Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FEEDD45CC61974A21C4702746841E81FFB00B68.cer
File:                     4FEEDD45CC61974A21C4702746841E81FFB00B68.cer (raw, json)
Hash identifier:          S6Ga6eHdquyp8GGaCJTf69oi0UdrJfzPXc8ZAQqOzFw=
Subject key identifier:   4F:EE:DD:45:CC:61:97:4A:21:C4:70:27:46:84:1E:81:FF:B0:0B:68
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3AD10D8DDF2FA6931B0061629E7BAA43F9AC2A59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/1/4FEEDD45CC61974A21C4702746841E81FFB00B68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:39:35 +0000
Certificate not after:    Wed 02 Apr 2025 18:44:35 +0000
Subordinate resources:    AS: 267117
                          IP: 45.228.196.0/22
                          IP: 2804:4860::/32

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 21:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d1:0d:8d:df:2f:a6:93:1b:00:61:62:9e:7b:aa:43:f9:ac:2a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:39:35 2024 GMT
            Not After : Apr  2 18:44:35 2025 GMT
        Subject: CN=4FEEDD45CC61974A21C4702746841E81FFB00B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b7:f6:b4:ac:1c:2c:4c:f6:60:cd:f6:ab:dd:
                    31:4f:8f:d8:1d:83:99:3c:5b:99:b1:c3:f7:c1:a6:
                    31:01:2e:55:ee:c1:44:87:0e:25:be:cf:bf:09:56:
                    97:cb:4b:93:31:43:71:63:94:69:74:50:c7:5e:16:
                    ad:59:86:81:7a:3c:a7:a5:3d:74:17:a5:75:e3:74:
                    6e:85:db:48:7b:4b:6b:bb:cb:07:fb:a1:50:38:34:
                    12:c4:e5:59:ad:ea:37:d6:85:c0:06:5f:34:55:f9:
                    7b:7e:42:80:0a:76:86:0c:d2:07:6e:30:a0:b8:da:
                    4b:02:a8:b8:61:47:d1:b1:e1:f7:d5:73:63:e6:41:
                    1a:25:b2:d8:3f:8d:70:24:fa:3f:19:59:19:f1:ae:
                    c0:09:c3:55:90:5d:3d:52:28:18:7b:21:8f:0c:19:
                    94:0a:c5:5f:ee:5d:4a:5c:56:10:ce:f1:14:3b:8a:
                    71:dc:83:d2:4a:fe:e8:6d:6e:9d:ba:30:ee:e8:b7:
                    b8:35:7c:62:93:45:6e:0d:14:2b:25:8a:3a:de:62:
                    03:19:f1:02:d4:a1:b3:78:8d:a7:a9:dd:da:f0:de:
                    46:dd:8a:9a:0c:dd:57:da:85:c2:d3:48:7a:8e:5d:
                    ba:9b:b5:b1:fe:f1:b7:71:43:af:ce:45:f6:58:9e:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:EE:DD:45:CC:61:97:4A:21:C4:70:27:46:84:1E:81:FF:B0:0B:68
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/1/4FEEDD45CC61974A21C4702746841E81FFB00B68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.196.0/22
                IPv6:
                  2804:4860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267117

    Signature Algorithm: sha256WithRSAEncryption
         1f:a8:83:67:70:ec:1b:80:e1:3f:9c:52:b6:57:96:22:ef:16:
         5b:5f:e2:d7:8d:1e:3c:77:51:1a:7e:ec:ac:12:fc:25:0f:4a:
         6e:4e:b4:ba:1a:29:0c:46:e7:8a:ff:d0:7f:4f:1b:cb:dd:48:
         7a:96:89:61:72:5c:bc:e0:b3:f3:69:13:f1:e7:60:a6:5b:dd:
         36:c2:d4:46:b0:34:70:64:db:fd:ec:d3:fd:aa:6c:24:13:1e:
         94:e8:c2:bf:cd:80:2b:2d:96:66:13:79:87:3b:b2:f2:8d:04:
         7f:ac:8e:35:4f:7e:50:e2:7e:60:c7:a6:c2:5b:f1:97:04:c3:
         dd:39:6d:2a:fd:cf:fd:b9:3f:76:09:7b:12:41:15:51:84:34:
         68:0d:84:13:7d:da:01:0a:21:d1:06:30:95:dd:18:64:6c:52:
         26:6b:6a:74:f3:23:fc:b9:a8:ec:e2:fb:91:4c:9d:92:7a:85:
         e4:0d:9c:b9:c6:75:0c:54:2f:3e:d5:25:ac:13:b3:6d:f3:d0:
         68:ad:8d:2e:d1:fb:ff:90:1f:39:03:ef:c4:df:67:90:0b:2c:
         9e:49:41:ba:90:04:08:c9:f4:5e:a3:d6:3f:96:0b:7a:58:74:
         ff:f3:8a:e3:76:70:5c:50:16:eb:38:68:b0:91:0b:df:ef:b7:
         22:bf:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 00:08:14 2024 by rpki-client on console-ams.rpki-client.org