Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
File:                     8EA97C26E58799D3765EA8E38C553BF596FE990E.cer (raw, json)
Hash identifier:          y31Lq58DU/n+u5nGMf3v5MhnJfyxRqWipiwapnfFRcM=
Subject key identifier:   8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       13CFD300EA19FC68DED6CE59FC963022BF29B8D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jul 2024 15:04:08 +0000
Certificate not after:    Fri 04 Jul 2025 15:09:08 +0000
Subordinate resources:    AS: 262293
                          IP: 131.161.132.0/22
                          IP: 138.94.108.0/22
                          IP: 143.202.240.0/22
                          IP: 168.232.152.0/22
                          IP: 170.80.176.0/22
                          IP: 177.154.192.0/19
                          IP: 179.107.224.0/19
                          IP: 2804:a80::/32

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 17:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cf:d3:00:ea:19:fc:68:de:d6:ce:59:fc:96:30:22:bf:29:b8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  5 15:04:08 2024 GMT
            Not After : Jul  4 15:09:08 2025 GMT
        Subject: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:ed:3c:77:77:c4:f1:32:58:b2:2d:1e:c5:
                    f9:0a:16:c8:79:b1:4a:93:7f:99:1b:e9:05:be:f8:
                    c2:93:73:ef:96:ee:1a:af:52:24:ca:dd:ec:d3:6d:
                    7d:60:63:60:0f:4d:b0:ac:30:0e:00:1c:64:5f:01:
                    2c:52:14:fd:d5:f0:34:b1:e8:5a:d6:f7:6d:cd:2f:
                    99:22:15:7a:15:1a:c2:96:ed:e6:65:c6:6c:11:e5:
                    bf:be:0b:dd:ba:70:ab:03:0a:1d:f4:12:80:21:34:
                    74:67:42:97:89:b5:09:bb:a4:97:53:3f:7d:5f:73:
                    42:21:dd:aa:90:5a:2b:22:20:2d:67:0c:63:4c:22:
                    38:78:ac:83:21:92:00:59:fb:4f:fb:a9:25:61:d0:
                    55:f5:6c:dd:9d:0a:f2:1e:20:9b:99:76:55:6c:2f:
                    99:8f:25:8f:db:81:2b:0f:fc:21:41:e4:d1:43:93:
                    db:dc:b6:69:17:77:c8:ec:4f:0b:79:64:86:49:6a:
                    ec:61:9c:e1:af:0b:be:29:e1:5f:89:8a:b7:5e:91:
                    b4:b4:57:7a:9a:73:fb:76:e4:2e:9d:1a:73:77:9d:
                    32:1f:ae:10:81:10:6f:70:6b:7f:6b:a7:ea:d6:fb:
                    01:65:59:ed:b4:92:59:d6:7f:af:4a:50:d1:c1:ed:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.132.0/22
                  138.94.108.0/22
                  143.202.240.0/22
                  168.232.152.0/22
                  170.80.176.0/22
                  177.154.192.0/19
                  179.107.224.0/19
                IPv6:
                  2804:a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262293

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:84:0e:3e:3d:d6:94:37:00:3a:0d:d6:08:59:44:68:03:
         49:5a:95:e0:86:a4:a2:99:6a:f4:77:d3:24:c2:6a:3e:aa:bc:
         a1:64:37:28:4f:9c:6e:ac:84:44:d6:d2:43:48:58:31:39:90:
         ea:1d:22:6e:ea:2f:e0:d5:b5:bd:65:9c:91:32:b5:1d:1a:df:
         79:81:35:e0:c8:e2:1b:f2:45:4a:c4:cf:d8:9b:67:d9:e2:02:
         f4:97:8a:29:fb:e3:d4:e6:90:3a:b5:15:eb:4c:03:77:7a:f9:
         73:eb:93:4d:bd:0b:55:d9:1b:88:b5:dd:11:4f:45:e5:cd:3d:
         45:9d:fb:9d:bb:fb:27:ec:06:a9:6b:00:b3:ea:23:76:6c:5a:
         82:78:66:48:f2:4b:e9:85:95:20:f5:d4:14:98:32:55:63:72:
         36:c2:11:4f:46:90:01:1c:95:bc:20:9e:3b:bb:32:08:9f:b3:
         ff:fc:83:5b:a6:68:9b:46:33:e7:7d:4a:ff:d3:3d:04:c6:e2:
         35:a4:4a:e7:39:a3:ca:57:f8:48:cb:c3:5c:38:45:d0:59:e2:
         41:a9:e6:29:61:6a:0f:17:13:d5:b1:78:1c:bb:a1:9b:92:c8:
         0e:68:68:0f:dc:b1:b2:53:b5:c2:e1:03:0a:47:13:03:d7:a9:
         f5:ab:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 21:45:15 2024 by rpki-client on console-ams.rpki-client.org