Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B9FF4216469D63E4386170FB34345418A0D1AA97.cer
File:                     B9FF4216469D63E4386170FB34345418A0D1AA97.cer (raw, json)
Hash identifier:          cRQT/2RM8IDnDfSGa2x37zqL9sQVATOGsjexyBcXzq8=
Subject key identifier:   B9:FF:42:16:46:9D:63:E4:38:61:70:FB:34:34:54:18:A0:D1:AA:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A0B300F823E76E4001351DD9F5AEFD0A13E5525
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/1/B9FF4216469D63E4386170FB34345418A0D1AA97.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:01:24 +0000
Certificate not after:    Wed 02 Apr 2025 20:06:24 +0000
Subordinate resources:    AS: 272470
                          IP: 2804:81b0::/32

Validation:               Failed, certificate revoked on Sun 13 Oct 2024 22:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0b:30:0f:82:3e:76:e4:00:13:51:dd:9f:5a:ef:d0:a1:3e:55:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:01:24 2024 GMT
            Not After : Apr  2 20:06:24 2025 GMT
        Subject: CN=B9FF4216469D63E4386170FB34345418A0D1AA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:f8:3d:74:8f:27:a6:10:90:7f:21:09:9e:
                    d0:34:16:55:4d:2e:43:13:ec:1f:14:d5:54:5e:5d:
                    07:49:2a:17:19:8c:54:95:30:c5:1f:3f:3e:d4:e1:
                    fc:a4:2b:7c:3c:97:54:49:7d:51:1c:03:ac:1f:34:
                    e1:17:3a:47:7d:7f:62:d2:73:9c:ff:20:71:e6:88:
                    42:2b:fb:e5:51:66:76:7b:1b:13:85:9b:31:17:8c:
                    38:56:e6:e8:ad:f6:ff:7b:80:67:79:f8:39:e8:b9:
                    0e:75:a3:02:89:ec:91:76:d5:4e:b6:7f:c5:c5:d2:
                    14:b4:5b:c1:fb:b1:04:78:cb:ad:4f:64:6c:91:4a:
                    17:8a:61:73:cd:38:c5:22:d1:55:2c:1f:77:f1:70:
                    ee:f6:37:4d:1f:70:fb:7d:21:fa:44:51:b4:e8:a2:
                    7b:12:0e:28:a2:87:1d:3f:ee:86:ba:e9:be:04:4e:
                    4f:41:4f:ad:68:80:eb:fd:e3:d3:28:a0:17:55:cf:
                    5e:06:1f:d5:36:da:8f:87:96:53:3e:b3:97:ad:31:
                    6c:f4:0e:fb:53:75:38:cd:1a:9e:df:9c:e0:3d:b2:
                    cd:0f:b7:82:fd:d3:67:a2:65:97:96:b0:bb:f1:bd:
                    02:c4:23:4c:6f:52:c5:28:65:18:23:10:37:19:b3:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:FF:42:16:46:9D:63:E4:38:61:70:FB:34:34:54:18:A0:D1:AA:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/1/B9FF4216469D63E4386170FB34345418A0D1AA97.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272470

    Signature Algorithm: sha256WithRSAEncryption
         c0:96:b4:d8:2b:22:4b:89:df:f6:c4:ad:a0:46:9b:04:4d:7d:
         d0:bd:11:3d:b3:2a:a8:d3:b3:ad:e6:ae:38:6c:b4:a1:ee:72:
         6d:2a:f9:e6:63:12:a3:50:c5:20:5a:5a:de:4f:ce:c5:65:8e:
         78:8f:da:f5:ed:7f:f8:fa:76:65:f5:56:9c:b8:1d:6d:76:7c:
         db:c4:a3:a0:ac:ed:97:d2:95:25:cc:28:a3:6e:dc:38:5b:5c:
         5e:31:91:95:62:da:e1:9d:2e:e9:58:25:9f:81:39:e3:c3:8a:
         4b:a8:48:b4:39:5a:25:47:c0:d2:3a:61:28:03:1f:74:22:fe:
         dd:90:55:b8:0e:0a:1b:6c:f7:fa:d0:3a:c5:84:88:aa:f7:3e:
         3b:a1:d6:08:6c:05:3d:5a:cf:e9:3f:34:68:f2:db:d0:90:9c:
         ab:b8:4e:45:fb:ff:34:2d:08:73:a7:0e:bd:85:62:27:e4:04:
         7b:a7:2a:c8:5e:ea:1a:06:ec:bc:12:55:96:34:a4:8e:df:b5:
         7c:07:3d:60:cb:bd:8d:2d:4e:76:bc:23:3c:53:75:a4:71:bd:
         08:2c:03:fb:df:4c:d7:7b:c2:c9:3b:31:28:27:1c:25:16:87:
         e7:a3:36:44:dd:f3:d3:21:1c:83:3f:bf:6e:40:5d:b4:b2:12:
         7d:93:42:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 01:13:50 2024 by rpki-client on console-ams.rpki-client.org