Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer
File:                     88F8C25C5F36E30578C91973467F9861B5E60B72.cer (raw, json)
Hash identifier:          vrnx6hVABtnWlVTfYUl1d9VzZKloTbRNlcmmsD8SnOU=
Subject key identifier:   88:F8:C2:5C:5F:36:E3:05:78:C9:19:73:46:7F:98:61:B5:E6:0B:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6CAF1CB0ADD5CE96EB5820C6487A8DA165EF490C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/88F8C25C5F36E30578C91973467F9861B5E60B72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jun 2024 13:45:09 +0000
Certificate not after:    Thu 26 Jun 2025 13:50:09 +0000
Subordinate resources:    AS: 270440
                          IP: 200.13.84.0/22
                          IP: 2804:6c04::/32

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 13:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:af:1c:b0:ad:d5:ce:96:eb:58:20:c6:48:7a:8d:a1:65:ef:49:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 13:45:09 2024 GMT
            Not After : Jun 26 13:50:09 2025 GMT
        Subject: CN=88F8C25C5F36E30578C91973467F9861B5E60B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:a8:07:f0:98:71:58:1c:5d:f6:aa:77:90:
                    ae:6d:8a:a3:f0:d8:06:71:9e:da:9f:28:6e:d0:e1:
                    a7:fd:82:2a:08:85:a5:52:09:11:83:3b:54:24:6e:
                    a1:b1:4c:bc:6e:bf:be:66:22:07:f2:43:ea:db:75:
                    70:8f:47:fe:d9:b9:8e:f7:e1:4b:4c:28:44:3a:88:
                    07:e0:67:bd:c5:c8:a5:3c:35:4b:bd:96:56:f3:27:
                    2f:11:fd:fd:2e:ac:84:ac:53:3a:70:66:2f:83:66:
                    ec:a7:14:c9:ce:2d:c2:f0:53:bd:24:85:3a:69:dc:
                    5e:1b:c1:f5:e2:58:cc:02:70:64:a9:eb:e4:63:51:
                    a9:56:64:0c:d4:5f:63:1c:13:aa:a3:8b:a7:45:3f:
                    de:79:d9:ed:62:d2:6c:aa:6d:5b:c4:ec:8f:43:08:
                    56:93:5b:76:b5:7e:2e:15:6f:9c:0c:9f:8f:46:a4:
                    77:99:a5:cd:b8:52:c2:a8:2b:30:90:c5:ec:30:e0:
                    fd:fa:b5:55:b6:1d:6f:70:9a:fb:6d:ab:90:fd:e0:
                    8d:af:50:b6:2a:f2:ee:fe:ef:0c:0e:59:45:65:be:
                    35:98:eb:b1:56:03:63:0d:8a:12:87:f3:e0:d3:ef:
                    03:f6:96:a5:90:cd:22:8b:69:c1:b5:6f:7b:a7:8b:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:F8:C2:5C:5F:36:E3:05:78:C9:19:73:46:7F:98:61:B5:E6:0B:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/88F8C25C5F36E30578C91973467F9861B5E60B72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.84.0/22
                IPv6:
                  2804:6c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270440

    Signature Algorithm: sha256WithRSAEncryption
         b7:53:17:19:d1:af:18:32:93:8c:0b:b9:bf:d1:2c:4f:57:b4:
         0a:94:82:f5:dc:c9:6f:43:9c:38:8e:be:d3:1a:4e:cd:e6:8f:
         ad:fe:45:0d:78:09:df:36:01:1a:56:42:43:f2:42:8f:52:b6:
         a6:91:16:40:71:d8:4e:b2:b4:89:85:0e:03:c8:d9:b0:98:0b:
         ef:48:ca:ac:0a:a2:db:55:e7:5c:15:dc:2d:60:11:5b:3d:f3:
         e4:ca:81:fa:29:4f:dd:06:cf:2c:bb:ce:31:63:c5:e2:e0:d6:
         13:b3:e9:78:d1:4b:55:ce:19:58:12:36:74:1c:68:eb:4a:11:
         0f:3a:f3:8d:09:b2:aa:bb:a7:2d:91:3d:6e:0f:a0:b8:d1:06:
         18:2b:b9:d3:e6:66:8c:e1:22:94:81:f0:24:a6:72:e5:ba:e4:
         1d:c7:8e:80:4f:e5:d0:66:1e:43:c4:62:bf:15:03:fe:bb:98:
         fc:5f:ff:00:9c:7a:31:ce:89:0b:e6:d4:3a:87:79:9e:02:51:
         b1:59:9d:64:3e:de:e5:6d:87:86:62:e5:a3:6c:14:5e:ce:22:
         38:48:c5:fe:64:c6:da:8e:c0:93:9a:37:4d:92:86:0b:b4:10:
         9a:38:69:cb:b1:7f:6a:ce:af:31:35:ae:3a:04:20:91:6f:64:
         08:cb:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:09 2024 by rpki-client on console-ams.rpki-client.org