Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/605F1104307FA794346CF1A015762CC138314F6E.cer
File:                     605F1104307FA794346CF1A015762CC138314F6E.cer (raw, json)
Hash identifier:          ayKzvEvMXx3DHeNZsnQTtxeQvWME+za7lFKHkD+Laj0=
Subject key identifier:   60:5F:11:04:30:7F:A7:94:34:6C:F1:A0:15:76:2C:C1:38:31:4F:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       519E54C5472458E1047E958EE7895482906EF038
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/605F1104307FA794346CF1A015762CC138314F6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Jun 2024 16:24:25 +0000
Certificate not after:    Sat 07 Jun 2025 16:29:25 +0000
Subordinate resources:    AS: 265282
                          IP: 168.90.208.0/22
                          IP: 2804:2d70::/32

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 17:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9e:54:c5:47:24:58:e1:04:7e:95:8e:e7:89:54:82:90:6e:f0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  8 16:24:25 2024 GMT
            Not After : Jun  7 16:29:25 2025 GMT
        Subject: CN=605F1104307FA794346CF1A015762CC138314F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:8b:71:93:d4:38:b2:b1:96:2c:f8:cd:36:
                    c7:36:b2:5e:71:e9:a1:5a:01:b9:03:a8:bf:0b:ee:
                    d2:4f:05:19:91:7d:df:7f:90:e9:6e:fc:37:a8:bf:
                    62:ef:9a:f0:1a:2d:11:27:ff:d6:3b:4f:4e:07:cd:
                    8e:be:f1:ea:6c:ec:7c:55:2e:06:85:56:d8:4a:8c:
                    ae:0e:57:df:87:26:dd:36:ed:60:58:a5:6c:cc:1b:
                    84:f8:0e:69:0a:05:80:77:47:ed:63:ef:9a:cf:c8:
                    88:66:7e:a1:4f:fa:8f:e1:bf:36:e6:f7:7c:53:ca:
                    65:51:f8:1f:cc:87:68:98:e5:ba:9b:65:98:3d:7d:
                    a7:a8:cb:9c:ea:62:32:3c:b0:b1:3c:8b:05:e0:dd:
                    01:00:a5:9c:19:f8:5f:36:02:0e:34:5e:5f:53:b1:
                    f1:e1:09:e1:e1:04:a3:67:5d:cc:a7:a1:35:ec:0e:
                    da:5a:99:08:58:28:1a:16:05:d2:3d:86:88:51:ab:
                    44:c2:81:6b:74:3d:4f:78:6e:57:b6:56:bb:94:6d:
                    fa:63:3a:78:d7:44:26:cb:d3:9f:3d:d7:e0:da:56:
                    eb:81:71:f7:b7:5a:47:49:08:a4:21:d2:90:c5:e8:
                    ee:ad:62:50:d4:cd:46:57:b5:e4:90:a1:6b:73:6e:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:5F:11:04:30:7F:A7:94:34:6C:F1:A0:15:76:2C:C1:38:31:4F:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/605F1104307FA794346CF1A015762CC138314F6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.208.0/22
                IPv6:
                  2804:2d70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265282

    Signature Algorithm: sha256WithRSAEncryption
         a0:0f:d7:c7:0c:df:96:dd:b8:a9:5b:11:44:50:2c:fd:83:27:
         11:8f:93:76:6a:f9:e9:dd:2f:ed:ef:db:f9:f3:ff:63:87:d3:
         b4:44:0c:08:a8:71:a3:b7:27:81:b9:1b:d8:a8:6a:4b:01:e0:
         11:90:01:af:c6:20:d8:d2:1b:51:36:b1:a4:c9:76:43:a0:3b:
         8f:3e:58:29:c6:24:e0:65:30:96:3a:f9:6b:f1:81:4f:a0:f0:
         29:0d:ac:9c:9f:91:c9:8c:54:a0:aa:ee:f6:e5:f7:4a:1e:16:
         62:2f:86:66:62:07:22:dc:38:04:78:0a:63:49:ae:b9:08:8a:
         92:98:ee:df:76:4d:11:ef:41:b2:82:90:8d:29:31:2c:7c:81:
         14:07:40:69:09:2a:ae:c9:27:e3:9e:ad:b6:f7:75:46:ce:9f:
         90:31:a2:f8:0b:10:e1:a1:08:70:9b:49:bf:0d:b6:34:87:ca:
         42:82:3e:a9:65:d7:b6:0c:c6:a3:ae:4b:9c:d3:af:cd:1f:6f:
         83:25:81:53:a6:8f:00:ba:dc:57:8a:14:ad:ce:74:8e:97:48:
         ad:d0:0d:f8:a2:f7:2d:0a:83:4d:b5:94:bd:f9:85:04:19:b9:
         f6:4a:4d:36:d3:b3:54:ce:50:cd:7c:c3:e7:5d:62:3c:b8:8c:
         67:1d:1b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 19:46:36 2024 by rpki-client on console-fra.rpki-client.org