Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4342F208064EBCB011C73985AA522F27EF39E196.cer
File:                     4342F208064EBCB011C73985AA522F27EF39E196.cer (raw, json)
Hash identifier:          9Q5rfxBi1txavoDofmVLPS3YJvUlJhFPJgB9FkCXBXY=
Subject key identifier:   43:42:F2:08:06:4E:BC:B0:11:C7:39:85:AA:52:2F:27:EF:39:E1:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54B81E70E8306AFE6957D4C13948861105D7957A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/4342F208064EBCB011C73985AA522F27EF39E196.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:32:59 +0000
Certificate not after:    Thu 03 Apr 2025 08:37:59 +0000
Subordinate resources:    AS: 268663
                          IP: 45.165.12.0/22
                          IP: 2804:54a8::/32

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 22:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b8:1e:70:e8:30:6a:fe:69:57:d4:c1:39:48:86:11:05:d7:95:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:32:59 2024 GMT
            Not After : Apr  3 08:37:59 2025 GMT
        Subject: CN=4342F208064EBCB011C73985AA522F27EF39E196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:9e:e7:92:b0:dc:57:90:d8:f8:43:46:eb:
                    41:b1:ab:4a:22:bf:00:3c:ee:cd:dd:1d:f7:eb:c0:
                    66:9f:0a:3f:c2:ee:79:cb:d0:ce:7b:88:ea:2e:3a:
                    7c:ab:4f:98:db:b1:d4:b5:12:16:ef:e6:7a:29:10:
                    c7:32:d5:8d:48:5f:af:d9:21:a1:60:d5:98:b3:0c:
                    2c:7c:6c:02:f1:73:84:2d:80:13:c9:a7:c1:a4:cf:
                    2f:e7:77:91:63:0f:ed:6a:e6:cf:ac:9b:13:91:f3:
                    e9:d2:d3:a0:b7:5a:b2:cd:59:e7:57:63:ba:52:e3:
                    34:6f:a6:84:15:7b:f9:f5:68:69:40:d8:eb:33:2e:
                    f4:95:bd:b0:72:8a:c2:c2:38:66:c1:d7:81:2f:60:
                    df:3d:ea:3e:ba:c6:a3:69:11:94:0a:52:43:17:90:
                    f6:eb:1a:81:1a:f5:98:c0:50:d9:27:69:0d:02:20:
                    05:72:ac:66:26:3c:9b:84:77:93:b3:f9:ea:9e:6c:
                    c1:ca:8a:fc:83:a2:05:f7:de:e3:f0:53:a1:6f:14:
                    65:e1:f5:8d:13:ec:14:a5:9f:3e:90:60:6d:2d:16:
                    d0:eb:97:47:30:8c:89:e3:ab:27:4d:e1:70:fe:53:
                    1a:15:99:30:8e:b7:25:1e:f0:e6:f2:ad:35:1d:a4:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:42:F2:08:06:4E:BC:B0:11:C7:39:85:AA:52:2F:27:EF:39:E1:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/4342F208064EBCB011C73985AA522F27EF39E196.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.12.0/22
                IPv6:
                  2804:54a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268663

    Signature Algorithm: sha256WithRSAEncryption
         5d:43:d1:93:cf:56:52:eb:de:4e:d3:d2:5e:a5:3e:90:5c:04:
         37:03:a8:24:9a:95:a3:d7:93:f5:3f:6a:c1:93:fc:95:14:42:
         f3:d8:22:47:60:48:b5:d4:2d:6b:56:91:89:86:32:f8:9b:a3:
         11:d1:16:09:d6:f1:d7:f4:b2:e2:89:32:bb:3f:c9:ec:24:70:
         7c:c6:ce:10:06:5e:3a:49:b6:e2:47:9c:46:ef:cd:06:17:4d:
         a7:03:72:04:98:a0:fe:b7:5c:5e:65:d8:d2:01:f6:59:7c:fd:
         da:e0:be:f1:6e:40:e7:23:61:e5:5b:af:8d:34:af:d7:7f:35:
         e3:90:49:3b:1d:f8:5b:29:b4:49:ea:38:32:44:a0:ba:eb:c5:
         c5:55:fa:66:96:7e:34:44:84:43:19:45:f6:ab:ec:ff:3b:07:
         9d:db:38:3b:d2:76:3d:c5:d6:c6:1a:18:c8:b1:48:f3:1d:ef:
         2b:28:35:a5:61:df:a8:a1:d3:cc:05:07:87:36:39:99:f7:c3:
         23:3a:fc:07:9b:44:0d:9f:4b:87:8b:4e:98:32:f2:77:03:17:
         91:1e:45:8a:c4:68:8c:74:58:b5:2f:68:d7:ba:da:71:48:e3:
         fa:2d:96:36:53:f5:40:cc:35:f3:c5:3a:b8:c9:3c:4f:c3:78:
         66:b5:b5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 23:28:43 2024 by rpki-client on console-ams.rpki-client.org