Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5EFCF58DEB65A25A683738768905CD46FF27A058.cer
File:                     5EFCF58DEB65A25A683738768905CD46FF27A058.cer (raw, json)
Hash identifier:          O1Hbg41aLt9jxSBxAqWUdULC0LotjVYA0KgE/Es942Y=
Subject key identifier:   5E:FC:F5:8D:EB:65:A2:5A:68:37:38:76:89:05:CD:46:FF:27:A0:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25253BDA361CAF3A29D05C67836ED2A543114C2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/5EFCF58DEB65A25A683738768905CD46FF27A058.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jun 2024 23:57:55 +0000
Certificate not after:    Fri 27 Jun 2025 00:02:55 +0000
Subordinate resources:    AS: 265287
                          IP: 168.90.132.0/22
                          IP: 2804:2d84::/32

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 10:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:25:3b:da:36:1c:af:3a:29:d0:5c:67:83:6e:d2:a5:43:11:4c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 23:57:55 2024 GMT
            Not After : Jun 27 00:02:55 2025 GMT
        Subject: CN=5EFCF58DEB65A25A683738768905CD46FF27A058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:6e:cf:cf:f7:db:b8:34:06:4b:03:67:6c:
                    02:66:47:79:94:a5:8f:3f:66:94:df:85:2b:2e:2b:
                    2f:68:a7:60:f8:0d:d8:53:c1:91:ca:d7:36:f1:33:
                    f5:9a:24:a0:54:a5:90:15:a0:03:c4:66:ba:4a:ed:
                    5b:7a:11:80:c5:cc:07:ed:0b:d7:96:43:25:8c:a5:
                    b8:58:1e:a6:0e:2f:57:5b:b8:df:be:4a:53:c1:06:
                    49:5a:8f:a4:2d:a7:1b:ac:f1:5f:5f:c5:33:59:f6:
                    a2:cc:9f:da:7b:64:95:56:07:b1:ce:ae:8d:2b:68:
                    26:7e:05:b8:46:f2:fa:c3:35:d8:3d:9e:77:09:53:
                    4f:3e:dc:c2:68:13:bb:c7:20:5d:f0:a4:d3:41:dc:
                    5b:66:f6:6a:f8:b1:c4:68:ac:6e:e4:95:ce:7a:8a:
                    37:a6:7c:2b:ec:b5:d4:27:b4:a1:55:74:bc:8a:93:
                    10:1a:c3:97:30:64:5d:86:14:9c:09:e2:d3:a7:96:
                    dd:e9:8b:21:45:9b:94:3e:be:6c:05:58:16:01:06:
                    e5:7e:be:6e:cf:c0:b4:50:db:44:26:60:86:c2:24:
                    31:62:f1:69:8c:9b:88:e2:fb:39:ad:ad:7b:60:c0:
                    1b:ab:e6:27:b7:83:7b:cb:50:e7:08:35:5a:67:5b:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:FC:F5:8D:EB:65:A2:5A:68:37:38:76:89:05:CD:46:FF:27:A0:58
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/5EFCF58DEB65A25A683738768905CD46FF27A058.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.132.0/22
                IPv6:
                  2804:2d84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265287

    Signature Algorithm: sha256WithRSAEncryption
         c7:57:6b:25:f6:3f:60:b6:63:3a:59:7a:2b:a6:79:73:cc:64:
         d3:c8:be:b2:3d:34:30:44:95:50:57:43:5c:d5:0b:55:18:1e:
         a2:39:cc:39:c1:e4:1d:da:28:89:e7:2f:5e:96:4b:ce:e0:02:
         0b:27:84:6b:4c:d4:60:da:84:5b:39:af:fd:7e:e2:99:38:3d:
         4b:1e:b9:70:ae:2a:67:d5:61:2e:c3:41:b5:4b:d0:9a:01:16:
         f4:23:3d:7d:75:a3:78:99:32:05:ec:3d:4d:c6:34:61:c9:92:
         3c:51:ab:6c:d6:19:fd:f5:31:e6:6d:69:ee:32:10:dc:d0:2f:
         9d:cb:9d:d2:53:ef:60:1f:ce:85:79:b0:8d:1e:e8:33:7b:83:
         b4:4d:37:ad:85:4d:9d:10:76:24:7f:95:db:62:3b:cd:fd:76:
         05:32:98:de:a0:5c:8b:7c:f0:5a:23:25:d5:94:16:a3:2b:bf:
         68:6f:8b:16:30:c2:2f:2d:20:eb:49:43:9e:1e:ba:61:7e:d3:
         e7:58:82:9f:a5:cd:59:45:1c:6f:04:50:4c:eb:36:1e:b0:6c:
         a6:57:45:46:ad:6d:c2:98:cc:85:37:ad:fe:c8:45:55:64:0f:
         43:a2:08:4d:11:3a:6a:a4:d4:00:11:0d:40:96:17:34:fa:90:
         29:46:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 12:31:32 2024 by rpki-client on console-ams.rpki-client.org