Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.cer
File:                     717DC8BA5F820F9C596A4EBA29C7518024CE28CB.cer (raw, json)
Hash identifier:          8LBPYKnqIuOt3WXCcOmCyrQVJzbLIAMH6G+S1h/cEHY=
Subject key identifier:   71:7D:C8:BA:5F:82:0F:9C:59:6A:4E:BA:29:C7:51:80:24:CE:28:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0110FBB874C98E91D534F28018C92ED303AC1756
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:41:52 +0000
Certificate not after:    Thu 03 Apr 2025 10:46:52 +0000
Subordinate resources:    AS: 263320
                          IP: 191.7.144.0/20
                          IP: 2804:143c::/32

Validation:               Failed, certificate revoked on Sun 12 May 2024 07:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:10:fb:b8:74:c9:8e:91:d5:34:f2:80:18:c9:2e:d3:03:ac:17:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:41:52 2024 GMT
            Not After : Apr  3 10:46:52 2025 GMT
        Subject: CN=717DC8BA5F820F9C596A4EBA29C7518024CE28CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:84:3d:1f:61:16:04:93:0a:9d:9a:96:85:
                    be:fe:a8:0b:5b:19:92:69:84:4c:e6:49:7d:8c:7c:
                    14:74:02:ca:fa:04:15:a2:17:5a:79:39:d8:93:22:
                    06:1b:fb:ed:bc:47:6b:91:af:63:41:48:b1:ff:07:
                    6e:96:0d:47:ab:7a:a9:f8:02:5d:64:d0:2c:79:9e:
                    40:8a:2d:ce:5d:e9:b8:1b:d2:0d:43:06:11:29:09:
                    9f:5c:45:a9:91:11:2e:b4:3f:a8:da:73:34:a8:c5:
                    54:15:90:ec:d5:9f:64:fd:25:c5:60:6e:11:91:54:
                    45:36:2b:d7:84:19:9b:d0:33:0f:bc:f1:cf:67:2a:
                    2b:46:12:02:de:02:04:0c:fa:cd:b1:5f:44:d8:6c:
                    9c:cc:3f:e4:d5:77:89:30:bf:82:ef:a5:88:9a:93:
                    77:f1:48:e3:d5:ae:67:37:84:69:c5:97:f8:c5:1e:
                    f6:69:52:0b:a3:18:b6:39:04:3f:32:02:7c:22:3f:
                    e6:33:8f:d8:fd:80:ac:f7:1e:ef:84:c1:95:b8:71:
                    91:76:b1:47:f3:d8:34:8e:88:dc:b0:66:2d:2c:92:
                    3c:aa:db:f5:85:e2:cd:33:a7:eb:c2:dd:4b:28:e8:
                    f4:dd:bb:c8:4d:a1:43:59:d8:10:32:e6:1a:d7:5b:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:7D:C8:BA:5F:82:0F:9C:59:6A:4E:BA:29:C7:51:80:24:CE:28:CB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.144.0/20
                IPv6:
                  2804:143c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263320

    Signature Algorithm: sha256WithRSAEncryption
         1b:f0:69:e0:b9:bf:45:b4:44:65:9e:0e:35:aa:54:88:79:54:
         84:f6:96:de:03:02:cc:ea:b5:c4:d8:28:d4:d9:53:07:c9:ed:
         7a:b6:5f:2f:68:32:12:cd:fa:4a:3b:32:a6:cf:c6:2d:50:30:
         4d:97:4d:3d:44:2e:6c:51:66:ce:cc:f5:c1:34:02:47:70:f2:
         61:1b:db:c7:a8:37:9b:67:1a:69:6b:c9:ad:30:d0:bb:8a:48:
         7f:4d:65:14:fe:e9:0d:1e:cd:7c:45:59:db:1a:dc:5f:02:4c:
         0c:b4:67:bc:68:6b:ee:c2:ed:35:1e:a6:57:4e:ef:2d:71:3f:
         37:c2:17:2c:fd:74:71:61:0f:17:ba:e9:c6:33:e8:3e:03:37:
         6b:e4:79:d4:3f:d7:6e:fc:5a:0f:14:12:78:3f:be:55:53:e3:
         42:ea:c6:2f:c8:fb:5b:fc:02:6f:c0:f0:d9:8c:88:a4:81:93:
         f3:7b:c9:90:dd:ea:0a:67:2a:18:e8:d5:65:4a:8b:da:d4:6f:
         c6:2c:63:b2:94:9b:d7:71:1b:c3:ba:02:d3:8b:e4:e2:d4:fd:
         86:1d:e5:87:41:08:a0:e7:1e:0c:12:94:70:06:30:dc:a8:52:
         05:36:7d:35:a3:05:59:20:81:53:93:1f:ef:6a:cb:99:ea:0a:
         4d:d6:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org