Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
File:                     49DBAD5FECCD33235162300AA0573876E9771175.cer (raw, json)
Hash identifier:          lCXMm1ztDPkXQZJ0WSDVEK5NR9vmLeWAB7KgBUQQCPk=
Subject key identifier:   49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74863382197BA3C407EFE6E79830CDC711E5C6CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jul 2024 19:29:07 +0000
Certificate not after:    Wed 16 Jul 2025 19:34:07 +0000
Subordinate resources:    AS: 271353
                          IP: 190.52.76.0 -- 190.52.78.255
                          IP: 2804:7a30::/32

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 03:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:86:33:82:19:7b:a3:c4:07:ef:e6:e7:98:30:cd:c7:11:e5:c6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 17 19:29:07 2024 GMT
            Not After : Jul 16 19:34:07 2025 GMT
        Subject: CN=49DBAD5FECCD33235162300AA0573876E9771175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:65:cf:3d:af:7d:cf:eb:1f:82:7a:44:b0:14:
                    c1:35:6f:f9:77:ca:d0:96:b4:43:9b:c9:6a:cb:33:
                    b3:31:57:78:42:ad:e4:9b:47:53:11:ce:ae:4b:d9:
                    79:40:d7:02:43:35:d1:5b:83:9d:5f:a2:81:c5:e2:
                    79:51:e5:65:02:6d:25:b8:de:f1:0a:d8:3e:23:a5:
                    ee:ef:f9:36:94:3b:bf:1e:65:e3:ea:57:e1:f7:6e:
                    fa:90:80:58:32:d6:e6:de:30:e2:40:02:88:44:d8:
                    13:3a:07:53:ea:f8:a5:00:93:da:e6:a1:f6:78:90:
                    0f:f3:50:86:32:db:91:a7:fa:20:5c:cf:e5:c3:1f:
                    37:07:35:82:04:ae:b4:a0:1d:d0:8c:39:98:1a:c2:
                    31:70:e9:4b:80:cb:cb:2f:34:6d:f6:8d:cc:d2:03:
                    7a:a9:69:ff:a2:89:96:bd:b7:a5:8d:6e:8d:77:94:
                    ab:62:4e:b3:c4:76:4e:3d:81:35:04:be:57:b0:75:
                    8f:9b:6a:ba:f0:6d:78:d8:aa:f3:f7:11:23:39:a6:
                    54:fb:0d:a7:bf:91:4b:cd:09:33:c1:cd:73:c0:cf:
                    53:91:d7:a8:9f:ec:1a:24:61:08:01:22:63:dc:a2:
                    ae:9a:8f:29:bd:7f:e6:0e:22:7e:f9:0b:86:6c:8f:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.76.0-190.52.78.255
                IPv6:
                  2804:7a30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271353

    Signature Algorithm: sha256WithRSAEncryption
         46:79:8a:31:88:5e:87:51:7c:dc:5b:0a:a8:27:53:24:61:75:
         40:35:33:03:43:8b:03:0a:aa:e5:26:ee:84:3f:ea:06:a6:2c:
         d8:44:b2:f6:e1:64:42:3d:c8:8e:ed:d7:d3:36:33:91:9c:27:
         41:b6:4f:2a:bd:24:4f:3f:49:b2:6b:ef:b4:7e:9f:25:51:15:
         2a:a0:5d:f3:35:7c:93:dd:33:18:9b:56:fd:b4:70:e7:e7:e2:
         a4:13:f3:b5:91:ff:f6:c6:8d:6d:c9:0c:50:4a:8b:b4:9c:f5:
         2c:09:74:7c:00:47:b4:e0:5d:97:b6:17:46:d3:75:a6:6c:71:
         5d:ff:cf:9e:1b:a9:0e:79:f0:6f:31:93:bf:2e:11:db:f9:5e:
         92:67:44:1a:62:b4:fe:36:fe:fa:1c:17:c0:d1:b3:24:26:9c:
         18:0d:1e:17:56:6e:7a:63:14:df:84:24:d2:83:5e:f5:8f:e2:
         ab:a3:68:e3:a7:77:b6:85:1b:0c:be:4c:10:3e:91:39:ab:83:
         78:3a:a2:e1:8c:63:a2:c0:16:26:c4:a8:6c:0a:f0:14:fc:82:
         e2:ee:fe:e5:9e:dc:d6:ee:09:10:ba:31:ed:91:ee:15:f6:f1:
         24:5d:3f:84:a2:d3:32:85:ae:20:7b:de:35:57:57:8e:90:55:
         7a:b5:4f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 05:34:00 2024 by rpki-client on console-ams.rpki-client.org