Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8A04CA04882B3033216EA271743666138DADE11E.cer
File:                     8A04CA04882B3033216EA271743666138DADE11E.cer (raw, json)
Hash identifier:          VgY0co9GBW8f5QaYffQVibSAufN1VlooUml6y5GVIW4=
Subject key identifier:   8A:04:CA:04:88:2B:30:33:21:6E:A2:71:74:36:66:13:8D:AD:E1:1E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6648DB444125B974145CA4311552EE1F52CEC295
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/0/8A04CA04882B3033216EA271743666138DADE11E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 19:13:25 +0000
Certificate not after:    Mon 07 Apr 2025 19:18:25 +0000
Subordinate resources:    AS: 265954
                          IP: 164.163.104.0/22
                          IP: 2804:405c::/32

Validation:               Failed, certificate revoked on Wed 29 May 2024 02:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:48:db:44:41:25:b9:74:14:5c:a4:31:15:52:ee:1f:52:ce:c2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  8 19:13:25 2024 GMT
            Not After : Apr  7 19:18:25 2025 GMT
        Subject: CN=8A04CA04882B3033216EA271743666138DADE11E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:d9:cb:4c:5d:ef:71:08:0a:33:b7:f9:a2:
                    9b:13:3b:b4:e2:cd:f2:71:93:65:e0:8d:85:ce:57:
                    d6:0f:f6:c3:0c:76:dd:bd:3c:ff:0c:09:7b:25:6a:
                    2f:7b:7e:97:29:e9:36:e4:70:34:f5:8c:79:6b:a1:
                    48:7a:4f:c5:db:c8:01:a2:a1:57:bf:12:b3:6d:c0:
                    29:16:4e:cb:24:07:50:3b:22:53:07:53:48:13:3e:
                    8c:a0:11:9f:43:e8:bf:d0:74:b2:8f:90:97:04:73:
                    cb:85:cc:e6:df:30:2a:db:e3:9c:58:49:c1:eb:e7:
                    40:47:0c:89:f2:11:cc:89:45:2b:e6:22:c7:42:68:
                    f0:19:b6:ce:35:5b:c1:91:02:90:50:71:21:96:69:
                    93:62:e1:f9:7d:34:61:d4:05:f2:57:86:4d:e8:e0:
                    4a:79:11:dc:89:e2:96:86:07:bc:95:99:0f:ca:a8:
                    ac:8b:a5:4a:49:ce:c4:c6:50:7b:49:71:7e:43:4e:
                    d0:54:b5:fd:ff:d3:76:f9:ef:96:bb:c7:ba:aa:29:
                    bf:18:02:84:01:c0:fd:91:93:35:bd:ff:a7:03:50:
                    41:9d:8f:e0:b7:a9:f4:60:3c:b2:b0:11:0e:98:e9:
                    27:ee:3e:16:34:cd:c3:59:cd:e5:84:2c:2c:d7:dc:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:04:CA:04:88:2B:30:33:21:6E:A2:71:74:36:66:13:8D:AD:E1:1E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/0/8A04CA04882B3033216EA271743666138DADE11E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.104.0/22
                IPv6:
                  2804:405c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265954

    Signature Algorithm: sha256WithRSAEncryption
         ab:1e:72:b6:7e:1d:07:e1:73:3a:c4:07:a6:5a:2a:ec:4e:02:
         fc:25:22:3e:ee:e9:d3:f6:da:9a:e9:18:3b:e2:bd:79:ca:7c:
         fd:a7:20:0a:a5:2d:32:79:d5:59:03:9c:67:d1:c9:c8:f9:8a:
         cb:30:61:10:8a:c7:5c:f7:f1:0a:ea:12:12:84:a0:28:be:99:
         6e:bc:d7:15:6b:51:da:58:c4:40:09:6b:dd:0d:6d:8e:b0:d3:
         45:84:d5:a4:da:24:21:17:be:65:dc:2d:50:b8:6c:67:ff:62:
         36:d4:d1:b6:a3:37:ac:18:10:4b:af:a0:ce:3c:62:67:44:2a:
         b1:4c:a3:8e:98:87:a0:11:6d:c8:ea:e1:24:b1:36:d8:dd:cd:
         32:5a:c0:57:07:0b:bc:3d:39:af:7f:b3:3d:9b:7d:9b:af:45:
         72:75:b1:37:01:60:a1:9f:d4:43:b9:de:6a:5d:40:bc:33:b1:
         6f:40:57:11:13:98:92:e8:c9:96:10:60:8a:3d:09:71:c6:54:
         c6:66:51:c5:b7:fe:af:54:e2:e0:85:0d:21:e4:38:60:62:9b:
         fc:68:d3:98:f2:61:7b:c3:88:eb:9e:86:6f:09:53:8c:a9:c3:
         22:e9:62:4d:1f:9a:37:0d:d4:50:2f:95:e5:4c:71:e0:e2:8c:
         97:1b:b4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 04:06:13 2024 by rpki-client on console-fra.rpki-client.org