:16:
         4b:5b:79:0d:b6:1b:32:74:ff:cb:c6:37:20:09:1c:5c:51:04:
         bf:3e:c6:92:b4:db:12:73:34:23:67:31:a7:11:d1:03:32:9c:
         c0:d3:73:84:9f:57:40:26:d2:c6:5d:fa:5b:86:28:42:d5:67:
         42:13:ad:03:8e:22:c5:10:16:13:11:56:c7:64:cb:a4:13:f3:
         01:17:45:12:4f:0b:0b:3b:14:41:3b:1b:48:17:33:75:e0:35:
         b1:24:8a:f3:e5:27:46:df:8c:18:8d:73:cf:5a:d4:22:1f:ce:
         95:15:3b:00:f1:c9:6e:4d:be:16:17:8a:9c:12:07:42:91:ba:
         ec:6b:47:01:5b:52:63:b0:65:32:1a:8d:10:31:81:07:ec:2c:
         65:7c:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:36:39 2024 by rpki-client on console-fra.rpki-client.org