Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
File:                     8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer (raw, json)
Hash identifier:          WzcFEDSuAQLpZ10V+rRReRaCPz+tx923hewrvLNp5z4=
Subject key identifier:   8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67735B34B8196DD9E39EFC17C2503B7AB60E717C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jun 2024 13:07:04 +0000
Certificate not after:    Wed 11 Jun 2025 13:12:04 +0000
Subordinate resources:    AS: 28287
                          AS: 262272
                          IP: 45.70.232.0/22
                          IP: 138.36.180.0/22
                          IP: 138.118.120.0/22
                          IP: 167.249.176.0/22
                          IP: 168.194.60.0/22
                          IP: 177.21.128.0/20
                          IP: 177.130.96.0/20
                          IP: 177.154.32.0/20
                          IP: 179.127.64.0/21
                          IP: 187.1.16.0/20
                          IP: 187.120.128.0/19
                          IP: 189.124.80.0/20
                          IP: 201.49.192.0/20
                          IP: 2804:1080::/32
                          IP: 2804:21f8::/32

Validation:               Failed, certificate revoked on Sat 13 Jul 2024 09:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:73:5b:34:b8:19:6d:d9:e3:9e:fc:17:c2:50:3b:7a:b6:0e:71:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 12 13:07:04 2024 GMT
            Not After : Jun 11 13:12:04 2025 GMT
        Subject: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:e9:48:81:38:4d:c8:b3:36:12:e0:84:00:
                    71:3a:61:b2:fb:75:cb:d0:5d:60:87:a7:d7:19:65:
                    9b:5f:da:1f:84:5a:3d:8e:89:91:6f:da:54:d4:d4:
                    12:49:08:79:74:64:ea:11:22:ee:36:00:20:9c:27:
                    17:3f:d2:b6:94:6c:17:09:d8:f2:78:49:e7:3e:1e:
                    bf:29:e7:ba:5b:65:6e:bb:72:93:e2:59:4a:fe:65:
                    20:55:bc:2c:54:c0:26:a8:ae:dd:f6:7b:02:40:79:
                    e3:0a:16:d2:7e:5f:dc:88:59:e5:34:e2:b0:3d:3a:
                    1a:02:b2:1d:0f:86:55:25:9d:13:44:62:d6:c7:ff:
                    df:33:a4:03:85:af:da:48:fb:43:00:83:f1:1e:d6:
                    bb:05:67:ac:6e:30:c5:1e:f5:09:4f:75:40:f2:4e:
                    38:b5:bb:84:5a:6a:40:43:fa:82:77:e5:2d:2a:af:
                    ac:b3:51:84:ef:86:0d:81:83:b0:72:43:8d:be:b6:
                    9f:e0:f5:f4:e1:b8:f4:8f:9f:31:1e:06:07:4c:c8:
                    be:87:d8:be:53:fc:f3:89:be:54:5b:ab:41:03:5b:
                    9c:ee:ab:6d:77:61:2e:29:a1:b7:4e:75:28:72:d0:
                    17:37:6b:45:40:c0:f2:e0:e4:f6:15:73:c7:69:33:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.232.0/22
                  138.36.180.0/22
                  138.118.120.0/22
                  167.249.176.0/22
                  168.194.60.0/22
                  177.21.128.0/20
                  177.130.96.0/20
                  177.154.32.0/20
                  179.127.64.0/21
                  187.1.16.0/20
                  187.120.128.0/19
                  189.124.80.0/20
                  201.49.192.0/20
                IPv6:
                  2804:1080::/32
                  2804:21f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28287
                  262272

    Signature Algorithm: sha256WithRSAEncryption
         bf:1e:8a:f4:a3:ef:d0:08:a5:62:c0:d8:09:e1:b4:92:5a:84:
         6e:ec:d6:28:99:a6:7c:4e:67:0a:9c:b6:b2:c5:c4:cb:42:94:
         08:2a:cf:c8:ff:56:3c:87:5a:81:bc:76:c1:9e:62:89:4c:89:
         35:3c:d5:7f:6e:f7:82:ba:b4:43:16:5b:3b:e9:bc:68:5e:4d:
         23:b1:a4:22:1d:8c:40:3f:ef:9b:22:4f:45:94:df:a2:b3:a5:
         8e:f1:de:83:69:ac:90:e3:98:0f:00:b7:c2:ca:7a:cf:e5:d3:
         44:68:cd:68:3b:c1:54:4b:e9:b7:91:1e:71:8f:af:86:b2:51:
         f5:1d:04:e9:ad:27:7f:1d:e4:c2:56:7d:77:aa:46:a6:f6:03:
         2e:2a:db:4f:79:8a:9b:7e:bd:85:57:53:e9:52:cd:a2:4b:7b:
         73:ff:7c:d6:07:68:5e:e6:64:e7:3f:cb:4c:dd:04:6a:fb:f1:
         e1:2b:bd:0e:74:a9:63:7f:75:fb:c0:6c:d6:29:0d:1e:0d:ac:
         a6:43:f8:0c:10:e1:d0:ad:4e:13:2d:17:f0:aa:af:7a:e1:99:
         b4:12:e9:ca:af:fb:1d:ab:1f:c0:c8:04:75:c5:b3:ca:fc:25:
         43:01:44:78:6b:25:37:30:ad:94:4b:60:f7:b0:bc:55:d9:43:
         f2:25:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 12:13:32 2024 by rpki-client on console-ams.rpki-client.org