Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/972C1A4BC117159380CAE81725E95EC20D57A045.cer
File:                     972C1A4BC117159380CAE81725E95EC20D57A045.cer (raw, json)
Hash identifier:          XuUL/d/6joXQsqNfzljRTrUTxLBxq1GPe2oa8u03jPo=
Subject key identifier:   97:2C:1A:4B:C1:17:15:93:80:CA:E8:17:25:E9:5E:C2:0D:57:A0:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       696717C350754CC200CADDA9DF5BF9E907A620AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/1/972C1A4BC117159380CAE81725E95EC20D57A045.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:57:18 +0000
Certificate not after:    Wed 02 Apr 2025 19:02:18 +0000
Subordinate resources:    AS: 52539
                          IP: 179.106.176.0/20
                          IP: 2804:3404::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:67:17:c3:50:75:4c:c2:00:ca:dd:a9:df:5b:f9:e9:07:a6:20:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:57:18 2024 GMT
            Not After : Apr  2 19:02:18 2025 GMT
        Subject: CN=972C1A4BC117159380CAE81725E95EC20D57A045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:14:f1:a3:38:1b:28:72:b6:04:aa:e6:ff:
                    78:27:7e:6d:b6:4e:6d:e5:09:7c:4c:bf:16:aa:82:
                    08:b1:a3:f7:1c:34:d3:f2:cf:72:21:76:25:ee:dc:
                    6f:db:74:a0:6b:88:af:c4:72:3f:2c:78:c1:62:42:
                    cd:59:74:4d:28:4c:3a:35:ae:b8:95:ff:6d:32:a4:
                    ee:3c:36:67:a3:28:86:9f:29:c9:c5:e9:bd:8b:11:
                    e2:78:e8:cd:e0:8f:79:c9:78:8e:fd:d6:40:16:01:
                    85:c8:3c:fe:c0:d6:1f:d4:3c:1f:ca:88:ff:f5:2b:
                    14:e6:2d:bf:e8:31:e6:5a:36:d6:45:1b:e4:9f:b7:
                    e5:c8:5b:e2:03:00:82:8f:27:10:36:9b:d3:61:81:
                    db:4d:bb:ee:8d:24:36:6c:43:4e:7f:56:11:dc:dc:
                    ef:dc:09:06:d8:d6:22:93:99:4b:30:52:68:f0:a4:
                    8f:a5:2f:00:56:8b:25:f1:46:97:14:9f:aa:8d:7f:
                    fe:98:2c:5c:af:c0:82:4a:9a:2b:1b:23:da:bc:c6:
                    09:a5:8a:b8:35:41:be:90:55:64:dc:58:a6:d5:31:
                    d7:56:62:91:ec:a1:db:85:82:2d:b1:7e:29:54:cd:
                    90:d8:d8:ad:96:8b:43:2a:6a:51:14:7a:ee:a2:56:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:2C:1A:4B:C1:17:15:93:80:CA:E8:17:25:E9:5E:C2:0D:57:A0:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/1/972C1A4BC117159380CAE81725E95EC20D57A045.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.176.0/20
                IPv6:
                  2804:3404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52539

    Signature Algorithm: sha256WithRSAEncryption
         b5:3b:ee:f8:fa:5a:be:a5:9f:fb:9d:4e:da:93:23:f3:53:73:
         1f:de:1d:54:60:01:6d:21:57:07:10:be:37:a6:ea:bf:9c:4d:
         57:ac:08:e1:df:c8:38:c6:b9:f3:47:e8:b2:c7:43:55:d4:31:
         05:c4:8a:9b:93:e3:e0:f5:5e:d8:91:25:4e:18:a5:2f:61:1d:
         d0:f9:eb:9e:f6:a0:45:bc:36:57:48:c1:3f:94:36:f7:96:13:
         43:ad:e1:39:8e:4b:9d:1e:e1:39:bc:85:bb:99:cb:3f:7f:5a:
         d4:f3:60:36:5c:4d:7d:2b:a0:6e:fd:24:99:4c:2f:cb:9d:e7:
         55:fa:9f:be:92:df:c4:a8:54:e6:29:e8:cd:37:66:99:9a:fa:
         2e:76:c2:69:e0:fb:bf:b8:63:d1:14:cb:ce:68:9a:a3:5b:cb:
         df:ff:a5:b9:16:12:c1:2c:0a:b4:51:ae:f9:20:03:37:b6:2c:
         38:ae:8a:85:7b:6c:48:cf:19:e2:b5:ea:aa:04:66:cc:1e:86:
         9d:8a:dd:56:74:cb:f8:72:7f:c6:1b:5e:79:1f:4f:63:f3:87:
         0a:c0:0a:d2:38:9b:c6:c2:2d:71:c4:00:e3:68:07:97:e8:7b:
         35:40:02:02:2c:70:33:63:07:d4:18:1f:dc:1d:e7:d4:f0:24:
         8c:d4:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org