Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/07D82C7B9D20B1E242F4AD6BE876040EED7F5936.cer
File:                     07D82C7B9D20B1E242F4AD6BE876040EED7F5936.cer (raw, json)
Hash identifier:          dLF3olFJpeNIc4wEzrwBBbJ0rJOwGuuVNJfmQtvKlvI=
Subject key identifier:   07:D8:2C:7B:9D:20:B1:E2:42:F4:AD:6B:E8:76:04:0E:ED:7F:59:36
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D6D2BDA6169FBD82F5407F522E20D62A5D52F52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/1/07D82C7B9D20B1E242F4AD6BE876040EED7F5936.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:03:12 +0000
Certificate not after:    Wed 02 Apr 2025 22:08:12 +0000
Subordinate resources:    AS: 266644
                          IP: 128.201.180.0/22
                          IP: 2804:3f2c::/32

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 13:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6d:2b:da:61:69:fb:d8:2f:54:07:f5:22:e2:0d:62:a5:d5:2f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:03:12 2024 GMT
            Not After : Apr  2 22:08:12 2025 GMT
        Subject: CN=07D82C7B9D20B1E242F4AD6BE876040EED7F5936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:2d:9e:fa:71:86:16:fb:0c:35:20:42:16:
                    8e:a1:e9:3f:d1:86:05:70:bb:aa:02:2f:bf:22:8b:
                    02:6f:6a:13:cc:07:70:30:ff:34:93:aa:c1:3b:f6:
                    1c:2c:16:40:58:09:4d:1f:01:dc:fd:81:45:67:7f:
                    00:01:7d:99:c9:c2:2f:86:d0:eb:f2:4a:b6:8f:9d:
                    4f:64:c0:61:73:fd:82:1e:0e:3a:90:59:77:da:25:
                    83:56:10:fa:c2:92:e6:d0:8e:7d:03:34:4d:f6:5c:
                    dc:98:c8:22:44:5a:bc:f2:88:7c:9e:65:92:46:ff:
                    c1:c7:9b:f8:10:a6:c3:c5:eb:0f:7e:47:77:35:56:
                    1d:5e:b1:bf:42:f9:04:0d:c9:5d:7d:5b:bc:a7:cf:
                    e7:34:5e:3b:e0:20:2e:8e:9f:f1:2f:59:89:de:b0:
                    15:85:13:ea:6b:e1:96:92:52:56:bf:83:46:ee:65:
                    10:77:e7:f7:0a:b9:af:87:35:92:2c:7c:c8:ac:10:
                    b3:3a:2c:d0:ee:84:34:2c:94:27:c7:d4:ee:e2:bd:
                    36:c8:8f:dd:d8:e4:c0:18:65:75:88:29:9d:74:b0:
                    61:8d:f7:88:24:f3:b4:8b:d8:8b:43:95:4b:92:8b:
                    e7:32:62:74:22:03:99:f2:1c:84:37:17:98:0b:76:
                    f5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:D8:2C:7B:9D:20:B1:E2:42:F4:AD:6B:E8:76:04:0E:ED:7F:59:36
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/1/07D82C7B9D20B1E242F4AD6BE876040EED7F5936.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.180.0/22
                IPv6:
                  2804:3f2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266644

    Signature Algorithm: sha256WithRSAEncryption
         a3:30:42:c2:12:60:3b:64:dc:c3:51:66:16:ae:b8:ca:30:6f:
         f5:95:0b:52:09:c3:17:a6:c0:30:79:6c:de:35:63:2f:51:06:
         3c:29:61:68:c7:be:08:4b:c7:25:89:41:bf:5d:64:b0:43:e9:
         4b:94:7e:68:e9:5d:2e:fe:0c:ab:d8:2e:cb:49:a1:05:01:f2:
         d6:06:17:06:cc:ac:e8:58:8e:58:8a:d7:95:67:3c:60:8a:3e:
         30:ef:0c:02:a9:3e:75:e2:d7:cb:b4:ad:53:bd:41:99:5f:1a:
         50:ce:54:96:a8:63:42:66:b6:7d:f4:aa:f2:89:29:57:1f:b9:
         83:67:8c:44:d6:ca:68:c3:69:9f:2b:f0:c9:ac:18:49:28:72:
         de:a5:eb:b4:66:3b:5d:61:42:99:d8:ee:74:b5:f0:e2:c1:40:
         59:c3:72:7f:6d:5b:84:a6:21:13:ea:a2:ce:b5:5c:ec:00:2d:
         a5:95:2d:6f:dd:e9:f8:c7:07:f5:e7:ec:62:a4:bc:6a:ba:09:
         e7:27:8d:4e:74:6c:a4:9b:7e:ba:59:e8:13:3a:9c:7d:ae:ce:
         74:32:8d:2e:3b:46:e3:ca:2b:d4:f6:67:35:fd:46:4b:b8:a8:
         5c:0b:ab:b6:43:59:df:ea:fc:16:cd:d4:5d:eb:b9:80:35:c7:
         8c:ba:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 15:54:35 2024 by rpki-client on console-fra.rpki-client.org