Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
File:                     0234F91A291644025C2C2460D355272A046B58DD.cer (raw, json)
Hash identifier:          MdLx6o7Ty0+js7pPGV3oz550TfY8CNGCcomMW71pQ/4=
Subject key identifier:   02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E49DC71198219DB9584FDCD1FD5569D258702C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jul 2024 17:57:12 +0000
Certificate not after:    Mon 21 Jul 2025 18:02:12 +0000
Subordinate resources:    AS: 28287
                          AS: 262272
                          IP: 45.70.232.0/22
                          IP: 138.36.180.0/22
                          IP: 138.118.120.0/22
                          IP: 167.249.176.0/22
                          IP: 168.194.60.0/22
                          IP: 177.21.128.0/20
                          IP: 177.130.96.0/20
                          IP: 177.154.32.0/20
                          IP: 179.127.64.0/21
                          IP: 187.1.16.0/20
                          IP: 187.120.128.0/19
                          IP: 189.124.80.0/20
                          IP: 201.49.192.0/20
                          IP: 2804:1080::/32
                          IP: 2804:21f8::/32

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 13:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:49:dc:71:19:82:19:db:95:84:fd:cd:1f:d5:56:9d:25:87:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 17:57:12 2024 GMT
            Not After : Jul 21 18:02:12 2025 GMT
        Subject: CN=0234F91A291644025C2C2460D355272A046B58DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:84:1d:56:cc:9c:ed:79:8a:63:42:7c:08:
                    66:cd:6b:0a:11:14:4d:d0:c2:c8:cc:78:71:be:a7:
                    95:a1:e2:ff:f8:95:90:e8:42:62:0b:eb:9c:21:01:
                    5e:51:87:ed:38:2c:f5:d3:11:1f:dc:5a:5b:5a:a6:
                    58:2d:2b:11:50:cc:b1:0d:64:eb:e9:e1:87:93:35:
                    0b:86:1d:0d:9c:2e:57:25:98:18:e1:39:1b:f9:cc:
                    a0:1d:b7:97:50:85:b1:b9:b8:3f:0e:c2:9e:90:21:
                    3a:4d:65:96:ba:52:ec:f5:f1:60:91:a4:d4:ca:6f:
                    7d:d0:5d:85:d6:c7:67:c9:8b:f6:ca:53:85:e2:0e:
                    99:a9:53:6f:c0:9a:dd:67:ac:04:35:65:01:1e:71:
                    73:09:7a:ab:71:28:8f:ce:5a:ce:f4:b1:69:d4:3c:
                    8e:fc:48:ca:1a:86:63:24:fb:53:3e:c6:09:c5:20:
                    4c:63:0e:4f:98:e9:08:30:b9:30:28:fe:52:de:e6:
                    03:96:dd:d6:89:10:6c:b6:3e:e4:a4:8f:89:25:b0:
                    2a:cd:f7:db:2b:5e:06:4b:45:af:9f:34:0a:8c:e6:
                    f8:62:51:94:c8:08:e1:85:fc:1a:64:43:dd:bd:28:
                    b6:e7:f9:5b:ec:5a:f2:7d:81:a1:78:94:90:80:f7:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.232.0/22
                  138.36.180.0/22
                  138.118.120.0/22
                  167.249.176.0/22
                  168.194.60.0/22
                  177.21.128.0/20
                  177.130.96.0/20
                  177.154.32.0/20
                  179.127.64.0/21
                  187.1.16.0/20
                  187.120.128.0/19
                  189.124.80.0/20
                  201.49.192.0/20
                IPv6:
                  2804:1080::/32
                  2804:21f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28287
                  262272

    Signature Algorithm: sha256WithRSAEncryption
         84:74:86:95:5c:05:4c:eb:70:17:79:45:3f:68:c4:11:b3:7d:
         6e:20:fe:10:4d:da:e1:46:7d:42:4d:12:55:5c:e7:5c:b3:fb:
         d9:06:fe:e5:52:1b:5b:bc:ec:c3:db:f4:c5:3a:e8:35:ba:7e:
         23:67:b9:6e:9d:f6:7c:ff:02:85:f0:94:41:2a:44:c7:e9:57:
         52:34:56:8d:75:61:cc:b6:af:04:c4:48:89:8d:7a:6f:71:22:
         02:c1:24:09:1b:7c:80:cd:57:96:a5:9a:f6:2b:24:dc:7e:70:
         02:40:e2:e9:b5:54:d2:95:29:2a:8c:c5:f5:04:31:ed:ca:87:
         d2:8f:31:53:71:f6:26:1f:1f:9d:36:65:be:3c:a3:76:52:2f:
         0d:13:75:14:90:e8:81:63:4e:47:e2:de:68:4d:50:e9:0e:6c:
         53:80:67:0f:1a:85:48:2b:7d:c4:d9:5b:a5:27:93:6b:91:c0:
         7b:2f:1e:89:2e:52:a6:9b:c6:8a:47:14:6d:8b:b0:ba:58:51:
         73:8d:ef:a8:06:76:65:1c:d2:10:0c:2b:d3:b1:1b:1b:31:01:
         a4:8a:76:87:58:97:ca:60:ab:07:55:05:a8:a9:9c:c2:2b:17:
         3b:95:30:2c:ff:1a:58:77:68:d3:85:63:fd:15:a3:b9:d2:f7:
         8e:fe:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:33 2024 by rpki-client on console-ams.rpki-client.org