Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E16CF8542DA473DD978C6E71AC96173973353A0.cer
File:                     0E16CF8542DA473DD978C6E71AC96173973353A0.cer (raw, json)
Hash identifier:          83rLS0erk9SSDRHksrebn34Yba8aDzz4DhdStAV/qDY=
Subject key identifier:   0E:16:CF:85:42:DA:47:3D:D9:78:C6:E7:1A:C9:61:73:97:33:53:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       739BEC668416675B0F91293301B24301730BA82F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/0E16CF8542DA473DD978C6E71AC96173973353A0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jul 2024 15:14:54 +0000
Certificate not after:    Tue 22 Jul 2025 15:19:54 +0000
Subordinate resources:    AS: 263459
                          IP: 177.190.168.0/21
                          IP: 2804:1224::/32

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 17:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9b:ec:66:84:16:67:5b:0f:91:29:33:01:b2:43:01:73:0b:a8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 15:14:54 2024 GMT
            Not After : Jul 22 15:19:54 2025 GMT
        Subject: CN=0E16CF8542DA473DD978C6E71AC96173973353A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a6:6b:90:37:6e:56:3b:3a:05:20:4c:1c:52:
                    f0:4d:31:aa:ef:1c:99:52:53:da:68:9a:c9:3c:3c:
                    1c:7e:91:07:c5:da:b2:73:40:eb:26:8c:4a:cc:96:
                    af:3a:31:4e:0f:da:dd:3f:c5:d5:1c:a5:5b:00:dc:
                    85:a0:b6:75:18:bb:2e:e6:d0:7c:d2:b9:bf:7d:21:
                    dc:05:60:24:e2:f2:23:cd:fc:cf:a8:ea:d8:28:d0:
                    11:e8:69:df:71:40:88:63:b8:40:e5:13:4e:d2:fd:
                    d3:25:4b:14:0e:76:2f:22:c9:70:28:35:e7:71:61:
                    a4:a5:b6:33:3e:72:27:b7:2a:60:d7:0f:50:4d:bc:
                    07:59:0b:1c:71:87:66:a3:1e:87:34:6c:de:1a:26:
                    91:33:57:19:48:09:6e:02:c9:65:06:23:68:b1:84:
                    84:6c:9b:c4:20:2f:29:a0:dd:c0:fa:f4:75:ab:8a:
                    89:63:c3:ce:95:99:a7:c9:d1:36:ea:ad:f3:13:a2:
                    df:39:bd:9d:1e:4a:04:30:f8:22:a4:8c:67:cb:b7:
                    d8:27:c0:c8:a8:6f:6d:85:a3:ee:f3:e3:df:03:16:
                    23:1e:33:d5:4b:78:f1:46:88:31:2c:80:15:61:39:
                    66:67:8b:99:87:e5:ba:22:4e:49:03:5b:f5:7c:c9:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:16:CF:85:42:DA:47:3D:D9:78:C6:E7:1A:C9:61:73:97:33:53:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/0E16CF8542DA473DD978C6E71AC96173973353A0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.168.0/21
                IPv6:
                  2804:1224::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263459

    Signature Algorithm: sha256WithRSAEncryption
         ba:5c:af:7e:7b:98:3d:52:95:f9:e3:f1:a0:90:47:4d:70:79:
         85:9e:84:ed:82:ad:da:b5:a4:c0:b1:62:a6:7e:11:b4:26:7a:
         70:10:78:f5:48:2f:ac:bd:d5:2b:5e:0e:17:3a:d6:80:31:10:
         4c:77:90:b1:e7:b7:9e:65:6b:1f:64:55:7c:c2:fc:87:87:d1:
         8d:a8:4b:8a:51:d5:05:48:c5:dd:dd:10:a0:67:d0:0a:5a:c4:
         22:89:f9:7f:37:76:7b:a2:4b:3b:18:0f:44:2f:2e:db:bb:26:
         5c:35:80:cb:c3:0a:46:56:16:1e:c5:03:ec:5e:21:bc:3b:d4:
         65:28:db:eb:bd:a3:88:b0:55:57:94:3a:67:c4:6a:50:51:a3:
         2c:db:5e:c7:54:6d:80:f3:b8:09:52:52:a6:2f:fd:ef:e7:7d:
         2f:45:66:13:2d:01:30:f4:4b:3a:3c:88:08:ec:1e:65:10:70:
         30:0f:38:0e:40:41:e5:44:3c:73:1e:b3:7c:d3:a4:e8:c1:8d:
         5e:d8:b1:83:b2:8a:17:b1:76:cf:74:eb:92:74:c0:c0:3a:ee:
         12:1d:8d:be:13:56:bb:1b:48:df:4d:6d:0c:13:4a:ad:47:0e:
         47:5e:36:f9:a3:02:06:9a:be:82:f2:a9:df:04:ed:e9:fe:c2:
         12:5b:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org