Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.cer
File:                     58BFD58B56019A8D8D70578235BD8FA5BDB8F825.cer (raw, json)
Hash identifier:          +YvMo8iEC747Fc29YXm+VI0hbdnhI4ZsieWWsQcf7QI=
Subject key identifier:   58:BF:D5:8B:56:01:9A:8D:8D:70:57:82:35:BD:8F:A5:BD:B8:F8:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1487B0A15989005C5037872545AFE0039B7C853A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jun 2024 12:05:21 +0000
Certificate not after:    Thu 26 Jun 2025 12:10:21 +0000
Subordinate resources:    AS: 273400
                          IP: 45.172.174.0/23
                          IP: 2804:8e10::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 16:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:87:b0:a1:59:89:00:5c:50:37:87:25:45:af:e0:03:9b:7c:85:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 12:05:21 2024 GMT
            Not After : Jun 26 12:10:21 2025 GMT
        Subject: CN=58BFD58B56019A8D8D70578235BD8FA5BDB8F825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:f5:2d:3e:75:99:30:ae:b9:e7:e2:90:f8:
                    70:d2:8a:77:4a:a8:aa:56:47:c9:df:36:2a:88:ff:
                    64:6e:20:aa:c2:8c:aa:1f:8d:0e:eb:17:b3:9d:46:
                    86:b9:bb:23:e9:2b:0c:ec:07:5f:8b:d7:cc:fd:d4:
                    8a:02:b7:15:0c:36:b4:9b:fd:8e:8c:31:49:c5:47:
                    cd:6f:41:3c:5e:21:54:1b:3d:2c:b5:9a:f3:5e:ee:
                    e7:b1:cc:17:eb:08:08:5f:99:d0:9a:a1:50:b9:28:
                    f5:b9:8a:9f:76:fd:90:33:38:fa:b6:fa:c2:b5:a8:
                    f8:4a:24:c4:8a:cc:f4:43:92:12:05:17:4b:fd:18:
                    8f:10:f3:7a:64:eb:eb:cb:e7:b1:b4:33:b2:33:52:
                    30:a0:40:5b:0f:4f:7a:a5:5d:7f:e2:89:c3:3c:d6:
                    00:d8:11:43:a2:06:6b:dd:26:0f:5b:62:79:96:eb:
                    32:5b:02:3a:8b:7a:75:62:9b:7f:f6:09:25:98:6e:
                    3d:55:15:d0:b4:79:f4:2c:e4:70:d3:5e:cb:54:7d:
                    d1:b5:7d:2b:9f:f6:7e:dd:ef:14:66:2b:e0:4a:b0:
                    ad:52:be:a2:c0:4a:e9:16:8a:ca:ca:53:3d:83:15:
                    aa:45:35:35:03:13:58:43:ed:1e:fd:8f:82:d6:2e:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:BF:D5:8B:56:01:9A:8D:8D:70:57:82:35:BD:8F:A5:BD:B8:F8:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.174.0/23
                IPv6:
                  2804:8e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273400

    Signature Algorithm: sha256WithRSAEncryption
         7c:62:37:d7:50:eb:73:1b:19:54:e9:04:8d:7b:e6:4f:18:aa:
         29:44:8e:5c:3d:f3:76:5f:72:84:76:20:cd:42:7c:00:51:07:
         56:a8:49:94:c4:87:1f:86:33:64:b8:a1:3e:c7:a0:e0:84:2a:
         39:93:40:ff:17:bc:70:7a:9b:11:d1:f3:75:82:5e:d8:fa:9b:
         83:d3:ed:1e:f7:6a:4a:f8:57:bf:24:b6:b2:f5:1f:70:0c:b7:
         2d:99:6b:e6:8d:03:4b:e5:16:9e:2d:3e:0d:0b:0d:7c:3e:36:
         38:09:98:84:de:51:88:66:aa:af:d3:fe:98:dd:a0:f8:33:26:
         9f:a8:57:4e:a0:74:26:43:fe:38:2d:1b:e7:98:f1:14:29:17:
         62:24:9f:c6:80:62:9f:3d:fb:67:e7:0a:ab:d0:ec:7c:e7:da:
         5b:c7:53:f2:c3:1f:ce:d7:e8:a6:96:47:7e:8c:4b:e6:cb:db:
         ed:82:bb:78:a9:bf:45:65:48:8f:d2:73:2c:03:6e:41:83:2a:
         3a:f7:bb:46:41:fd:bd:02:39:d0:e5:9b:a8:02:5c:a3:09:dc:
         62:3c:d0:41:cd:2b:ca:b8:69:4b:2f:45:3d:10:31:06:cf:ed:
         db:0d:e4:49:0f:65:65:8d:a6:b1:75:10:d8:c8:94:25:08:9b:
         fc:5e:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 18:12:56 2024 by rpki-client on console-fra.rpki-client.org