Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer
File:                     0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer (raw, json)
Hash identifier:          ppbRwOz5DEjw55NTKu+2BYrmDfp4aiGXapCvDgWL43I=
Subject key identifier:   0E:03:DE:5B:21:FA:28:BB:4B:3A:9B:DC:02:F3:27:73:D3:43:AB:08
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A725174BABB8F38D13DA0DAD3D10D21660A1567
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:19:01 +0000
Certificate not after:    Thu 03 Apr 2025 08:24:01 +0000
Subordinate resources:    AS: 267937
                          IP: 45.165.192.0/22
                          IP: 2804:557c::/32

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 12:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:72:51:74:ba:bb:8f:38:d1:3d:a0:da:d3:d1:0d:21:66:0a:15:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:19:01 2024 GMT
            Not After : Apr  3 08:24:01 2025 GMT
        Subject: CN=0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:41:12:e4:19:d0:41:e4:00:47:0a:f2:ea:
                    ac:93:9c:6d:0e:0d:fe:11:e9:0c:23:30:38:b1:8e:
                    1f:e5:84:69:53:9b:46:97:01:42:6c:49:b8:b2:77:
                    51:d8:19:90:10:d8:bc:b3:73:79:ba:c4:12:31:20:
                    74:63:43:9f:94:63:46:f1:93:54:a5:6f:71:08:ce:
                    31:ab:06:b2:4a:82:5f:c8:90:88:f1:17:89:e4:cf:
                    15:18:34:6c:55:2d:19:de:5e:52:3d:60:bc:1d:f3:
                    26:4a:49:c9:ec:81:35:90:89:ed:39:8f:e9:0a:fe:
                    44:9d:17:44:85:d1:49:e2:95:47:94:8f:64:9f:25:
                    2e:51:58:60:7a:9f:5c:d2:db:14:06:95:eb:7f:22:
                    f1:52:bb:85:10:35:35:c4:29:5b:b2:3e:c7:5c:fe:
                    b2:21:43:b8:0a:1a:1b:b9:15:a9:21:09:33:09:ff:
                    97:5e:a3:43:f4:92:cc:b3:60:c5:27:b6:b1:47:3d:
                    e4:60:28:62:a2:a0:74:a8:99:64:b2:e8:7e:96:dc:
                    20:a5:d4:13:f8:84:93:50:5d:cc:7e:02:7f:f8:63:
                    91:b6:95:09:4d:a7:87:79:2d:c9:25:c8:65:7f:86:
                    cc:fb:2c:a9:89:f1:cf:89:a3:c5:e0:c5:7a:1f:95:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:03:DE:5B:21:FA:28:BB:4B:3A:9B:DC:02:F3:27:73:D3:43:AB:08
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.192.0/22
                IPv6:
                  2804:557c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267937

    Signature Algorithm: sha256WithRSAEncryption
         83:d8:b5:14:c4:84:5d:9c:e7:ed:9b:cf:21:c6:d5:d7:ec:2d:
         5e:b8:91:62:46:99:17:a0:32:f4:a3:0d:90:6b:0f:d1:8d:e9:
         2a:bf:94:21:44:b1:cf:95:98:d4:30:84:fc:18:ca:45:8e:e5:
         23:bf:d0:5e:14:45:03:4a:29:13:ff:bb:fb:e5:ec:ff:53:3b:
         e5:2e:1f:a4:25:c4:b1:7f:3b:fc:6d:d3:c0:e3:c2:08:25:38:
         24:0d:a9:99:1c:d2:35:95:1a:ec:2e:a6:b1:94:06:a6:3c:01:
         ad:22:1e:7d:ca:f1:9a:78:4f:ac:94:07:01:50:2a:71:2a:e7:
         4f:4c:87:28:f9:c1:6e:fe:92:ba:84:83:ee:ae:2e:90:dd:c2:
         52:51:a0:11:7a:dc:b0:89:33:03:eb:37:2f:93:9c:d3:65:f1:
         f5:41:f8:fb:5f:a9:0a:8f:75:a0:dc:20:70:f4:ed:b4:d2:e9:
         41:c3:e8:f2:b3:c8:77:29:79:05:67:cc:bc:f5:ba:ba:fb:f8:
         ec:1e:98:80:6b:00:ee:db:b3:90:bf:dc:d9:a0:63:45:9e:55:
         c0:9a:b1:39:24:ab:b8:33:c0:f3:10:6c:89:0e:15:af:d5:a0:
         5c:39:6d:44:88:3c:38:eb:c7:e6:9b:7b:17:95:9a:82:3a:be:
         61:58:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:05:52 2024 by rpki-client on console-fra.rpki-client.org