Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.cer
File:                     A725A180F84B5FBF01391DA6B3583F4846E072FF.cer (raw, json)
Hash identifier:          IEVaEzN7CtLp1EPvk+F85W+xOyFosT3rD2INQ8W4Lls=
Subject key identifier:   A7:25:A1:80:F8:4B:5F:BF:01:39:1D:A6:B3:58:3F:48:46:E0:72:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D4A78ED8236A0CE7E6518449290908BF868CCFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:38:47 +0000
Certificate not after:    Wed 02 Apr 2025 20:43:47 +0000
Subordinate resources:    AS: 266095
                          IP: 45.5.100.0/22
                          IP: 2804:3a8c::/32

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 14:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4a:78:ed:82:36:a0:ce:7e:65:18:44:92:90:90:8b:f8:68:cc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:38:47 2024 GMT
            Not After : Apr  2 20:43:47 2025 GMT
        Subject: CN=A725A180F84B5FBF01391DA6B3583F4846E072FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:db:63:60:e4:d5:0f:ad:9b:ef:4c:71:28:
                    b6:06:e0:03:3e:60:e8:fa:ec:82:b8:53:dc:08:cb:
                    08:69:ca:d0:3f:a6:89:86:0e:1f:f8:96:55:05:53:
                    7e:ea:a8:73:a3:ec:8b:68:58:a5:d9:f4:e2:6e:16:
                    c2:da:8d:a1:6b:a4:7e:78:71:27:23:67:ad:fb:75:
                    e9:7d:bb:8c:da:30:90:25:0f:63:7f:43:28:0a:ee:
                    5c:92:c2:7b:ad:80:48:81:2b:6e:fc:3c:df:cb:09:
                    cc:9f:e6:63:42:a5:eb:7d:c4:4f:cd:2a:56:12:c8:
                    23:b5:dc:8f:0f:ec:1e:dd:9b:28:de:51:2f:dc:41:
                    df:cc:a4:83:67:2f:01:a9:1c:a3:19:c0:c3:9b:bf:
                    9d:c6:00:e3:46:1b:e5:85:b4:59:aa:a1:de:57:3e:
                    d9:10:77:41:67:b9:07:a7:71:9a:a5:ad:ad:d2:a4:
                    b6:00:05:65:c8:1f:67:5b:00:56:f4:c5:2b:58:00:
                    82:33:a4:c2:ab:fd:d1:5b:24:bf:93:0b:6e:b2:c2:
                    8b:0e:04:ee:e4:ae:24:dd:f6:4e:b6:6b:ba:9e:59:
                    c4:9c:72:34:18:31:f0:61:fe:86:b6:9d:29:2c:e8:
                    e1:a8:6a:95:40:94:65:8e:7d:93:80:e8:e4:df:28:
                    a7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:25:A1:80:F8:4B:5F:BF:01:39:1D:A6:B3:58:3F:48:46:E0:72:FF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.100.0/22
                IPv6:
                  2804:3a8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266095

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:eb:3e:05:ff:a3:91:70:3d:94:00:95:aa:8e:6d:ee:92:
         64:e4:0d:14:07:6e:28:c5:4d:62:ef:b5:07:52:ab:f2:f8:ca:
         8a:8d:48:26:70:50:fd:f2:72:0b:f9:fd:92:05:09:12:73:2d:
         3c:63:d7:93:f5:0d:32:da:35:38:b7:1c:c0:e9:a8:2a:47:71:
         f6:e3:45:3d:c7:32:c7:05:8f:16:24:68:94:12:44:36:95:05:
         09:ab:ee:b2:24:bf:66:08:0f:96:32:2f:77:d8:07:8f:ad:03:
         26:b5:3b:aa:71:e9:ab:00:b2:6a:b5:3e:9a:d4:20:2b:f5:5b:
         4c:d6:21:64:11:a8:17:a1:79:35:7b:7a:2a:ab:4a:09:cd:09:
         32:69:6c:5e:87:36:61:a3:eb:b6:c3:93:20:01:b8:b7:06:38:
         b7:a6:9f:75:72:f4:57:e8:f1:b0:d2:6a:9c:39:a5:9b:84:7b:
         18:c9:b2:e5:30:df:25:7c:1b:db:76:e6:0c:d0:ee:ad:88:3c:
         72:59:68:f8:81:dd:6c:be:ee:a9:5d:b2:2a:ff:a8:a0:08:14:
         ea:eb:29:f3:34:c7:34:a8:c7:99:b4:5c:45:d2:ee:dd:c6:14:
         fa:8c:08:d7:87:52:dc:5a:ed:d2:c2:ae:52:1b:c3:5d:01:a2:
         3e:21:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 18:35:50 2024 by rpki-client on console-fra.rpki-client.org