Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E4BB79C9BEA77D9EC780EC389CDDE9465C373E7.cer
File:                     5E4BB79C9BEA77D9EC780EC389CDDE9465C373E7.cer (raw, json)
Hash identifier:          prqGNlNfZinux+yk2W8is3IGWvN5k3oSC6ykBbKLkrE=
Subject key identifier:   5E:4B:B7:9C:9B:EA:77:D9:EC:78:0E:C3:89:CD:DE:94:65:C3:73:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6530E5E3593D74D18B31C968ED5F934A7A5FBBAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/1/5E4BB79C9BEA77D9EC780EC389CDDE9465C373E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:32:47 +0000
Certificate not after:    Thu 03 Apr 2025 07:37:47 +0000
Subordinate resources:    AS: 272467
                          IP: 2804:81a4::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 04:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:30:e5:e3:59:3d:74:d1:8b:31:c9:68:ed:5f:93:4a:7a:5f:bb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:32:47 2024 GMT
            Not After : Apr  3 07:37:47 2025 GMT
        Subject: CN=5E4BB79C9BEA77D9EC780EC389CDDE9465C373E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:be:5e:68:ba:5d:c9:3c:e8:cb:fa:3b:60:5f:
                    16:34:7f:75:8a:ff:ea:c9:f8:93:4a:a4:2e:1a:04:
                    52:db:7e:f0:92:2a:97:f7:7d:25:f2:66:b5:5f:47:
                    f8:e1:b9:3b:57:d8:59:f0:fd:f6:5c:ea:ee:46:cf:
                    09:50:ca:49:de:e4:44:88:cd:e3:1f:05:82:63:fa:
                    c2:56:07:99:8c:e3:2f:e9:35:88:46:b6:9f:80:77:
                    b0:8a:ae:79:eb:d8:56:a5:a0:89:17:c7:ab:bd:6e:
                    04:8b:6b:d9:4f:22:ad:af:09:23:7a:a1:1a:04:de:
                    dc:38:4d:38:e7:1a:38:f5:e5:0e:2d:4f:40:25:9f:
                    68:85:b3:22:fc:7d:c3:87:bf:3f:f1:07:13:38:26:
                    f2:2e:b7:81:1f:56:8e:4a:62:e8:3d:ef:b8:e2:54:
                    8d:ae:c9:fc:5a:4b:eb:35:24:6a:56:32:5c:69:60:
                    98:f6:9d:1e:07:b0:3f:a9:87:7e:2e:92:cc:01:ce:
                    db:d3:44:df:6c:dc:13:ff:92:00:e9:dc:52:0e:06:
                    3e:19:54:9a:33:c8:fc:bd:d4:0d:47:e7:b9:fb:a4:
                    58:e3:90:4f:51:d9:a3:6c:d2:63:84:10:7e:8e:c1:
                    9c:1c:52:b6:79:70:2a:ec:0e:79:28:23:ef:53:1d:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:4B:B7:9C:9B:EA:77:D9:EC:78:0E:C3:89:CD:DE:94:65:C3:73:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/1/5E4BB79C9BEA77D9EC780EC389CDDE9465C373E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272467

    Signature Algorithm: sha256WithRSAEncryption
         4d:d5:f9:3c:11:9a:b5:6a:96:e4:1c:5a:c1:1a:55:2a:aa:29:
         04:0e:84:3b:f8:5a:83:fb:62:61:57:93:e6:3d:19:86:a0:f0:
         88:3a:8a:f2:a9:d0:3b:03:75:e8:fe:08:e8:0d:99:34:f8:e9:
         a1:7d:be:99:c8:7a:19:8e:07:8e:02:7e:e2:61:1c:e6:03:81:
         b4:ed:01:8f:23:bb:f1:8f:ab:e3:8b:f5:d8:98:5f:95:cb:b4:
         67:e7:2c:95:2d:1f:24:51:0e:28:37:71:97:15:30:91:4b:d1:
         52:a5:a6:05:14:c8:e0:c5:03:76:b2:d3:9e:ea:d3:01:a3:4a:
         d3:34:29:c6:8e:e9:6d:55:01:05:2c:5e:95:85:53:ca:32:5e:
         f6:1b:45:1d:65:5a:8c:e2:0f:a3:f9:5c:f3:c1:69:47:3b:b2:
         43:fc:3e:de:d1:fc:e6:1d:2c:d0:e9:d9:08:7d:e8:a5:f7:08:
         78:d8:91:73:e7:20:e0:37:32:89:b8:90:c8:d1:54:16:a7:26:
         a0:3e:5f:e8:fa:55:a1:19:65:2d:2e:43:c6:bd:eb:33:06:5b:
         43:f4:00:eb:be:24:4c:8f:ab:0a:58:ec:6e:e2:97:11:9d:cf:
         06:55:e0:ce:f8:22:f3:6b:1c:cd:f8:67:91:f6:f3:47:32:5f:
         c1:ff:05:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org