Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8A41BCAC92557DC5FEAF58C2237EC573624B2F0F.cer
File:                     8A41BCAC92557DC5FEAF58C2237EC573624B2F0F.cer (raw, json)
Hash identifier:          a575Oe6qbW34NoTM3rwoq3fuA3MRfucGwJSbDDFpZEc=
Subject key identifier:   8A:41:BC:AC:92:55:7D:C5:FE:AF:58:C2:23:7E:C5:73:62:4B:2F:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7AED014B05AC7F0AD944EF972E46B836A64BA748
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/1/8A41BCAC92557DC5FEAF58C2237EC573624B2F0F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jun 2024 14:51:46 +0000
Certificate not after:    Mon 09 Jun 2025 14:56:46 +0000
Subordinate resources:    AS: 52855
                          IP: 177.105.80.0/20

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 18:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ed:01:4b:05:ac:7f:0a:d9:44:ef:97:2e:46:b8:36:a6:4b:a7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 10 14:51:46 2024 GMT
            Not After : Jun  9 14:56:46 2025 GMT
        Subject: CN=8A41BCAC92557DC5FEAF58C2237EC573624B2F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:66:b1:fb:ca:82:85:46:e8:be:3e:d8:5c:
                    2b:cc:10:bc:5d:b2:7f:ce:69:ec:ee:a7:5c:77:34:
                    32:4a:fe:f1:e3:97:dc:36:40:1c:20:5b:1d:01:f1:
                    e2:ab:b0:fb:08:75:7c:90:18:28:b1:a7:4e:ee:40:
                    04:48:cd:fb:b6:d3:16:6c:7b:13:07:28:f9:98:90:
                    01:1a:ab:eb:ce:ae:bf:57:d5:a5:9a:a5:22:31:4f:
                    65:f4:fe:ae:b3:14:0d:24:0d:ba:d5:56:27:be:ca:
                    c1:2b:80:57:6b:fd:b6:eb:0b:2a:73:5f:78:c5:53:
                    8d:ef:f5:1b:3f:62:bc:92:e5:c1:bc:33:aa:41:19:
                    e2:62:fd:54:20:a1:be:84:a3:b2:e6:cc:31:ca:b6:
                    8d:a6:9c:59:dd:10:53:45:da:6c:64:3e:49:8b:16:
                    76:bd:06:bf:74:57:f3:da:26:f9:dc:b1:38:a5:e3:
                    9f:44:34:3c:f4:fd:89:0f:69:a2:e2:2d:d5:19:5b:
                    78:9b:45:c2:2a:1a:4d:16:98:5f:36:62:7b:ec:3c:
                    49:6c:31:30:ac:f5:cc:a9:b2:ba:6e:71:80:48:25:
                    a0:55:b7:1e:15:ad:56:1a:5e:8b:f5:ba:fb:66:0a:
                    2e:4d:63:d0:ab:18:9a:88:98:4d:3d:10:2f:66:c9:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:41:BC:AC:92:55:7D:C5:FE:AF:58:C2:23:7E:C5:73:62:4B:2F:0F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/1/8A41BCAC92557DC5FEAF58C2237EC573624B2F0F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52855

    Signature Algorithm: sha256WithRSAEncryption
         10:ef:1e:0c:8a:34:13:43:a8:8f:c3:14:77:21:7e:a7:60:fa:
         63:50:cb:ea:31:cb:e3:1d:8b:78:aa:41:5f:aa:f0:d2:67:0e:
         97:36:a6:87:db:3a:a9:9c:91:e6:dd:7e:54:01:7d:4a:3e:4d:
         d6:3d:33:f9:67:77:99:50:90:37:fe:b7:86:10:26:18:71:58:
         d6:fe:71:13:2a:97:9f:c9:10:8a:9f:0e:95:2d:93:06:4e:f5:
         63:b4:c8:1c:b5:52:09:3a:ad:1a:f8:7c:ee:50:ff:e6:2b:47:
         25:e7:db:09:aa:76:6e:5a:69:7f:10:03:89:e0:c8:52:e9:05:
         fc:7b:2e:07:19:d8:33:e0:27:c0:d3:ba:85:c1:37:5b:05:1b:
         5f:8d:a2:a6:5c:94:12:f4:26:f9:e7:55:b2:2c:85:90:05:5c:
         6f:d3:72:8e:45:56:27:a5:28:c8:ed:07:55:96:bd:0f:3b:88:
         6d:ae:c5:56:b6:c7:a9:c5:aa:9f:48:41:fa:5c:4c:e5:87:a9:
         29:03:d8:b1:49:bd:4b:85:a5:89:32:63:e8:8f:50:ba:aa:1a:
         42:a5:af:6b:f0:7d:16:c7:ab:9b:de:13:d3:12:af:7b:d9:c9:
         af:e0:91:83:12:70:86:73:0c:05:0f:f3:01:48:06:f0:78:5e:
         f5:de:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 21:13:36 2024 by rpki-client on console-ams.rpki-client.org