Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95CE07C89ECCACD86E62971E77F0900BC255C590.cer
File:                     95CE07C89ECCACD86E62971E77F0900BC255C590.cer (raw, json)
Hash identifier:          mUqfFzmlJUp0ofCBVL+LzpqBkRaDbD3/PoXEk0zT5qQ=
Subject key identifier:   95:CE:07:C8:9E:CC:AC:D8:6E:62:97:1E:77:F0:90:0B:C2:55:C5:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1CBA4162CF8992F0255CC5F3E0D68F74CB728FBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/1/95CE07C89ECCACD86E62971E77F0900BC255C590.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:57:52 +0000
Certificate not after:    Wed 02 Apr 2025 19:02:52 +0000
Subordinate resources:    AS: 267192
                          IP: 45.231.96.0/22
                          IP: 2804:4998::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ba:41:62:cf:89:92:f0:25:5c:c5:f3:e0:d6:8f:74:cb:72:8f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:57:52 2024 GMT
            Not After : Apr  2 19:02:52 2025 GMT
        Subject: CN=95CE07C89ECCACD86E62971E77F0900BC255C590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:af:6a:34:c6:82:65:5d:7b:0a:73:64:a5:54:
                    f4:97:4f:ba:ee:d9:39:a4:72:5b:e4:91:ab:7d:32:
                    39:38:8b:1e:f4:20:b0:d9:51:94:9a:47:84:f2:52:
                    2b:5f:a3:50:56:7e:07:c5:6e:49:62:6a:5d:8b:6d:
                    9a:4c:21:a2:60:8c:c2:b8:4c:48:cc:be:c6:83:e8:
                    19:a9:a8:c7:d7:bd:76:09:4a:02:7e:73:05:4f:3b:
                    e0:4f:55:c3:95:54:8b:68:71:72:72:0f:a8:e0:e0:
                    dd:70:0e:0b:13:14:ba:94:4b:70:65:89:22:55:ea:
                    c2:ce:c9:71:53:c9:1f:bd:6a:4a:87:4e:ea:44:bf:
                    1f:ab:13:d0:c3:20:ef:2a:8e:37:18:d5:32:4d:86:
                    76:40:c6:1c:7f:3e:9a:97:34:f4:2c:11:51:4a:47:
                    31:96:3f:9e:9a:b6:d8:cd:45:00:59:94:2c:6d:a7:
                    59:73:88:ef:b1:94:11:a6:19:2c:a0:7f:d9:72:05:
                    2e:20:34:61:c4:c8:2f:8b:61:16:34:f6:63:10:78:
                    51:5b:73:f7:2f:21:d4:3d:06:ec:f7:07:f3:92:7c:
                    c4:bb:50:42:7c:28:5a:28:f9:c2:c5:fc:88:83:fb:
                    6b:c5:87:1d:02:c0:72:f3:eb:1c:a4:b1:61:37:56:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:CE:07:C8:9E:CC:AC:D8:6E:62:97:1E:77:F0:90:0B:C2:55:C5:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/1/95CE07C89ECCACD86E62971E77F0900BC255C590.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.96.0/22
                IPv6:
                  2804:4998::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267192

    Signature Algorithm: sha256WithRSAEncryption
         74:05:64:39:16:bc:55:34:0f:4d:37:86:2d:bd:bb:1b:fc:f7:
         09:b7:8d:8e:00:ca:4d:2b:98:20:ed:1a:a5:99:04:91:7d:67:
         a5:b9:6c:4c:b4:3a:a5:26:53:c9:ae:2f:2a:1e:b1:77:28:cd:
         9e:eb:3f:00:29:db:1d:45:0e:10:23:79:ae:90:9f:b8:3e:14:
         ea:27:88:90:eb:59:f3:77:5a:df:f2:0b:04:87:80:82:67:66:
         d7:86:42:92:8c:17:24:4a:5d:6b:c3:82:e6:30:26:14:8e:cf:
         d9:d5:39:97:98:60:62:d5:34:d8:04:6b:cf:3a:d6:1e:f5:f7:
         94:a2:f5:c2:d8:83:c7:2a:5b:8e:ed:81:a4:bc:1f:9d:43:5f:
         2e:96:ca:36:58:cd:aa:7d:88:0b:0a:a2:70:c7:b2:72:0a:a1:
         75:13:67:25:9b:86:fd:6a:b3:17:db:aa:ab:5a:a6:23:37:ae:
         59:dd:14:99:fe:00:f8:e5:98:35:7b:90:27:4a:0d:60:4e:24:
         e9:2b:80:58:e8:0b:dd:45:02:5d:8c:ac:ca:3a:8a:4d:83:f1:
         39:ab:19:e9:d0:ca:41:a1:09:80:74:0b:d1:e3:ee:d5:d3:04:
         98:c9:aa:43:2b:2e:03:76:25:ab:00:95:28:34:b0:c4:b1:da:
         00:0d:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org