Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8EB5F427114FD7070FF54ECDA21153434C227FB.cer
File:                     B8EB5F427114FD7070FF54ECDA21153434C227FB.cer (raw, json)
Hash identifier:          3elmuU9UGLce62fr9lUpNxU5qZmGrFOc198stYqWTIk=
Subject key identifier:   B8:EB:5F:42:71:14:FD:70:70:FF:54:EC:DA:21:15:34:34:C2:27:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79B959116FC788C424193E91C72FE5D6F2803652
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/B8EB5F427114FD7070FF54ECDA21153434C227FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Oct 2024 20:54:38 +0000
Certificate not after:    Tue 21 Oct 2025 20:59:38 +0000
Subordinate resources:    AS: 273400
                          IP: 45.172.174.0/23
                          IP: 2804:8e10::/32
Validation:               Failed, certificate revoked on Wed 11 Dec 2024 04:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b9:59:11:6f:c7:88:c4:24:19:3e:91:c7:2f:e5:d6:f2:80:36:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 22 20:54:38 2024 GMT
            Not After : Oct 21 20:59:38 2025 GMT
        Subject: CN=B8EB5F427114FD7070FF54ECDA21153434C227FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:42:58:5b:f6:a3:b0:d0:3e:3f:37:09:ce:
                    9d:9e:a7:b1:ad:3b:d6:95:e8:ea:c1:f2:6e:fe:09:
                    7b:49:5c:90:d3:c1:3a:b0:9f:a2:09:88:d9:53:d3:
                    b1:a2:5e:e3:91:1e:db:2a:9f:37:98:ba:5d:63:ea:
                    55:d8:76:d0:bc:dc:de:43:41:cb:86:ab:1e:fb:66:
                    65:b3:68:02:47:d0:8c:ed:4b:d1:51:3f:4d:0e:1b:
                    71:24:11:fb:d6:0b:bd:4a:a3:0f:93:74:0c:30:6e:
                    c8:4a:b2:83:cf:59:90:2c:0f:3f:6a:96:be:10:c8:
                    dd:dc:78:05:3c:86:64:41:2f:3d:a7:93:a7:22:ca:
                    87:84:d7:47:3a:55:d5:be:e7:aa:33:65:c7:67:6c:
                    98:97:09:25:78:25:68:03:74:ee:7f:6f:a1:3c:01:
                    66:40:cd:91:86:b6:38:92:43:fc:8c:08:93:55:ba:
                    79:b5:48:93:3d:58:e7:09:f6:6a:2e:9b:03:6d:0f:
                    0f:4d:01:35:9c:31:8b:32:9b:a2:6d:29:c9:35:eb:
                    5a:0f:5b:4b:22:2b:5e:3e:db:de:76:f1:6c:2c:e3:
                    06:ba:86:9a:0c:46:ae:44:52:b3:59:51:28:79:9e:
                    e3:a5:a7:a0:8a:d8:e4:48:76:44:e2:cd:b0:94:19:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:EB:5F:42:71:14:FD:70:70:FF:54:EC:DA:21:15:34:34:C2:27:FB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/B8EB5F427114FD7070FF54ECDA21153434C227FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.174.0/23
                IPv6:
                  2804:8e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273400

    Signature Algorithm: sha256WithRSAEncryption
         8e:03:35:e1:9f:36:14:f9:2e:6e:e6:86:f5:6b:4d:e4:13:23:
         6a:fe:24:fd:01:05:02:0a:4d:7b:1b:1a:90:2b:fe:d1:3b:d6:
         b5:fd:a1:c1:d3:2e:4e:30:7d:0d:eb:6d:65:39:50:69:aa:aa:
         56:4f:92:77:b2:47:8c:0e:b0:f1:70:8b:3c:1a:89:7c:f2:6b:
         ef:a1:c7:e9:31:f5:61:d1:a4:ac:b1:23:44:f1:e4:3e:a4:45:
         70:1a:01:b7:9c:bc:d0:fb:8b:35:19:ed:19:45:3d:84:4e:0c:
         46:e3:8c:1e:55:0e:db:91:0f:08:e4:37:ac:32:ac:86:d7:ba:
         e0:25:6c:49:fe:df:57:20:b0:c6:11:6b:46:7e:1e:71:c5:f5:
         54:b3:51:f6:78:e3:f5:c1:34:df:a4:68:ee:6d:99:ea:20:21:
         f2:28:eb:5b:b0:74:f5:63:a1:42:6e:99:88:2d:8b:33:7c:93:
         3c:e7:7b:5d:80:64:c3:ca:63:15:54:38:92:ca:cb:2c:4c:8e:
         01:3f:c3:5a:80:c2:ad:eb:d2:d6:1b:13:11:ae:9c:7e:6d:76:
         57:0a:7e:89:c7:ff:c1:bb:3f:b5:78:8c:a4:3c:e4:cd:7c:e1:
         86:5c:bc:6f:fc:12:1e:e3:37:d5:82:12:ec:6b:d0:14:f6:9d:
         5b:7e:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:02 2025 by rpki-client