Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.cer
File:                     0AE67EC10E739E31803F160B7BA18F1C3B0141B6.cer (raw, json)
Hash identifier:          TMJ3BbmNX+pplfoVsD2u4R2hJpMlmwjVIPKMt3LjW6U=
Subject key identifier:   0A:E6:7E:C1:0E:73:9E:31:80:3F:16:0B:7B:A1:8F:1C:3B:01:41:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AF45A094042CC3E1273AE483115F2D6924AE1E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jul 2024 18:16:07 +0000
Certificate not after:    Tue 22 Jul 2025 18:21:07 +0000
Subordinate resources:    AS: 265372
                          IP: 168.205.212.0/22
                          IP: 2804:2ee0::/32

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 16:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f4:5a:09:40:42:cc:3e:12:73:ae:48:31:15:f2:d6:92:4a:e1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 18:16:07 2024 GMT
            Not After : Jul 22 18:21:07 2025 GMT
        Subject: CN=0AE67EC10E739E31803F160B7BA18F1C3B0141B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:7f:38:ee:b3:8e:2e:12:f3:92:f4:45:92:
                    54:59:22:3d:93:ac:cf:a2:69:13:c9:b3:14:f8:94:
                    6e:9c:c6:97:25:6a:49:d9:a3:71:27:8f:df:33:19:
                    41:ad:15:88:07:42:af:50:da:0d:6c:8d:ad:21:62:
                    b6:e6:92:6e:0b:19:d0:0f:46:1f:ce:e5:0c:14:02:
                    bd:40:7c:a3:4d:94:50:fb:5b:2b:8e:d4:56:90:81:
                    a6:0c:26:23:0a:80:a5:f6:8f:d3:af:a2:b6:42:47:
                    a8:b2:bb:cc:80:06:73:6b:0e:3c:33:37:5f:12:31:
                    2a:b4:a0:0c:9a:fe:ce:97:17:f5:71:61:41:4c:2f:
                    53:85:a4:e9:42:98:73:b0:73:b0:c9:04:da:2e:71:
                    97:e9:6c:42:72:e9:74:81:8d:23:e8:29:f2:9b:42:
                    a0:14:91:ef:d1:f6:51:a7:85:eb:00:b6:70:3d:f7:
                    67:a6:ec:27:1e:9b:4b:ed:95:2a:95:f0:81:67:8f:
                    f2:5c:22:9c:49:51:3e:d3:4f:5f:b6:6e:a9:71:f6:
                    f6:41:d5:de:02:37:39:eb:0c:a0:f7:f2:4b:cc:e6:
                    85:2b:5d:35:80:a6:42:c8:06:43:d0:51:8d:64:7b:
                    a6:0c:0d:f1:63:fe:27:ba:12:8b:9c:59:60:11:04:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:E6:7E:C1:0E:73:9E:31:80:3F:16:0B:7B:A1:8F:1C:3B:01:41:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.212.0/22
                IPv6:
                  2804:2ee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265372

    Signature Algorithm: sha256WithRSAEncryption
         9c:25:63:11:b1:2a:bd:ab:a7:b0:b5:dc:6f:f2:50:54:61:de:
         a9:1e:4e:c2:a8:2f:1b:c0:fb:6e:b6:97:58:67:f2:0e:a2:75:
         0c:f2:60:0c:86:7a:19:72:31:fc:a8:2f:24:1e:1f:61:94:96:
         04:92:6b:65:07:15:ee:17:ea:a4:d7:45:bf:c3:0f:38:ab:42:
         bc:43:48:d5:4d:7d:79:ef:ef:0e:34:e9:35:ba:76:c1:1c:e1:
         86:a5:00:8e:17:bf:c9:65:e5:a3:e6:b4:66:f6:ed:ab:50:85:
         cf:e3:d9:1d:63:e6:07:14:bb:6d:48:67:74:3c:a1:c6:43:ce:
         49:d6:32:0f:04:6f:e3:64:82:a9:80:b8:a0:a1:aa:69:e2:b3:
         ac:2f:76:5f:fb:86:94:df:41:47:18:20:b4:6f:f1:cd:e7:5f:
         5c:74:8b:a0:74:db:2c:42:00:28:f6:37:be:e0:24:c0:f4:88:
         af:51:74:ea:3e:fc:fb:ed:69:a8:10:67:f8:b3:37:c1:66:72:
         92:44:a0:a6:43:bc:ed:1a:f3:da:cd:85:79:04:c5:cc:bd:1d:
         82:58:71:4a:3f:84:87:7c:9c:57:98:fc:7d:38:65:49:87:a8:
         8f:b4:94:a6:e7:aa:b2:8c:fe:78:25:f5:2e:0c:09:42:47:97:
         52:3e:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 20:01:19 2024 by rpki-client on console-fra.rpki-client.org