Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/58F334CA488715B82B6E5489B453146BF7CC0A9C.cer
File:                     58F334CA488715B82B6E5489B453146BF7CC0A9C.cer (raw, json)
Hash identifier:          XpEBcZKPdSlKCCKaIjiXyxHy2nqET3Cx9UvV+u5wK2g=
Subject key identifier:   58:F3:34:CA:48:87:15:B8:2B:6E:54:89:B4:53:14:6B:F7:CC:0A:9C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59960CB1CD0EB3189E0FE0679B633417CE62335D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/58F334CA488715B82B6E5489B453146BF7CC0A9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Aug 2024 13:44:55 +0000
Certificate not after:    Thu 07 Aug 2025 13:49:55 +0000
Subordinate resources:    AS: 273400
                          IP: 45.172.174.0/23
                          IP: 2804:8e10::/32

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 23:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:96:0c:b1:cd:0e:b3:18:9e:0f:e0:67:9b:63:34:17:ce:62:33:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  8 13:44:55 2024 GMT
            Not After : Aug  7 13:49:55 2025 GMT
        Subject: CN=58F334CA488715B82B6E5489B453146BF7CC0A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:73:91:cb:c7:38:2d:84:a4:cd:d0:ed:e9:
                    60:69:47:97:c2:45:fe:aa:b6:62:53:9f:3c:94:f8:
                    26:35:36:15:8d:b4:fe:95:f6:e1:d6:ae:60:65:79:
                    5c:09:71:5d:eb:50:9c:ab:d0:60:c9:be:c5:19:9b:
                    f9:c5:4d:53:91:11:74:52:56:e2:76:6f:44:8b:85:
                    be:ba:5d:45:90:2d:2f:e1:5d:61:09:a8:63:a1:e4:
                    d3:f1:83:11:96:02:e2:34:07:7b:66:f5:52:6c:b1:
                    46:be:8e:ba:3e:67:e1:ff:29:69:b9:23:14:f8:06:
                    4e:a0:69:8c:1c:d4:69:a5:d7:03:38:18:0a:a8:30:
                    d4:7b:0b:20:56:a6:90:15:88:27:5a:9f:18:9b:13:
                    76:87:f9:f3:b8:68:c7:33:38:a4:13:9a:23:e6:d0:
                    ca:57:70:91:e5:e2:42:33:91:82:d1:c2:2f:3a:b9:
                    4c:ac:28:dc:98:a1:4a:85:cb:5f:20:d3:79:a2:0c:
                    9b:c0:5d:7d:13:f0:fe:39:07:a2:13:b4:dc:d4:7e:
                    66:20:25:d0:54:3a:01:25:6e:ab:9d:99:f1:03:f9:
                    05:95:85:bb:f8:04:94:0e:6e:7e:dd:21:18:03:6e:
                    f2:43:48:0a:dd:23:0c:79:a4:53:2b:51:87:e0:55:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:F3:34:CA:48:87:15:B8:2B:6E:54:89:B4:53:14:6B:F7:CC:0A:9C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/58F334CA488715B82B6E5489B453146BF7CC0A9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.174.0/23
                IPv6:
                  2804:8e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273400

    Signature Algorithm: sha256WithRSAEncryption
         4e:07:66:56:42:ab:be:82:e0:5c:f9:c6:8f:70:a7:28:70:3c:
         05:96:ae:73:7b:b9:c0:22:99:82:1f:fc:a4:e1:37:61:47:be:
         d0:ab:d8:4b:1a:25:9c:55:c3:15:a2:ec:dd:46:4f:70:a8:6b:
         ca:16:69:9f:82:4c:f3:3d:07:b8:12:f3:f5:77:c5:51:a3:56:
         15:d1:55:ea:35:cc:4d:dc:19:65:f1:69:33:81:d2:d7:28:3d:
         c8:68:0f:e4:72:a7:bb:0e:0b:5d:0b:98:f0:f7:0f:30:ed:79:
         13:4f:22:11:82:c8:0d:5a:4f:a4:e8:92:5e:d7:a7:55:03:9e:
         94:4d:d7:a2:fa:75:33:b5:cc:9f:a4:ae:cd:7e:49:ee:a7:03:
         a6:56:2e:60:f9:7e:31:f2:b2:ad:0c:71:6b:89:90:5a:57:d0:
         b8:b8:0a:b7:27:8b:3f:a2:54:76:8d:e6:79:55:c5:44:d8:ad:
         5f:b4:e6:39:dc:ee:0a:2e:fb:3f:63:2b:23:58:a7:1c:76:95:
         56:ef:74:b4:78:a5:08:aa:26:22:88:63:58:38:f0:4d:56:ae:
         c4:b2:c2:b1:02:d9:e4:83:48:dc:b1:fd:b8:60:c4:bb:f7:22:
         e2:08:f2:96:0c:16:ed:0c:be:d3:20:46:fb:1e:0f:2d:3b:4b:
         6f:75:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 03:20:57 2024 by rpki-client on console-ams.rpki-client.org