Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0EE2A2F6E45247C19519BD222EE94731C49C38B1.cer
File:                     0EE2A2F6E45247C19519BD222EE94731C49C38B1.cer (raw, json)
Hash identifier:          A2w0Ys0+3wRSUVdmr/S2iDgdSCitQMjRZ44bgKBLc1U=
Subject key identifier:   0E:E2:A2:F6:E4:52:47:C1:95:19:BD:22:2E:E9:47:31:C4:9C:38:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       31875E669B7AB32D363AA5FF7C730C7D2A4E2C9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/1/0EE2A2F6E45247C19519BD222EE94731C49C38B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:29:14 +0000
Certificate not after:    Thu 03 Apr 2025 14:34:14 +0000
Subordinate resources:    AS: 52592
                          IP: 170.247.64.0/22
                          IP: 177.87.92.0/22
                          IP: 2804:397c::/32

Validation:               Failed, certificate revoked on Tue 07 May 2024 20:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:87:5e:66:9b:7a:b3:2d:36:3a:a5:ff:7c:73:0c:7d:2a:4e:2c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:29:14 2024 GMT
            Not After : Apr  3 14:34:14 2025 GMT
        Subject: CN=0EE2A2F6E45247C19519BD222EE94731C49C38B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:0b:09:1b:af:28:30:5e:25:1b:c8:e7:69:
                    60:e4:b2:7f:e2:4e:94:f2:61:ff:13:1c:e3:0d:d2:
                    aa:ce:bb:19:69:c6:ae:5e:e4:c4:d6:66:82:11:40:
                    5f:45:2f:0e:fc:21:55:f7:f3:83:df:53:9c:ec:a3:
                    1a:70:33:d9:11:a0:64:95:27:54:d2:51:88:cb:1d:
                    7d:6b:f2:c6:99:71:10:1d:5a:22:13:62:df:6b:06:
                    bf:1e:37:33:aa:6a:1e:c5:f7:af:93:68:40:92:48:
                    15:e2:c6:e0:fd:e1:4d:39:df:f6:3d:56:ee:95:c1:
                    48:78:6a:d1:ab:62:9c:0c:d3:ca:2b:03:a8:54:59:
                    30:72:85:78:12:ce:0f:38:91:56:c7:d0:99:ea:93:
                    72:66:ff:07:c7:31:bc:f5:29:9e:b9:b0:e8:f7:55:
                    f6:20:5b:cb:43:8d:1e:c7:0a:5b:b5:d4:13:2b:35:
                    fc:a9:60:51:6b:b2:8b:61:fa:1b:ce:5f:cc:6e:d9:
                    93:1a:fe:ae:fd:e0:6d:0e:28:a7:a8:85:fe:f8:4c:
                    d2:c8:dd:48:10:d8:64:a4:43:ec:5a:51:2b:77:f5:
                    67:02:2b:97:fd:23:f9:a0:22:9c:9d:02:9a:6f:99:
                    d6:b5:ac:19:a0:1b:56:0d:6e:be:32:ee:ee:8c:8c:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:E2:A2:F6:E4:52:47:C1:95:19:BD:22:2E:E9:47:31:C4:9C:38:B1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/1/0EE2A2F6E45247C19519BD222EE94731C49C38B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.64.0/22
                  177.87.92.0/22
                IPv6:
                  2804:397c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52592

    Signature Algorithm: sha256WithRSAEncryption
         27:94:df:51:29:b0:a6:18:22:5a:90:a7:e5:c9:c0:8a:b1:d3:
         6f:df:e5:fe:bb:b7:ec:cc:16:5f:92:1a:4a:3a:76:48:b6:4e:
         d0:be:7d:f0:57:75:e5:10:9e:32:96:71:02:61:de:64:f3:9c:
         90:2c:94:42:12:5d:93:d8:3d:4a:92:ca:d2:2e:1b:73:fa:60:
         f9:67:59:79:76:3f:4e:51:d0:34:7f:09:03:5d:19:d0:fd:9d:
         fa:b9:88:f4:39:3d:f4:12:19:f6:6f:d6:f8:8a:8b:b9:2d:32:
         af:05:ac:be:4c:77:a5:72:3e:e4:00:cf:e4:19:8e:a9:68:25:
         e6:d4:4f:11:76:e3:76:83:d9:d6:ef:ee:51:9d:b9:3b:cf:54:
         49:0c:ec:a6:19:ad:91:83:c1:ce:ee:39:a1:f8:55:5c:e5:4d:
         5e:2b:8a:75:05:5f:07:a4:2c:42:b0:9c:05:84:5c:38:eb:64:
         f1:03:fb:c8:d4:f7:e5:43:5f:0d:ca:bd:92:7c:8f:d3:71:c1:
         7b:7d:5e:7d:41:8a:52:48:70:0b:12:85:a7:1c:96:c9:9d:c5:
         6e:dd:8f:8a:14:08:07:3e:d3:f0:fc:43:22:15:b5:34:58:03:
         bc:d6:2b:b0:5e:71:78:af:38:1c:92:e4:40:0a:fc:33:a6:63:
         b8:5d:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org