Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2313AD82E562A597FE5702AF431DEADA5940C2FE.cer
File:                     2313AD82E562A597FE5702AF431DEADA5940C2FE.cer (raw, json)
Hash identifier:          gchM8b3Eprq6CRiJdocRDjQDS28yFNr5/oeafhXMPgU=
Subject key identifier:   23:13:AD:82:E5:62:A5:97:FE:57:02:AF:43:1D:EA:DA:59:40:C2:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5036171FB6AA54F20245F2E3740406AEE4D78A5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/1/2313AD82E562A597FE5702AF431DEADA5940C2FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:13:38 +0000
Certificate not after:    Thu 03 Apr 2025 02:18:38 +0000
Subordinate resources:    AS: 262567
                          AS: 263404
                          IP: 177.73.96.0/21
                          IP: 191.37.196.0/22
                          IP: 2804:15b0::/32
                          IP: 2804:45e4::/32

Validation:               Failed, certificate revoked on Sat 29 Jun 2024 11:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:36:17:1f:b6:aa:54:f2:02:45:f2:e3:74:04:06:ae:e4:d7:8a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:13:38 2024 GMT
            Not After : Apr  3 02:18:38 2025 GMT
        Subject: CN=2313AD82E562A597FE5702AF431DEADA5940C2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3b:2f:c0:41:38:6c:49:a1:06:b8:28:bf:85:
                    e2:d4:f1:fb:9c:65:fd:6a:a4:6d:a0:3f:c2:51:95:
                    10:b4:d9:71:f5:e1:bd:12:8b:4b:c8:5a:0c:33:13:
                    ed:c4:b8:b8:10:49:38:f8:86:ed:6a:6c:65:f4:45:
                    6f:2f:b8:28:9d:a3:bc:77:70:c1:d6:25:20:aa:cd:
                    4c:d2:6e:59:9f:0c:0f:2b:9f:60:fe:f6:a9:4f:fd:
                    a6:d3:36:59:24:39:63:67:64:bb:8b:9f:3e:45:82:
                    c8:3c:43:ba:15:ce:7c:d1:1e:6e:82:4f:b9:d2:a5:
                    ea:ce:d4:64:d2:13:09:b1:ec:21:27:94:65:95:ac:
                    31:03:24:9d:7a:2a:b8:e5:01:d7:ed:ed:4e:c6:dd:
                    18:56:5a:f0:f7:a0:8c:a9:be:5a:2f:d0:d5:4f:63:
                    93:a5:a8:11:12:ba:95:81:02:15:67:e7:f0:70:ff:
                    63:f3:1a:9e:7c:89:e5:4e:91:1a:9b:d0:b6:4e:10:
                    d2:0e:dc:49:96:0b:8e:f2:df:09:85:fb:cb:ec:7b:
                    f7:77:d0:18:00:52:1a:bc:db:64:1d:bf:38:5f:9b:
                    25:e4:4b:7c:4a:88:4b:69:d2:51:d0:1b:99:1b:f3:
                    b6:d2:96:67:78:cd:60:90:03:29:12:68:10:43:a5:
                    ef:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:13:AD:82:E5:62:A5:97:FE:57:02:AF:43:1D:EA:DA:59:40:C2:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/1/2313AD82E562A597FE5702AF431DEADA5940C2FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.96.0/21
                  191.37.196.0/22
                IPv6:
                  2804:15b0::/32
                  2804:45e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262567
                  263404

    Signature Algorithm: sha256WithRSAEncryption
         d3:78:06:e0:3f:df:d6:21:11:d9:94:b6:8d:be:5c:54:7a:fa:
         d3:02:08:11:95:6c:d2:f0:19:10:92:40:a6:1d:d3:06:2e:c0:
         37:97:82:05:c0:0c:37:01:23:3f:8f:43:ee:7e:8f:e5:52:30:
         ff:ad:b6:f4:41:4c:0f:79:18:22:9f:fe:73:ee:88:cc:de:11:
         c5:da:4c:a0:94:b9:23:7d:c7:6c:1c:e3:d9:ff:cd:53:f5:5e:
         09:9a:f9:25:aa:ac:6f:8d:b7:21:fe:39:95:b5:ba:4c:7f:1d:
         72:1a:1d:e2:32:f5:8e:cb:f0:ea:7e:d3:0d:56:f8:21:ff:6a:
         65:00:6d:0f:c2:69:19:85:13:14:3c:96:59:07:e9:ed:04:42:
         65:f1:fa:1a:10:d7:2f:8b:da:a2:a9:44:c5:58:e3:dd:b3:e4:
         26:89:69:47:23:63:9f:f8:56:5e:41:10:02:35:0e:82:70:1b:
         e0:41:51:8f:f7:c2:5a:aa:04:69:e7:0b:75:69:ec:c6:e8:10:
         95:72:68:3a:16:6a:6c:e0:1d:b4:f5:c6:db:3d:fe:ee:89:3b:
         cc:a5:70:3a:ef:a0:16:fd:2b:5f:d0:61:5c:03:03:17:9f:27:
         c9:80:8b:bb:cf:e7:47:df:4c:fb:b7:4f:1a:b2:54:b1:ec:45:
         72:e4:17:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 15:00:46 2024 by rpki-client on console-fra.rpki-client.org