Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1BD4DF6B313B4686E880F6DF3BA773F5959625D9.cer
File:                     1BD4DF6B313B4686E880F6DF3BA773F5959625D9.cer (raw, json)
Hash identifier:          vkayCg/U7OlBgm5IkS2NJ4tLq8L6RV7Ktll1h9kJowM=
Subject key identifier:   1B:D4:DF:6B:31:3B:46:86:E8:80:F6:DF:3B:A7:73:F5:95:96:25:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7462B319B28999B902DC650394DE5B4B5474022F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/1BD4DF6B313B4686E880F6DF3BA773F5959625D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:12:14 +0000
Certificate not after:    Thu 03 Apr 2025 02:17:14 +0000
Subordinate resources:    AS: 265973
                          IP: 164.163.204.0/22
                          IP: 2804:40a8::/32

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 05:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:62:b3:19:b2:89:99:b9:02:dc:65:03:94:de:5b:4b:54:74:02:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:12:14 2024 GMT
            Not After : Apr  3 02:17:14 2025 GMT
        Subject: CN=1BD4DF6B313B4686E880F6DF3BA773F5959625D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:7a:2e:04:6b:99:e8:06:21:3e:6f:6b:e9:
                    26:12:30:fe:98:88:06:03:6a:30:f6:08:74:53:f3:
                    e6:1c:e3:1f:dd:33:6d:fd:6f:31:d2:72:56:08:24:
                    61:7c:e2:f6:eb:4e:7a:17:c6:96:df:fb:fc:67:e4:
                    d7:2a:32:f3:33:dd:25:c0:92:97:e8:d4:10:ae:c1:
                    d7:71:20:e1:8e:3a:a0:8f:5c:6a:ae:58:73:0c:4a:
                    b3:52:20:2c:55:2c:7b:61:37:fe:4a:35:00:83:3d:
                    c2:ed:19:ac:0f:b3:a8:9b:24:6e:33:b7:ac:a8:d2:
                    ff:00:27:d3:d9:38:cd:c2:e6:da:c2:b3:ac:78:97:
                    0f:08:35:5f:80:d0:08:fa:fe:78:e7:11:0c:ac:38:
                    21:58:1c:95:3f:7e:2f:fd:f8:52:70:00:aa:59:6d:
                    49:7d:89:49:fa:c1:d3:eb:ac:6e:2c:6e:de:ba:ca:
                    2d:fb:09:ae:4f:c5:07:c2:64:e1:b7:b4:37:80:ae:
                    5c:ee:52:6b:f2:5d:44:69:52:ad:d1:ed:6a:3f:c8:
                    2a:13:49:c8:5b:b3:3a:77:17:bf:de:07:0d:1c:2c:
                    2a:79:9b:b9:40:e0:49:d8:55:f3:18:89:d0:23:50:
                    08:bc:dd:af:42:aa:ef:b8:e1:de:1e:b5:a8:40:0b:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:D4:DF:6B:31:3B:46:86:E8:80:F6:DF:3B:A7:73:F5:95:96:25:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/1BD4DF6B313B4686E880F6DF3BA773F5959625D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.204.0/22
                IPv6:
                  2804:40a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265973

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:b2:eb:99:55:b7:86:02:f3:62:18:1e:b1:c8:8b:79:a0:
         68:fb:b0:44:2e:df:92:f2:e9:1f:ed:be:81:63:99:fc:c0:08:
         dd:2d:fb:96:b3:3a:86:fd:58:9f:0a:29:66:98:0c:d9:7e:e4:
         e1:66:9b:d7:1c:14:6b:38:af:ed:19:c4:db:33:4c:ef:e0:b0:
         9a:87:17:8c:d2:6f:50:3e:cc:08:e4:0d:7b:31:13:db:1a:99:
         52:84:e7:4a:be:8d:53:6f:6d:ea:aa:8e:1c:3a:d5:53:c7:3c:
         6f:20:eb:6d:35:b6:28:bc:23:6b:fd:f6:e4:be:2f:e2:f7:4d:
         d2:6d:39:47:7e:52:9f:51:3d:8f:c5:a2:b2:b9:87:cb:a2:4a:
         3e:8a:2f:e7:90:f3:05:d2:5d:d8:f4:59:eb:44:be:c9:fd:51:
         0b:7b:28:9d:a7:21:4e:94:32:d2:37:07:ba:e0:07:41:8f:46:
         d0:5b:2a:e2:43:5e:09:06:83:a6:6a:87:8b:89:d9:f9:bf:07:
         54:7b:39:2c:76:80:55:06:07:9e:59:67:b5:9e:69:9b:dd:8a:
         d6:ba:c4:1a:23:58:5d:3d:ec:5c:03:b5:28:82:94:d1:0f:cf:
         70:7b:3e:ef:d2:ca:1e:39:ff:8f:00:a4:01:a5:96:f5:1b:22:
         e9:bf:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org