Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer
File:                     B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer (raw, json)
Hash identifier:          uB2NcxPNGFFJeaXcBgH7mub2SApwReOWVOOi8Fel1Bo=
Subject key identifier:   B6:17:F4:8A:11:28:76:9A:4C:93:EA:7B:D5:3E:72:01:35:9F:4A:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A623557820E6E040B324ABFB2FFED139F03A33A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:35:56 +0000
Certificate not after:    Thu 03 Apr 2025 02:40:56 +0000
Subordinate resources:    AS: 268213
                          IP: 45.236.8.0/22
                          IP: 2804:4db0::/32

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 00:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:62:35:57:82:0e:6e:04:0b:32:4a:bf:b2:ff:ed:13:9f:03:a3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:35:56 2024 GMT
            Not After : Apr  3 02:40:56 2025 GMT
        Subject: CN=B617F48A1128769A4C93EA7BD53E7201359F4AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:0d:22:29:65:ac:a7:6e:d2:48:22:08:6d:
                    84:f7:53:49:ad:ee:36:8e:ed:dd:06:bf:f2:5a:16:
                    a5:ba:01:2e:66:72:01:78:0d:53:c7:30:22:e4:86:
                    1e:bd:ec:b4:09:a0:9c:a9:e6:1b:bd:b9:4b:bb:c3:
                    e4:c2:c5:e5:b2:db:a4:1e:21:f0:64:51:d4:c3:42:
                    25:b7:b6:57:f0:13:46:ba:4a:f2:67:5b:26:ee:dc:
                    2b:53:9d:16:a6:ea:7f:be:27:7b:a5:6f:a2:01:e1:
                    d2:f9:ed:7c:42:b4:ae:e5:41:d8:1b:49:bb:41:b2:
                    43:dd:94:95:57:cb:9d:49:f3:6d:e9:6c:64:f9:7c:
                    67:bc:22:ac:04:2a:07:4f:ff:43:a7:9e:df:43:17:
                    f3:d8:a6:dd:d4:df:24:03:b1:22:c4:ba:11:58:d7:
                    46:62:a8:33:ce:8d:de:0e:60:76:61:af:2d:85:29:
                    47:ee:c2:f3:5b:90:bb:68:3d:96:d5:38:4b:43:f3:
                    1c:4a:ec:a2:dc:a2:41:8c:6e:b4:ae:3d:b1:60:38:
                    50:11:bb:3c:b2:dd:ce:8a:3b:0d:24:25:df:36:7b:
                    3f:f9:76:f2:aa:a7:fc:96:12:78:56:91:c2:aa:53:
                    d4:5f:c2:7a:e5:2c:ce:87:67:90:57:1a:3e:9f:7f:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:17:F4:8A:11:28:76:9A:4C:93:EA:7B:D5:3E:72:01:35:9F:4A:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.8.0/22
                IPv6:
                  2804:4db0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268213

    Signature Algorithm: sha256WithRSAEncryption
         b3:ad:46:07:d5:78:2f:96:7f:36:c8:48:37:15:fc:d5:25:c1:
         8c:16:e8:69:48:4f:01:13:ed:f9:dd:08:84:68:f0:72:e0:b6:
         88:24:28:f5:09:83:81:82:31:fe:14:f9:0f:b5:d6:64:4f:77:
         67:ba:82:11:68:c4:f7:d1:ed:50:0a:84:8c:c0:49:ad:67:6e:
         4d:e0:5b:34:8c:04:a8:33:8e:46:c0:d3:0d:07:41:10:b5:26:
         11:87:fa:a0:08:20:d7:4d:6a:8c:26:e7:70:3b:44:b0:b8:f2:
         6d:d1:ae:64:28:55:77:5a:29:56:a2:5b:95:08:b7:56:e3:9c:
         ec:34:28:ba:00:2c:0f:03:2a:ef:20:6d:e9:60:73:ab:37:ce:
         a5:60:4d:54:60:cb:f5:1d:49:23:25:55:1f:cc:70:96:bd:75:
         87:3f:03:6b:30:76:da:49:33:b8:9d:46:34:d3:0a:02:99:23:
         2f:53:8e:48:1e:83:31:71:45:5c:d1:a7:8a:ed:a6:9c:91:f4:
         6f:83:a9:19:74:73:89:f2:27:a6:f8:12:4d:df:ca:fd:af:e2:
         24:e2:6a:e9:4e:05:b7:17:46:aa:42:05:48:17:ab:a2:78:1a:
         e5:b7:0a:b1:cd:ee:a7:9f:90:70:7e:45:64:73:d9:ba:2f:ce:
         ce:57:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 03:34:56 2024 by rpki-client on console-ams.rpki-client.org