Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.cer
File:                     6288854C1B45D74756C64B08ECA8E456AE06FB17.cer (raw, json)
Hash identifier:          UUG2caG1X31VLmODV7stmuiFGTk+DpjdegENUgeTQx4=
Subject key identifier:   62:88:85:4C:1B:45:D7:47:56:C6:4B:08:EC:A8:E4:56:AE:06:FB:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       088C2FAF992C0266DB56F1FF35EBB6D13DA25003
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Sep 2024 11:00:32 +0000
Certificate not after:    Sat 27 Sep 2025 11:05:32 +0000
Subordinate resources:    AS: 273417
                          IP: 187.86.163.0/24
                          IP: 2804:8e50::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 22:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8c:2f:af:99:2c:02:66:db:56:f1:ff:35:eb:b6:d1:3d:a2:50:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 28 11:00:32 2024 GMT
            Not After : Sep 27 11:05:32 2025 GMT
        Subject: CN=6288854C1B45D74756C64B08ECA8E456AE06FB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:62:26:a7:a6:0c:53:7b:99:0e:e2:1c:49:
                    65:9d:9c:bd:7b:39:fe:9c:63:cd:36:f2:9b:b6:00:
                    c1:c4:90:d6:b5:6c:f7:32:b3:c3:47:58:e4:7d:02:
                    ef:54:fb:05:88:21:fa:a6:01:f8:10:9c:e5:15:fc:
                    e1:f2:fc:4b:11:79:1c:e4:e1:33:ca:c1:20:ca:ce:
                    96:e1:2a:99:26:e1:4f:20:e8:79:cb:96:0a:0d:1f:
                    55:55:2e:f0:1c:9c:39:94:44:8b:fc:e8:fd:c1:f7:
                    7f:67:23:9e:2c:bc:d0:91:b9:af:0d:1a:23:31:bf:
                    90:08:23:7b:cf:5b:89:55:a1:a2:08:1c:5a:25:b7:
                    63:b9:67:32:c6:26:1f:4a:b7:d7:1c:c6:ac:0a:95:
                    3c:5d:73:c5:77:8b:aa:b2:73:41:26:d1:cb:6b:ab:
                    c1:91:08:5c:f6:7a:40:1b:f3:01:6d:1d:ac:7e:8c:
                    75:d4:9c:d9:02:7e:32:8b:c7:3d:f4:2e:31:1f:39:
                    4d:ae:a4:45:9d:1c:1e:16:59:8d:d6:c1:56:b3:c6:
                    2f:ae:98:08:d6:ab:4f:5f:0c:d9:05:1d:d0:98:b6:
                    9f:59:f3:ea:07:36:30:61:e6:24:4a:d0:a7:ca:cd:
                    f6:3a:21:2f:ba:b3:6d:d4:bb:59:d8:11:cf:d5:3e:
                    73:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:88:85:4C:1B:45:D7:47:56:C6:4B:08:EC:A8:E4:56:AE:06:FB:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.163.0/24
                IPv6:
                  2804:8e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273417

    Signature Algorithm: sha256WithRSAEncryption
         87:82:b8:0f:11:b6:9b:ae:62:a1:a7:0e:ac:d9:f3:3d:2d:66:
         b2:46:90:fe:20:35:2a:12:f5:4d:75:e9:a5:55:00:f6:bd:ec:
         e0:b0:6a:0b:f8:54:33:05:14:87:42:6c:25:5e:99:f6:4b:4f:
         33:fc:85:b3:86:3e:8b:ae:3d:53:fe:dc:54:80:6e:90:29:7b:
         ad:d9:a9:fe:b3:93:c7:0e:d1:93:2c:06:ba:f8:8a:44:d6:a2:
         a1:57:49:66:ba:52:f3:de:51:20:16:5f:ee:21:a5:43:76:ab:
         ec:41:6b:28:56:16:9b:1e:e2:9d:76:c7:92:3b:9d:8d:cb:f3:
         c5:db:22:94:15:cb:f1:b3:16:b3:33:38:92:d1:4c:2f:03:7f:
         dd:fb:3b:9b:48:b6:37:bc:e1:23:e2:9e:cf:83:80:1f:15:42:
         ab:17:e0:fb:1e:05:91:73:38:99:55:96:c3:0b:46:ee:5f:0f:
         77:f9:04:a2:79:fc:a7:fb:8d:9c:0f:d1:94:2b:b4:d0:c0:6e:
         2d:76:c8:92:79:72:d8:7e:db:50:33:f4:65:27:ab:e4:5f:77:
         e2:98:a3:7f:3e:a6:36:35:6a:24:30:7d:ed:27:ad:af:b1:02:
         cf:0f:9b:c9:f8:2d:89:16:34:5c:93:b3:c8:cb:c3:ea:a7:12:
         6c:9a:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 02:55:14 2024 by rpki-client on console-fra.rpki-client.org