Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer
File:                     95A9B935AF7391D649D034160A7150D2138ECFBC.cer (raw, json)
Hash identifier:          kFBIjmxnD0GLFfYlrSGEqGRT3LYD5Uodq0M/D6PgWmI=
Subject key identifier:   95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0819C04377BC10DB5466072648BBE7D7A295715F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/95A9B935AF7391D649D034160A7150D2138ECFBC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Oct 2024 18:50:30 +0000
Certificate not after:    Wed 22 Oct 2025 18:55:30 +0000
Subordinate resources:    AS: 61605
                          IP: 179.63.178.0/23
                          IP: 2804:7da4::/32

Validation:               Failed, certificate revoked on Sun 17 Nov 2024 18:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:19:c0:43:77:bc:10:db:54:66:07:26:48:bb:e7:d7:a2:95:71:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 23 18:50:30 2024 GMT
            Not After : Oct 22 18:55:30 2025 GMT
        Subject: CN=95A9B935AF7391D649D034160A7150D2138ECFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:95:09:96:46:b0:a5:96:75:ab:4a:e5:dc:56:
                    62:69:fc:59:6f:c4:88:3b:94:01:74:23:31:34:60:
                    43:16:90:c2:3d:58:cf:af:0b:a8:4a:e1:a3:2c:19:
                    7a:48:1a:ef:df:3f:7f:f8:66:d3:8e:2a:33:20:90:
                    12:9a:9e:32:ab:cf:95:ba:ac:11:ce:61:a8:1e:1a:
                    3c:6e:13:1f:37:14:d2:d6:d8:77:43:25:b6:3f:e9:
                    1d:22:d5:94:a8:62:3f:04:41:1a:94:e6:63:1a:78:
                    b7:06:f6:2f:8d:00:ca:7a:b4:f2:b1:63:02:79:e4:
                    43:51:8e:28:0a:8d:97:ae:6b:ea:bd:bc:dd:1c:33:
                    31:7d:77:3d:f6:dc:72:4b:a7:c5:28:0a:98:dc:95:
                    ed:d2:85:be:03:7b:bf:29:5d:af:84:5d:c4:af:89:
                    22:45:bb:77:63:18:76:09:2b:72:2d:4b:3a:cd:2e:
                    fb:58:e4:05:6d:eb:51:dd:0a:c6:8f:b5:b5:16:5d:
                    e6:31:ad:80:89:a6:a0:69:e8:2c:c4:95:1c:08:96:
                    d6:9e:50:03:11:b9:2e:b2:db:e1:d7:e4:4a:6b:6a:
                    a3:dc:d7:ff:b4:f9:37:53:ff:67:5a:82:4f:ec:e4:
                    c8:a3:38:5d:ec:04:00:37:eb:26:12:8f:10:89:94:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/95A9B935AF7391D649D034160A7150D2138ECFBC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.178.0/23
                IPv6:
                  2804:7da4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61605

    Signature Algorithm: sha256WithRSAEncryption
         a8:ed:1e:fd:ad:28:bf:1b:1e:21:9b:28:d8:5b:b2:fe:16:c5:
         59:05:5b:3f:4d:9d:3c:bb:b2:50:01:70:b0:00:55:d4:51:99:
         f3:c0:bb:8c:15:b4:e9:c3:02:30:42:71:f9:9f:80:05:bf:b4:
         11:65:b3:b0:b3:45:e4:28:5f:7d:80:23:a4:44:e3:88:14:d1:
         fc:91:82:fd:8e:04:60:a9:aa:b2:4f:87:f6:c6:17:95:b7:55:
         20:ab:6e:ee:cc:6a:af:4a:fb:ff:e1:f0:58:18:9d:e8:d9:92:
         ca:d3:a1:06:59:0b:55:91:65:11:13:0e:aa:17:7f:3f:c0:cb:
         3a:a3:31:f4:eb:cf:b7:fa:35:60:f9:5b:84:2b:82:82:70:18:
         87:f2:28:2e:26:58:12:1a:3b:ac:ba:60:cd:33:8a:df:96:f3:
         91:e3:26:d9:c4:b3:e4:c4:c3:bf:4d:81:ab:8d:f3:b5:40:ce:
         b5:72:0e:cc:06:3a:b2:89:eb:01:d2:52:34:2d:4c:8c:7c:6b:
         09:20:02:89:2d:c7:ae:29:67:aa:78:6f:b8:88:ac:9b:4d:20:
         a8:6c:c5:40:a0:5c:be:cc:6b:99:98:87:1f:f8:c9:9a:ba:e9:
         b3:3e:4d:9e:8c:27:ab:70:d1:5f:9f:8d:32:5e:c3:92:fa:c8:
         8a:0a:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 20:48:12 2024 by rpki-client on console-ams.rpki-client.org