Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.cer
File:                     02EF807C172BDA9EBD65360B768B355F949CBE4C.cer (raw, json)
Hash identifier:          +RL1tpfAAgnI/5jexj6GYgY+9/53yKlpIxR927Tr4YY=
Subject key identifier:   02:EF:80:7C:17:2B:DA:9E:BD:65:36:0B:76:8B:35:5F:94:9C:BE:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6285FD763E69E3272EE925306E94067C80030591
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:13:42 +0000
Certificate not after:    Wed 02 Apr 2025 21:18:42 +0000
Subordinate resources:    AS: 268078
                          IP: 45.168.176.0/22
                          IP: 2804:57a8::/32

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 15:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:85:fd:76:3e:69:e3:27:2e:e9:25:30:6e:94:06:7c:80:03:05:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:13:42 2024 GMT
            Not After : Apr  2 21:18:42 2025 GMT
        Subject: CN=02EF807C172BDA9EBD65360B768B355F949CBE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:0a:0f:4d:28:84:e6:e0:23:e6:e3:00:48:
                    18:9d:a2:fc:eb:bc:24:34:68:ab:ae:40:de:25:f8:
                    5c:47:fc:f2:d5:2c:a0:8c:30:87:c8:c0:f2:21:9c:
                    79:88:fc:7f:d1:13:a5:52:ea:7a:b3:88:2e:b3:e0:
                    4f:ae:aa:ef:ca:ee:b1:b5:3c:d2:5c:ba:90:82:e3:
                    41:2d:af:bb:20:c7:cc:63:a2:6d:83:2b:be:f3:fe:
                    0a:81:e5:02:ac:6a:f0:6e:4c:eb:0f:dc:94:2f:2b:
                    77:fd:60:a2:31:28:eb:dc:df:4f:07:b6:eb:2f:0e:
                    a3:94:01:4b:85:24:f3:0c:b0:4d:64:30:7d:f8:9d:
                    5d:97:8b:3d:6b:15:20:1c:23:43:d9:ba:fd:98:71:
                    91:da:54:71:3d:bb:7d:8f:3b:56:b3:3e:04:5f:68:
                    3e:11:f3:b3:7b:96:55:3e:03:b0:62:6b:63:77:5e:
                    89:6e:f8:81:9e:bc:1e:a0:f7:f9:0b:e3:77:01:5b:
                    a1:25:bc:76:b1:0b:1d:cc:71:af:79:bc:35:0f:0b:
                    40:05:77:a7:b8:f0:f2:82:e2:d3:f4:ca:f9:a7:51:
                    06:b6:18:ed:c3:19:44:cb:d9:4e:ce:26:3b:90:65:
                    e2:4c:d7:e8:95:3d:b3:c0:f0:fb:1e:9f:66:18:39:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:EF:80:7C:17:2B:DA:9E:BD:65:36:0B:76:8B:35:5F:94:9C:BE:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.176.0/22
                IPv6:
                  2804:57a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268078

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:61:0f:9d:17:b3:17:40:01:f2:0e:53:4a:59:89:9f:64:
         43:4c:30:15:56:cc:3a:67:48:6d:52:51:82:f4:11:7e:3b:53:
         aa:d6:12:01:ad:4c:ac:37:e7:a9:37:46:60:1a:6f:3b:f2:98:
         66:e7:39:af:93:44:fa:7e:45:b5:e3:a7:a7:7a:48:40:03:9d:
         d5:c1:de:dc:1c:6c:db:8d:d3:38:91:10:5f:71:83:0f:1b:94:
         da:ba:a0:5c:3d:ec:15:7e:f3:55:ec:2b:5a:b9:fb:45:c3:4e:
         d5:37:e0:e3:e7:08:32:43:8f:9a:62:15:f0:b9:8c:cc:66:9c:
         41:21:81:fb:57:c1:9b:c8:e7:01:e7:b8:c4:ea:a4:a1:64:33:
         e4:9c:d5:d2:e8:b4:a4:b6:a3:7f:79:b5:a7:bd:81:19:d2:7e:
         5c:0c:2b:d8:6a:b9:f8:8c:bb:9e:89:cb:ea:5a:22:ce:90:70:
         a9:e0:bf:cc:57:41:8c:41:27:c4:e8:c9:5d:f2:17:25:30:75:
         2c:fe:95:f3:b4:2d:74:77:e3:0a:d5:8f:2c:bc:6e:ea:20:f8:
         f6:61:a6:fa:19:8e:17:2a:12:5d:d0:8c:40:fb:c5:e2:11:34:
         ba:27:1a:29:c8:49:6e:ab:a4:f8:0e:c2:ab:03:c3:c0:be:db:
         41:fc:fe:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:29:06 2024 by rpki-client on console-ams.rpki-client.org