Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F0E5772CDACEDE5CAC14408A2539D423666E636.cer
File:                     6F0E5772CDACEDE5CAC14408A2539D423666E636.cer (raw, json)
Hash identifier:          G8K6UZorUkCDO12JKrBkaM6pjllHPdAV8HOzgGveeH4=
Subject key identifier:   6F:0E:57:72:CD:AC:ED:E5:CA:C1:44:08:A2:53:9D:42:36:66:E6:36
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A705F786E46D2433B9E5885944B6BF153CA6266
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/1/6F0E5772CDACEDE5CAC14408A2539D423666E636.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:40:51 +0000
Certificate not after:    Thu 03 Apr 2025 08:45:51 +0000
Subordinate resources:    IP: 190.89.68.0/22
                          IP: 2804:6ac4::/32

Validation:               Failed, certificate revoked on Mon 20 May 2024 13:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:70:5f:78:6e:46:d2:43:3b:9e:58:85:94:4b:6b:f1:53:ca:62:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:40:51 2024 GMT
            Not After : Apr  3 08:45:51 2025 GMT
        Subject: CN=6F0E5772CDACEDE5CAC14408A2539D423666E636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:96:a1:a3:62:1c:7c:ad:6b:8f:ec:bb:37:
                    3f:6d:3d:9a:62:22:2b:04:0c:b6:dd:a7:1b:ac:21:
                    b6:8a:fc:c3:16:0d:f2:e9:8d:f0:32:d5:77:34:41:
                    8e:f9:af:26:cb:1d:ca:56:7a:7b:96:28:74:02:dc:
                    c3:2a:b4:d7:bb:b8:37:ca:d7:b2:22:8d:92:29:66:
                    1b:98:7c:94:4b:0f:56:3d:ba:1e:bb:90:07:5a:88:
                    f9:1d:e7:f1:b2:3a:0a:82:6b:a9:c3:f3:d1:84:8f:
                    cd:d1:08:27:c7:7a:31:ad:dc:dd:f9:84:2e:48:a5:
                    56:7d:a3:58:1e:0c:14:c1:a7:52:86:fe:62:2c:0f:
                    c5:c2:63:2a:cf:77:d1:d7:28:17:c5:04:2b:bc:25:
                    b4:6d:a4:e8:c0:4e:a0:d5:54:cb:6f:89:30:00:0d:
                    50:26:79:82:e5:a8:5a:d0:17:36:b8:bd:0b:3b:db:
                    1d:4a:71:06:2d:44:5f:ee:7d:c8:03:c3:e9:20:c5:
                    41:e5:26:3f:91:09:6d:fd:a0:41:92:0e:2a:e6:9d:
                    af:c9:37:26:51:75:2d:0f:d4:7d:67:d9:75:51:5f:
                    0f:08:58:e6:2d:90:9b:ba:4e:99:df:c1:1d:bd:e7:
                    3d:31:19:a5:f0:b4:ba:68:0b:12:e1:15:87:37:76:
                    63:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:0E:57:72:CD:AC:ED:E5:CA:C1:44:08:A2:53:9D:42:36:66:E6:36
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/1/6F0E5772CDACEDE5CAC14408A2539D423666E636.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.68.0/22
                IPv6:
                  2804:6ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:b6:19:50:72:de:d1:9a:65:8c:bf:80:ef:45:92:b4:2a:cc:
         0d:e9:f0:f5:ae:b7:a9:75:18:7e:70:ca:67:a0:4d:3b:66:2a:
         b1:3c:9e:7f:1c:b4:87:74:c8:91:39:1c:b4:fe:28:fe:b0:6d:
         82:48:e1:63:43:cd:e0:a6:2d:61:04:04:f5:8a:7e:04:37:1d:
         94:7a:c1:16:7f:85:ad:6f:49:9f:09:79:6d:87:d3:05:ef:c7:
         51:12:69:09:8f:70:c2:74:4e:31:4f:4f:03:94:86:63:cf:5b:
         52:63:c0:df:69:f3:c5:5b:b3:40:80:6e:34:83:9a:86:30:ca:
         e7:4a:08:ad:03:c2:ae:e3:45:41:f0:d5:23:6b:f0:ef:12:99:
         91:70:22:39:53:8e:45:6e:3f:f7:c3:af:3a:8d:84:a6:94:3f:
         07:c9:1c:be:fa:52:62:e2:28:83:43:b1:b4:02:5f:50:f3:c3:
         38:21:bc:af:35:55:53:86:83:bd:47:9a:fe:ab:5d:5b:10:cf:
         d5:73:11:e7:ae:12:a0:97:cb:f3:1d:a1:41:b4:f7:a4:44:f2:
         1b:fd:5a:50:f3:6e:73:ae:4a:61:20:23:56:bb:59:90:e0:d5:
         71:46:09:87:1d:b3:6f:0a:fe:7e:cb:53:15:dd:0a:36:4e:f5:
         ca:45:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org