Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89017B5E4575FE8AE51EC4B4A43444F31B13FEC9.cer
File:                     89017B5E4575FE8AE51EC4B4A43444F31B13FEC9.cer (raw, json)
Hash identifier:          8TiWdeDSd89YPbPILPODm7Lv0c/CT1oZEd9H5X01Y7g=
Subject key identifier:   89:01:7B:5E:45:75:FE:8A:E5:1E:C4:B4:A4:34:44:F3:1B:13:FE:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E3A27714ED410B14BD9EE5E8BCB3A5A7520207A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/89017B5E4575FE8AE51EC4B4A43444F31B13FEC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Nov 2024 20:36:21 +0000
Certificate not after:    Thu 06 Nov 2025 20:41:21 +0000
Subordinate resources:    AS: 264352
                          IP: 131.108.228.0/22
                          IP: 2804:1d2c::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 20:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3a:27:71:4e:d4:10:b1:4b:d9:ee:5e:8b:cb:3a:5a:75:20:20:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  7 20:36:21 2024 GMT
            Not After : Nov  6 20:41:21 2025 GMT
        Subject: CN=89017B5E4575FE8AE51EC4B4A43444F31B13FEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:21:30:c8:eb:73:cd:c3:6a:df:6b:b0:a5:
                    2e:f4:66:c3:e4:cf:70:20:ee:98:94:a4:db:2b:fd:
                    6f:af:50:43:d0:25:bb:4b:9f:5e:a0:86:f0:7a:95:
                    1a:1d:11:4c:0e:78:aa:68:ad:01:f3:93:81:02:b2:
                    a9:61:88:5d:c0:bc:bc:a2:9b:b0:d6:f9:05:55:6d:
                    6d:77:18:b8:22:9b:ed:9d:e4:8f:ac:34:2e:48:f9:
                    9a:35:75:28:e0:1d:8e:4d:b2:ca:53:c6:82:d9:2d:
                    a7:50:f7:f9:29:34:cf:95:67:6f:8c:f3:d0:80:2a:
                    84:e9:18:b3:ec:50:fa:bd:92:ee:d8:f9:40:01:e8:
                    68:c5:ad:b4:78:77:89:bf:83:76:83:1e:da:80:cc:
                    9d:02:f6:4a:94:00:ec:20:ae:c7:4e:0f:03:92:b8:
                    fd:77:ff:7f:03:9f:ab:e2:ed:96:27:b9:ed:b8:41:
                    eb:10:83:b2:f0:4e:20:16:ec:73:a7:9d:45:0d:3e:
                    43:9d:10:4c:6c:11:5c:76:e2:eb:24:81:73:ce:3b:
                    71:41:1f:1e:32:68:3b:9b:7b:89:b2:4e:37:ea:74:
                    03:9d:66:76:b6:6b:3e:70:cd:78:80:00:04:e3:88:
                    99:aa:5b:e7:47:87:ba:1e:5c:b6:2b:76:d3:40:63:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:01:7B:5E:45:75:FE:8A:E5:1E:C4:B4:A4:34:44:F3:1B:13:FE:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/89017B5E4575FE8AE51EC4B4A43444F31B13FEC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22
                IPv6:
                  2804:1d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264352

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:f0:d3:9f:89:5f:2c:0b:37:c2:27:f5:d8:7d:47:c9:10:
         f3:2a:74:a2:a9:30:11:4c:46:22:ba:cf:2a:ae:45:2a:6a:71:
         49:25:31:b4:d6:f3:54:54:0a:88:39:2f:af:92:94:2d:ea:e5:
         82:cb:fe:dc:8e:70:88:31:5d:b5:b4:cb:fc:91:a3:50:3c:f3:
         45:41:a3:33:66:64:3a:43:cb:bf:c3:23:3a:74:26:42:a0:95:
         76:ee:d0:73:e5:97:1a:0b:bf:dc:4a:91:84:b6:cd:27:9c:ca:
         4a:68:e7:6e:9a:83:c0:f2:11:71:ed:8e:f1:0c:12:6e:f3:5e:
         01:0f:89:65:77:9d:a7:d1:e0:9a:d7:b9:95:62:3f:b6:ba:a3:
         b6:be:4b:4e:94:99:11:88:78:b2:2c:a8:c6:46:15:ce:3f:6b:
         ce:e0:25:aa:6a:ce:89:ab:58:13:97:bd:32:a1:2a:37:01:15:
         c8:08:8f:10:20:9f:00:af:cf:f3:33:ed:7b:fa:3c:90:44:46:
         de:f0:8e:a4:52:39:74:51:df:fe:0e:93:d8:75:37:43:0d:cd:
         b1:b1:f1:4e:f4:9e:fc:11:70:ed:d9:17:0d:e2:98:1e:78:5c:
         68:25:df:6a:86:a7:0f:c3:4f:2f:4e:29:cb:eb:9d:fa:c1:9d:
         ec:d8:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:10 2024 by rpki-client on console-ams.rpki-client.org