Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D3395D75637415D299BB7A86A681B8554BA654E.cer
File:                     8D3395D75637415D299BB7A86A681B8554BA654E.cer (raw, json)
Hash identifier:          +IGilrvy7WprtUmT2Mb1FgVxthasoht9x/ZcXf7gliI=
Subject key identifier:   8D:33:95:D7:56:37:41:5D:29:9B:B7:A8:6A:68:1B:85:54:BA:65:4E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5261D4F512DFD1360D6C3C01BF5C4B8352A4FE15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/1/8D3395D75637415D299BB7A86A681B8554BA654E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jul 2024 09:08:55 +0000
Certificate not after:    Wed 02 Jul 2025 09:13:55 +0000
Subordinate resources:    AS: 52731
                          IP: 177.84.248.0/21
                          IP: 2804:2890::/32

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 09:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:61:d4:f5:12:df:d1:36:0d:6c:3c:01:bf:5c:4b:83:52:a4:fe:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  3 09:08:55 2024 GMT
            Not After : Jul  2 09:13:55 2025 GMT
        Subject: CN=8D3395D75637415D299BB7A86A681B8554BA654E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:de:b8:83:25:52:80:85:3c:f8:ac:45:4c:f3:
                    b9:99:c7:72:34:e2:15:7a:0d:7b:79:de:cf:e4:fb:
                    b1:cd:35:4b:c9:1b:f9:b2:4e:ce:aa:f0:ee:da:8b:
                    ab:d5:c2:bf:ca:b7:9c:b5:05:14:6e:ce:b4:02:1f:
                    98:75:fc:5d:d1:ec:cf:56:7e:8b:39:ef:f3:25:b0:
                    a7:9b:5a:ca:8b:36:10:10:b4:d5:49:bc:07:33:83:
                    8f:22:13:8b:1e:51:35:be:1b:26:28:ac:33:88:66:
                    e4:8f:d5:91:2a:12:f7:d8:2e:c4:a1:f4:34:44:7b:
                    0d:71:68:45:14:7f:a7:98:be:1c:2d:23:5e:82:46:
                    ce:96:79:d9:a5:3b:da:86:06:cc:35:38:de:80:19:
                    d5:36:cd:89:3c:9d:2b:44:4f:d6:65:71:fc:a1:48:
                    96:1e:7c:07:3f:84:0e:81:a3:f7:c1:a9:97:f1:07:
                    b4:3e:04:ca:39:b3:2b:59:b6:7b:38:ab:c6:23:1a:
                    cd:b9:1e:98:f0:95:ea:34:e9:3a:1d:d8:7d:c2:b2:
                    f2:de:8b:d5:37:93:3d:0b:02:c3:25:b8:f6:85:db:
                    57:db:35:37:c2:4c:d1:02:ce:a8:ae:5b:84:ed:bb:
                    3b:80:56:5c:03:5d:e9:d1:24:06:20:30:02:f9:69:
                    8e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:33:95:D7:56:37:41:5D:29:9B:B7:A8:6A:68:1B:85:54:BA:65:4E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/1/8D3395D75637415D299BB7A86A681B8554BA654E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.248.0/21
                IPv6:
                  2804:2890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52731

    Signature Algorithm: sha256WithRSAEncryption
         d4:bf:21:14:05:ca:97:9a:63:e7:68:0a:e8:16:6f:42:38:19:
         07:27:b4:36:2e:54:71:8d:0a:86:1d:86:5f:9d:af:f4:a3:2b:
         ec:5c:55:b4:5b:18:cb:88:40:a8:93:1e:60:45:04:65:9c:53:
         95:27:c3:f6:7a:58:c5:fc:d1:6a:f2:60:3c:fc:44:a4:25:d1:
         36:75:14:1e:3a:2e:1b:d0:88:e5:69:81:ab:12:e6:53:d5:f6:
         dd:f1:07:da:d2:9d:9a:06:1a:5f:0b:be:e0:fb:16:35:9e:26:
         3f:15:d2:96:83:98:3f:dd:5a:3d:9b:55:64:6e:3a:f3:32:3c:
         a5:0a:a6:a5:67:f2:1d:9c:56:73:5e:91:24:e9:d6:3d:2e:ab:
         93:08:cf:23:d3:4f:8a:70:ef:06:df:7b:69:2f:b8:67:87:79:
         f8:8e:11:61:68:26:e3:e6:bc:98:36:92:73:10:5d:14:cd:78:
         28:60:48:d1:58:bf:c5:4e:79:2b:ec:91:6d:c9:70:4d:74:b4:
         d8:a6:20:54:d9:37:30:a8:53:03:ea:99:95:14:ba:bb:95:78:
         49:8b:25:0e:0b:9b:63:c3:4c:a0:ae:e3:91:c7:c5:0c:32:bc:
         48:66:8c:9d:02:83:d6:92:3a:db:4a:e5:03:b6:ae:c1:ea:5f:
         9a:ef:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 12:31:32 2024 by rpki-client on console-ams.rpki-client.org