Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD5C6E0F80AA788B38ABD961522AF1BDD8E99620.cer
File:                     AD5C6E0F80AA788B38ABD961522AF1BDD8E99620.cer (raw, json)
Hash identifier:          HBuStrmJ+bHX8PFecMAjS/AKLx6YfJJqro5FX4gXAxc=
Subject key identifier:   AD:5C:6E:0F:80:AA:78:8B:38:AB:D9:61:52:2A:F1:BD:D8:E9:96:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54B0BE4D054F527A6241907B2DF6FC5134D63CBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/1/AD5C6E0F80AA788B38ABD961522AF1BDD8E99620.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:45:59 +0000
Certificate not after:    Thu 03 Apr 2025 03:50:59 +0000
Subordinate resources:    AS: 270563
                          IP: 24.152.28.0/22
                          IP: 2804:6de8::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 02:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b0:be:4d:05:4f:52:7a:62:41:90:7b:2d:f6:fc:51:34:d6:3c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:45:59 2024 GMT
            Not After : Apr  3 03:50:59 2025 GMT
        Subject: CN=AD5C6E0F80AA788B38ABD961522AF1BDD8E99620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:2e:ea:25:4d:68:4c:0e:4a:89:3f:61:e2:
                    67:78:e7:91:e1:b8:04:56:f5:60:f9:f5:fb:33:c0:
                    d0:fa:14:cc:b8:f3:5f:4a:bf:2c:ce:56:81:57:71:
                    aa:dd:d7:93:23:b9:9f:c6:ac:77:f4:17:c4:e8:c5:
                    1f:f6:3c:45:a7:cb:03:21:53:af:47:3b:a3:c6:32:
                    e1:46:fd:67:9c:28:7e:94:77:78:7c:62:2f:7f:ff:
                    2d:74:b8:e5:3b:19:55:af:93:47:b8:02:07:2e:c9:
                    9b:5b:cf:37:b1:41:0b:ab:6c:6e:b2:56:94:e8:2b:
                    f4:7b:44:ff:54:73:bc:0a:a6:9a:ea:fb:8c:78:50:
                    bd:a2:2a:a5:50:1a:c1:f2:45:0e:50:b3:22:6d:1f:
                    7c:87:33:ec:ce:d8:0b:87:41:f6:a2:86:b4:4e:46:
                    ee:71:b1:cd:9b:3c:03:e8:68:83:96:a7:91:4e:99:
                    45:19:c4:9a:7a:e9:ad:bc:7f:5c:85:47:66:59:00:
                    cc:6d:8e:5e:ba:f1:4c:85:b9:b3:ee:c5:4d:0b:dc:
                    68:3c:a1:54:5a:05:87:7e:80:5c:a7:b2:c1:71:31:
                    35:d6:26:4b:2e:a1:ed:b1:7f:e3:58:ff:0d:d0:05:
                    28:2f:3f:dd:70:e9:b0:04:87:06:db:c8:28:b7:cf:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:5C:6E:0F:80:AA:78:8B:38:AB:D9:61:52:2A:F1:BD:D8:E9:96:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/1/AD5C6E0F80AA788B38ABD961522AF1BDD8E99620.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.28.0/22
                IPv6:
                  2804:6de8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270563

    Signature Algorithm: sha256WithRSAEncryption
         1a:b0:a9:a7:61:dd:d8:d2:d2:ca:20:ac:be:18:49:b5:88:1b:
         07:30:3f:33:5c:8b:41:42:e4:de:69:63:96:52:8f:88:2a:30:
         1d:49:65:87:59:61:81:af:b6:fa:81:05:01:9e:17:ad:59:c5:
         57:a4:c4:4b:4b:5b:55:e6:cc:f7:53:c6:a3:bd:03:f9:7c:c0:
         b6:79:54:52:5c:53:f2:31:62:c8:b1:6f:6d:c9:fd:d9:a5:0d:
         45:3a:3d:c8:9e:2c:6a:4f:a1:3a:fc:67:2c:68:0a:e7:e8:d5:
         58:b3:66:4b:50:fc:8c:f3:ba:1c:1b:f2:e2:41:c0:6d:eb:ce:
         1f:da:58:22:eb:10:97:b2:b6:15:d7:2c:35:ef:f0:73:a6:73:
         27:4e:51:63:e3:25:3a:3a:cf:6b:c1:27:7e:ee:f3:27:b6:b6:
         10:b7:92:ee:1c:56:f2:c6:91:a6:ab:3d:2b:d0:55:fa:6b:f5:
         82:e9:23:69:f5:65:ad:70:33:7d:df:64:87:64:8c:69:fa:81:
         89:36:30:dc:5b:4d:fc:64:a1:94:9d:ca:b6:42:0a:cd:57:9a:
         06:d8:24:f6:7b:37:b3:c7:6b:55:84:67:54:e5:8a:f2:5b:01:
         d6:d5:d2:2a:d0:af:40:de:69:a2:92:da:62:ba:d1:94:e2:bf:
         ad:ad:55:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org