Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1984CC02A5637825AD7FAEC9DD136668D74F5C70.cer
File:                     1984CC02A5637825AD7FAEC9DD136668D74F5C70.cer (raw, json)
Hash identifier:          tQ17ImE2dqW+20Hiwhrjc6NuEy1cJIUoOg+gNkachis=
Subject key identifier:   19:84:CC:02:A5:63:78:25:AD:7F:AE:C9:DD:13:66:68:D7:4F:5C:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D845EDC71D797F330B8844A9ED9A6826C2650C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/1984CC02A5637825AD7FAEC9DD136668D74F5C70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jul 2024 18:15:39 +0000
Certificate not after:    Mon 21 Jul 2025 18:20:39 +0000
Subordinate resources:    AS: 263645
                          IP: 179.127.248.0/21
                          IP: 2804:10b4::/32

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 16:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:84:5e:dc:71:d7:97:f3:30:b8:84:4a:9e:d9:a6:82:6c:26:50:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 18:15:39 2024 GMT
            Not After : Jul 21 18:20:39 2025 GMT
        Subject: CN=1984CC02A5637825AD7FAEC9DD136668D74F5C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:b5:23:d9:6c:1b:00:42:a7:57:0d:5c:27:
                    68:1c:74:81:46:73:63:2c:be:78:94:7d:53:84:3d:
                    28:a0:40:2f:d7:87:7e:51:05:be:f9:6d:ff:74:ec:
                    f6:89:a2:7b:24:9e:a3:cd:03:29:43:df:6e:50:32:
                    71:01:7c:0b:31:dd:0a:fa:64:c0:87:f8:0d:8e:e4:
                    f8:c3:34:98:9b:c9:31:04:88:4a:6b:3c:11:e5:09:
                    5d:fc:35:95:b4:49:39:86:0b:1b:b7:63:32:4d:fc:
                    36:2a:70:9d:58:82:44:2b:d8:08:52:f3:60:65:bc:
                    7b:1c:94:e7:99:b4:2e:ee:70:68:87:ff:92:17:70:
                    cc:f0:d1:58:0d:da:41:ef:85:ba:c6:8e:38:47:dd:
                    07:51:60:fb:84:93:b9:17:cb:fb:8c:4f:76:16:62:
                    b5:2d:fa:6e:e9:99:3c:5d:6e:4b:1b:2a:40:b0:8f:
                    58:5d:d0:58:02:bb:0b:dd:fb:b3:bb:f3:3c:8c:2f:
                    31:d6:bf:d8:fb:5e:ed:25:bc:ad:b5:67:06:95:43:
                    26:4a:5c:4d:af:42:48:f3:00:70:bc:af:16:f6:2a:
                    6a:40:f8:2f:dc:2c:a0:6f:9f:c3:ca:a0:b1:83:47:
                    fe:de:d2:b4:d5:2c:c4:af:3a:8b:f3:75:60:d2:6e:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:84:CC:02:A5:63:78:25:AD:7F:AE:C9:DD:13:66:68:D7:4F:5C:70
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/1984CC02A5637825AD7FAEC9DD136668D74F5C70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.248.0/21
                IPv6:
                  2804:10b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263645

    Signature Algorithm: sha256WithRSAEncryption
         bc:21:aa:bd:7d:2d:24:d4:1c:e4:c0:8e:b4:fe:66:2c:f1:2f:
         22:6d:7a:94:12:35:ba:a2:1a:b9:d7:43:32:ba:6b:66:06:a7:
         cd:4f:63:a9:dd:ac:bd:ec:df:a0:1a:c4:5b:8e:b9:32:81:e9:
         ad:8b:34:a7:6c:79:d0:b1:b4:90:11:24:db:ac:1e:08:d3:d4:
         c8:91:6a:06:ea:d2:77:bb:99:5e:3a:6c:72:9c:2b:d5:6a:4a:
         9e:5e:9f:1a:7e:60:32:33:e7:04:f3:70:71:18:72:2b:b8:7a:
         81:0c:e9:28:19:b2:21:74:c7:5a:cf:af:d0:bc:ce:15:e0:d5:
         9b:96:80:d1:60:f1:70:f9:f1:bf:41:7d:bf:ca:51:ff:1e:df:
         3c:f3:aa:7c:de:1f:ce:89:90:c4:2c:de:7c:d5:93:fd:72:11:
         ff:f7:ad:d6:3d:55:87:d5:24:97:f8:3c:58:52:a9:c3:c1:c5:
         e3:7f:b1:b6:66:31:f7:d6:ee:fb:38:ec:92:fd:d9:3a:c3:19:
         8a:39:38:42:2a:f5:90:8c:e4:39:0c:6c:10:cd:36:ba:50:0d:
         30:48:25:09:79:f3:6c:b1:e7:a3:05:13:38:80:8c:af:0a:df:
         d7:ac:32:81:09:67:1c:86:88:1a:57:47:ac:da:2d:0f:5a:b8:
         18:cd:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:21 2024 by rpki-client on console-fra.rpki-client.org