Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E42C6CBC297BD1C3320047BC357003F3FA9B924.cer
File:                     0E42C6CBC297BD1C3320047BC357003F3FA9B924.cer (raw, json)
Hash identifier:          vAQia62fBnqyJJcnlCR1SEDnQR4yCiAZ+A0H/lDO45A=
Subject key identifier:   0E:42:C6:CB:C2:97:BD:1C:33:20:04:7B:C3:57:00:3F:3F:A9:B9:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D42A1D0BB996BB8C037B4438A0FE4D2C69EE765
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/0E42C6CBC297BD1C3320047BC357003F3FA9B924.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:50:41 +0000
Certificate not after:    Thu 03 Apr 2025 13:55:41 +0000
Subordinate resources:    AS: 268978
                          IP: 45.177.12.0/22
                          IP: 2804:5d88::/32

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 12:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:42:a1:d0:bb:99:6b:b8:c0:37:b4:43:8a:0f:e4:d2:c6:9e:e7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:50:41 2024 GMT
            Not After : Apr  3 13:55:41 2025 GMT
        Subject: CN=0E42C6CBC297BD1C3320047BC357003F3FA9B924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f7:3a:67:f0:0d:55:6d:fa:47:b8:74:78:b8:
                    19:21:f5:43:6e:85:22:17:d4:c9:8c:d9:ad:21:a5:
                    60:91:c5:e4:d8:47:c9:8f:c4:ef:42:ca:6c:95:d3:
                    66:09:cc:e4:23:d4:32:93:b6:0c:0d:a2:c5:91:bf:
                    39:21:64:16:72:4e:cc:3c:90:ab:03:09:96:13:b7:
                    c4:f1:d1:9c:96:ff:26:7d:c7:e8:ef:d7:67:73:db:
                    ea:35:59:93:4d:60:9f:c8:64:fa:4d:ad:60:7b:d9:
                    1f:05:41:16:61:d5:b1:22:45:63:38:c3:f0:00:c2:
                    b7:ec:41:9a:98:b2:1d:bb:3b:f5:4a:88:45:9c:ce:
                    cb:15:62:a1:7e:ff:c7:71:18:8b:1f:3e:d2:1a:92:
                    5c:c2:c8:ef:97:8f:5e:d3:12:af:ce:ad:9c:5f:93:
                    61:18:36:28:e5:e6:5e:95:31:2c:e2:d1:07:b3:7e:
                    d3:06:c4:83:12:45:76:b9:12:32:5e:fa:6f:19:90:
                    0c:f9:ce:1b:e4:2b:7d:da:a8:50:80:e8:de:3f:e4:
                    05:42:92:11:00:a9:91:19:07:46:d8:65:09:e0:9b:
                    03:62:f5:14:95:29:38:7e:c7:44:ff:92:37:16:cf:
                    d2:46:d5:b7:1f:dc:af:99:10:da:cc:80:93:bc:3a:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:42:C6:CB:C2:97:BD:1C:33:20:04:7B:C3:57:00:3F:3F:A9:B9:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/0E42C6CBC297BD1C3320047BC357003F3FA9B924.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.12.0/22
                IPv6:
                  2804:5d88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268978

    Signature Algorithm: sha256WithRSAEncryption
         5b:d1:ed:61:3e:a2:50:bd:65:ca:c0:80:19:cb:68:2e:d1:3a:
         ca:29:91:fa:46:50:ad:df:17:4d:c0:69:97:bd:23:cb:c8:57:
         08:07:23:e0:62:31:a0:99:27:38:54:59:d3:c7:79:c6:71:4a:
         1f:24:fd:9e:ee:7f:94:27:71:4a:40:49:e6:6f:e0:55:0e:aa:
         57:1a:74:c2:e0:34:a3:06:9a:b8:c6:a5:60:17:fb:f0:5f:9c:
         89:bc:c0:0c:ec:d5:1c:5f:f1:6a:29:1e:cf:80:8b:17:12:20:
         d3:a9:45:5b:42:06:86:80:35:94:60:6e:ad:35:28:9f:be:e0:
         0a:78:07:27:42:fd:dd:09:6e:f6:80:4e:b6:b8:7c:cf:87:c6:
         55:ec:c8:20:d8:37:f4:92:f7:1f:2f:20:85:7f:aa:7b:12:f6:
         b0:82:2b:e3:51:13:9f:2c:9b:c9:25:c8:d6:ba:8f:34:3b:83:
         6b:c2:62:80:c1:cc:56:1c:4e:40:38:03:0a:ed:b8:e5:b4:8e:
         7c:8d:8e:2f:27:19:8f:5d:90:10:0f:f7:a1:f6:72:3c:88:2a:
         de:d4:6b:18:87:27:27:ff:ee:b1:c5:40:10:25:10:4c:85:71:
         23:f3:35:32:ea:0b:bf:47:02:40:95:58:aa:00:5d:50:1d:25:
         f2:90:bb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 15:00:46 2024 by rpki-client on console-fra.rpki-client.org