Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8BA7F66325E28134C424CF19BA1599819495E340.cer
File:                     8BA7F66325E28134C424CF19BA1599819495E340.cer (raw, json)
Hash identifier:          nWBFk3GuGbolSoIr9P9uI64NJBGPwZ5T+c+ziUmOGl0=
Subject key identifier:   8B:A7:F6:63:25:E2:81:34:C4:24:CF:19:BA:15:99:81:94:95:E3:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       685C105CAD11CD31010A0843A37C30F7EA79727E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/8BA7F66325E28134C424CF19BA1599819495E340.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:14:40 +0000
Certificate not after:    Wed 02 Apr 2025 19:19:40 +0000
Subordinate resources:    AS: 269109
                          IP: 45.179.68.0/22
                          IP: 2804:5f90::/32

Validation:               Failed, certificate revoked on Sun 23 Jun 2024 14:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5c:10:5c:ad:11:cd:31:01:0a:08:43:a3:7c:30:f7:ea:79:72:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:14:40 2024 GMT
            Not After : Apr  2 19:19:40 2025 GMT
        Subject: CN=8BA7F66325E28134C424CF19BA1599819495E340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:c4:73:5d:71:36:5c:5b:b0:19:a6:0d:f8:
                    56:07:b3:c4:3d:f5:90:cc:a4:e2:48:ba:c5:0a:43:
                    b7:e2:b9:72:6a:2a:bb:7f:12:c4:b0:ac:94:b7:08:
                    db:34:db:35:b8:02:3c:42:2c:7b:16:a6:34:c8:f8:
                    27:f8:f2:31:47:a0:a0:60:3c:79:81:c7:36:29:6e:
                    27:09:4c:e7:bb:2d:1c:01:bc:9c:a9:7e:94:e8:f5:
                    90:8d:d2:13:7e:4c:5e:c3:7f:77:b4:26:58:b1:f2:
                    ca:0d:70:ca:7d:12:4e:db:4a:ec:64:2b:b3:02:37:
                    69:bd:00:e3:bd:42:f9:8c:07:9c:17:1b:15:08:f6:
                    e6:16:d7:9f:13:bd:2b:9a:09:7a:ec:48:1d:1f:81:
                    9d:23:91:b9:33:d9:4c:62:bb:18:49:aa:76:db:e2:
                    ea:f5:8b:cd:25:cf:9c:d5:1e:06:c3:3f:72:89:12:
                    7e:f5:1f:9f:64:aa:24:6a:ce:25:a1:58:97:9d:83:
                    a2:41:fd:53:8f:c6:0f:74:cf:2b:4f:ba:6e:bd:af:
                    15:a4:87:5f:44:87:ec:2a:53:e4:81:ff:a8:86:2e:
                    42:6f:4e:a4:58:80:b6:ba:a7:a7:40:16:69:fb:2f:
                    5e:f5:0b:f3:df:43:ff:40:ad:49:6b:41:6c:a9:f3:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:A7:F6:63:25:E2:81:34:C4:24:CF:19:BA:15:99:81:94:95:E3:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/8BA7F66325E28134C424CF19BA1599819495E340.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.68.0/22
                IPv6:
                  2804:5f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269109

    Signature Algorithm: sha256WithRSAEncryption
         95:e2:07:2f:d4:6c:42:7d:60:d9:59:c8:89:9a:44:87:4b:93:
         d1:b8:8c:d5:54:a3:48:9a:4a:3d:ce:dc:2e:3c:ee:b0:14:e8:
         7a:74:e1:87:d8:7a:6f:dc:1b:72:5a:38:8f:dc:48:28:19:bb:
         a0:93:e7:e3:ed:d6:1c:ae:fa:1b:8a:ac:2e:9d:59:b6:ae:8c:
         4a:bd:f1:56:00:36:d3:af:ca:48:85:9b:30:28:00:ce:a4:d3:
         39:f1:eb:fe:6d:76:6c:79:9d:02:31:eb:35:ca:12:3e:9a:bc:
         97:af:d3:e1:b0:60:aa:2f:10:bd:72:1b:a6:89:c5:45:72:e1:
         dd:e0:82:54:4f:b5:37:8d:47:2f:e8:08:8c:74:0b:7a:4a:3c:
         e0:f7:ab:0d:5a:56:e6:20:12:af:cc:da:47:05:c4:4c:cc:bd:
         d0:33:89:18:01:ac:76:b3:5f:af:40:3e:ac:ef:a9:15:46:86:
         6b:67:f5:c1:dc:4f:b2:33:7f:cb:f4:fd:98:ca:16:6d:14:76:
         94:46:4d:ad:b7:c4:41:13:f8:c3:9f:9b:d3:40:af:84:7b:ab:
         25:d0:0b:5d:ea:e7:fd:e7:c6:bf:2c:c4:08:8c:79:4a:98:96:
         cb:42:c4:72:66:ca:0a:8a:21:ff:4c:b2:41:4d:4c:88:8e:37:
         8d:0e:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:19:50 2024 by rpki-client on console-fra.rpki-client.org