Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5EABC2776BB4756FA16A1AE71787EBA35A719FE1.cer
File:                     5EABC2776BB4756FA16A1AE71787EBA35A719FE1.cer (raw, json)
Hash identifier:          QFFvGBv8UL2VTifForSeEMSLweTi7g79f1RlUuXWbMg=
Subject key identifier:   5E:AB:C2:77:6B:B4:75:6F:A1:6A:1A:E7:17:87:EB:A3:5A:71:9F:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       380039821CB98DC5CC204D5B6E00F5CB2B2B8ED9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5EABC2776BB4756FA16A1AE71787EBA35A719FE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Apr 2024 12:45:28 +0000
Certificate not after:    Mon 28 Apr 2025 12:50:28 +0000
Subordinate resources:    AS: 267096
                          IP: 45.229.24.0/22
                          IP: 2804:4814::/32

Validation:               Failed, certificate revoked on Wed 15 May 2024 19:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:00:39:82:1c:b9:8d:c5:cc:20:4d:5b:6e:00:f5:cb:2b:2b:8e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 12:45:28 2024 GMT
            Not After : Apr 28 12:50:28 2025 GMT
        Subject: CN=5EABC2776BB4756FA16A1AE71787EBA35A719FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:83:53:f2:c6:9a:cb:9b:b7:9b:3c:1f:3d:
                    bf:de:7b:01:d1:23:d5:88:3f:87:b8:21:44:20:2c:
                    5f:d3:d8:d9:65:07:74:e5:1d:7a:73:a8:94:70:e3:
                    06:a5:e6:2f:71:0c:5e:68:9f:44:da:db:77:ef:1f:
                    b8:dd:fa:18:8a:6a:8e:f9:ca:4b:d5:33:9a:fa:e6:
                    20:0b:bb:33:42:65:db:38:45:ac:ee:f3:09:3a:13:
                    3f:9a:d8:d6:41:3a:f5:f2:f5:0f:5a:50:34:1e:87:
                    49:35:4b:df:4b:36:dd:4d:2b:b9:73:dc:f6:64:45:
                    76:eb:54:b2:f7:f2:26:97:85:60:6d:ef:f0:42:ff:
                    cc:2b:50:0b:e7:85:a2:e9:cf:8c:93:d3:2f:cf:45:
                    32:f2:51:70:e3:e6:d6:9a:27:0d:02:17:05:5f:d7:
                    f3:c6:09:3b:6c:c0:a5:dd:a0:e0:2f:48:6c:ec:f6:
                    9f:60:0f:30:b2:27:34:06:56:04:fd:26:c9:ca:49:
                    2e:52:52:e9:4a:7c:5a:50:e6:fb:ad:95:85:b8:88:
                    82:30:78:67:e3:73:ae:21:b5:6b:d2:35:42:20:fb:
                    10:f6:7f:41:58:b2:9b:d2:73:89:d3:93:c3:51:38:
                    4d:02:cf:39:05:92:5e:14:6e:bd:7c:0e:17:a6:70:
                    50:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:AB:C2:77:6B:B4:75:6F:A1:6A:1A:E7:17:87:EB:A3:5A:71:9F:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5EABC2776BB4756FA16A1AE71787EBA35A719FE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22
                IPv6:
                  2804:4814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267096

    Signature Algorithm: sha256WithRSAEncryption
         60:4f:e3:93:12:80:6a:6b:2b:56:58:33:94:bb:a2:68:f6:f7:
         77:a9:cd:a9:1c:88:00:19:7d:a0:f3:41:d6:cf:20:6f:5b:23:
         cd:d1:ff:48:e3:b4:f1:6c:65:4b:03:e1:da:d2:30:14:af:c3:
         73:17:23:90:2e:45:f6:a5:82:56:0f:80:e8:90:a3:90:3f:fd:
         10:86:ba:18:e4:6b:e9:65:29:31:0e:00:22:83:70:ce:98:c8:
         22:5c:35:79:0a:8c:a3:ca:7f:3a:4e:42:c9:16:ef:05:76:a7:
         de:b5:d4:db:d8:28:d0:8e:f7:70:15:70:e3:01:66:5c:b5:cf:
         4e:2e:9e:33:fb:a9:b4:62:f9:fa:14:a8:fe:cb:2f:d5:a7:ac:
         90:e8:a5:68:aa:6c:39:82:df:19:f2:21:c9:f8:78:49:a0:4b:
         c8:41:ab:b7:6a:10:be:79:47:a1:3a:96:fb:fd:28:47:4f:91:
         2a:88:6f:5f:f5:46:93:d4:f8:f7:6b:46:21:1c:49:45:34:ab:
         56:f9:ac:91:67:52:45:cb:d8:f2:56:d1:ba:2d:e4:c7:82:52:
         06:4d:66:e5:b0:eb:0c:f0:4a:9c:e5:ee:15:a6:78:b1:fc:d4:
         45:e1:5f:91:dc:49:05:ed:3b:57:4e:f0:1c:7c:cc:65:c2:57:
         af:81:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org