Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9DCEDEFB6429310C6836B39040893885C586531B.cer
File:                     9DCEDEFB6429310C6836B39040893885C586531B.cer (raw, json)
Hash identifier:          j0TaFuXIAU+cms6es2xRGEk/rVp1BazZqXl5zva+3+s=
Subject key identifier:   9D:CE:DE:FB:64:29:31:0C:68:36:B3:90:40:89:38:85:C5:86:53:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CD8A6BC52EBB919DBA3F281103C5F1EE8073E67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/1/9DCEDEFB6429310C6836B39040893885C586531B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:32:05 +0000
Certificate not after:    Wed 02 Apr 2025 19:37:05 +0000
Subordinate resources:    AS: 262997
                          IP: 186.219.255.0/24
                          IP: 2804:9d8::/32

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 11:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d8:a6:bc:52:eb:b9:19:db:a3:f2:81:10:3c:5f:1e:e8:07:3e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:32:05 2024 GMT
            Not After : Apr  2 19:37:05 2025 GMT
        Subject: CN=9DCEDEFB6429310C6836B39040893885C586531B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bb:00:25:eb:95:87:f8:37:c1:03:a1:0b:c7:
                    86:e8:1c:c1:27:1d:35:13:b2:98:72:61:b1:15:39:
                    6e:52:74:5c:4c:b8:de:6e:71:2d:57:09:fb:7f:71:
                    03:55:c2:51:e8:07:b5:64:2d:34:4a:c6:aa:e7:89:
                    03:1f:fe:90:e5:07:00:b1:2a:3c:a9:d5:6a:08:52:
                    52:51:54:04:76:a9:09:0e:4a:a7:0b:7d:eb:95:6a:
                    7d:92:9c:2e:dc:77:3a:ce:4c:04:fb:9a:c2:71:73:
                    76:76:c4:66:69:e1:05:cc:b4:28:c7:3c:8c:af:56:
                    b5:08:03:2b:fe:da:44:55:71:7f:27:28:11:76:72:
                    9b:d8:b5:4e:9e:d1:75:fa:e5:4c:10:87:fa:7d:ea:
                    4c:c5:87:12:b2:3d:d0:a7:71:e8:c4:64:58:79:15:
                    95:55:a8:3d:d6:45:89:26:bb:52:97:b4:60:e2:31:
                    87:f5:e5:67:ac:53:9c:9c:85:1b:b0:40:b8:5f:47:
                    e5:70:a1:75:0b:5b:72:6b:02:1b:7c:3f:b0:ae:09:
                    e2:03:f5:fe:ff:8b:4d:25:c9:8a:45:27:cd:4a:79:
                    7c:08:16:6b:c5:fa:d7:8b:47:01:5d:13:8b:4e:93:
                    46:67:6c:bc:40:f3:d0:85:13:0c:5a:0e:b0:33:91:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:CE:DE:FB:64:29:31:0C:68:36:B3:90:40:89:38:85:C5:86:53:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/1/9DCEDEFB6429310C6836B39040893885C586531B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.255.0/24
                IPv6:
                  2804:9d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262997

    Signature Algorithm: sha256WithRSAEncryption
         08:bf:44:e3:8e:71:5f:c5:b7:51:c1:4b:f7:ae:06:be:f9:14:
         b6:42:4b:88:54:0a:2b:2d:bd:46:c5:48:72:f8:e0:cf:0c:12:
         51:e2:2a:5e:74:bc:26:52:22:47:c9:b4:ba:db:3d:0f:a1:41:
         be:1a:a1:24:de:d3:df:71:5f:ab:dd:ad:b9:f0:16:aa:ce:26:
         85:b5:d1:9b:a2:df:c2:69:a9:8a:fe:ae:c6:7c:8f:50:34:95:
         72:be:76:23:0a:dd:6c:c8:56:aa:63:cf:5e:c6:84:2a:72:81:
         a3:7b:8b:c8:49:d4:fa:3a:d0:9e:86:35:d3:e4:4e:e4:2d:8a:
         0d:50:99:7e:1c:bd:77:02:4b:25:b4:a2:88:bd:e7:5f:e0:dd:
         17:af:f3:8b:9b:d6:ee:5f:96:10:ec:77:e7:f6:c6:09:f0:06:
         b1:d0:33:f8:94:03:ed:04:06:d5:7f:51:83:21:37:dd:62:33:
         d0:da:c3:bd:20:01:7a:9d:ae:13:12:02:01:89:d3:2c:d3:d1:
         a9:de:c6:1e:74:e5:f9:f7:ce:86:cc:da:94:0e:db:0a:19:c7:
         b0:cc:f0:cd:0f:0e:1d:9d:8a:83:57:70:82:f0:72:26:f0:63:
         74:dc:78:e3:90:9e:d9:55:0d:4e:d5:b2:c4:6b:67:c8:7c:5e:
         43:38:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 14:05:03 2024 by rpki-client on console-fra.rpki-client.org