Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.cer
File:                     0B58E3D8ABC34BBB499F1606407B06623B69F3C9.cer (raw, json)
Hash identifier:          M9kFDSOcg1dahgqBI4Rmff0Ko3CXmuWySOCpsjEBYdM=
Subject key identifier:   0B:58:E3:D8:AB:C3:4B:BB:49:9F:16:06:40:7B:06:62:3B:69:F3:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6828B5264EE54AC382FA017E68B4A76CA1B1EC9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:50:26 +0000
Certificate not after:    Thu 03 Apr 2025 22:55:26 +0000
Subordinate resources:    AS: 52601
                          AS: 263652
                          IP: 170.83.100.0/22
                          IP: 177.74.224.0/20
                          IP: 177.124.72.0/21
                          IP: 2804:10dc::/32
                          IP: 2804:383c::/32

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 13:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:28:b5:26:4e:e5:4a:c3:82:fa:01:7e:68:b4:a7:6c:a1:b1:ec:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:50:26 2024 GMT
            Not After : Apr  3 22:55:26 2025 GMT
        Subject: CN=0B58E3D8ABC34BBB499F1606407B06623B69F3C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:1c:f9:7a:5a:de:e5:cd:46:a1:26:93:7c:
                    df:ea:b3:ee:a0:c1:86:b0:3c:88:9c:59:9b:48:a9:
                    8a:39:8b:ce:a3:b4:00:fa:72:04:19:c2:a1:e5:d4:
                    1b:69:a1:9b:14:37:54:f8:7c:ec:09:42:51:7e:6f:
                    90:10:f0:b3:3a:af:ba:f6:4a:1b:4a:d1:58:0b:2f:
                    53:c5:e0:59:a6:22:72:76:b9:4d:0a:82:68:bf:e1:
                    32:12:e6:44:a7:3d:73:34:c2:d9:3f:01:80:22:4f:
                    4f:09:9a:f1:b2:4a:01:ce:b2:e4:f4:22:d9:96:f9:
                    39:89:69:65:33:d6:9f:90:02:c8:ce:a2:b9:85:a9:
                    d6:59:c8:47:e1:0c:9e:df:d2:e2:60:6c:2e:08:87:
                    14:4b:26:83:7e:9f:e7:d3:f7:fe:da:e3:c6:f7:77:
                    4a:32:c7:a5:2b:45:aa:7e:c9:85:c5:b9:58:1d:5d:
                    70:a2:42:7d:27:c5:c7:39:14:85:cf:8a:18:85:0b:
                    cb:93:0e:a6:9f:03:71:5d:a3:d5:44:ad:ee:42:65:
                    66:87:34:1c:f0:13:fd:f6:0e:03:d6:1d:2d:65:c8:
                    c7:74:54:6c:fc:59:bb:84:ae:96:ca:37:82:a7:43:
                    88:35:f6:14:32:70:63:ca:7c:0b:a3:52:13:81:43:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:58:E3:D8:AB:C3:4B:BB:49:9F:16:06:40:7B:06:62:3B:69:F3:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.100.0/22
                  177.74.224.0/20
                  177.124.72.0/21
                IPv6:
                  2804:10dc::/32
                  2804:383c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52601
                  263652

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:c1:9b:ee:f5:ff:b5:e7:d9:c4:89:99:f6:81:d5:47:54:
         19:6e:4b:43:63:17:ed:66:e5:c8:ed:35:3e:64:27:80:9c:0f:
         4b:2c:3b:c3:40:38:d8:51:00:c4:24:ec:a2:bd:aa:ad:d7:f8:
         8f:d4:59:67:61:97:c1:33:09:c5:05:0b:43:f3:55:54:ff:ab:
         22:ae:17:b7:07:59:bb:b2:a4:c3:f7:c3:66:53:49:5d:e4:f5:
         d4:be:c6:cb:6f:e5:df:ce:88:c1:97:5a:7e:4a:92:50:74:b6:
         59:49:64:fa:d6:67:86:42:1c:f0:30:bb:bf:d8:a0:8e:5d:40:
         f6:d6:2f:b6:10:23:6b:63:89:8a:a4:4b:00:4f:97:f7:e2:15:
         cd:b0:e7:ee:04:b6:15:42:5e:8e:b4:55:fd:c4:74:24:ec:70:
         e3:2d:47:d5:58:40:5b:f9:71:b9:38:0f:32:5c:5d:bb:52:be:
         8a:f0:a6:45:19:f1:da:e1:f6:86:82:37:89:42:3f:fc:a1:64:
         cc:1d:81:59:37:ce:45:06:1a:da:2f:a9:81:bb:78:bc:78:6b:
         d3:37:eb:24:08:8e:80:d4:0b:f0:12:ca:78:4a:95:45:33:9b:
         72:92:20:7e:78:66:2a:b2:16:3e:dc:b4:e5:c8:71:a4:22:ab:
         a7:c2:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org