Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.cer
File:                     BDED1ED39E25BB8119504E29E3014EC3968ECCEA.cer (raw, json)
Hash identifier:          AOc8OSnyoK5pVOvykRuvX1DE61CrDrAL9ZxSpqwlBkA=
Subject key identifier:   BD:ED:1E:D3:9E:25:BB:81:19:50:4E:29:E3:01:4E:C3:96:8E:CC:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7FA23FB0A50F8145469C7A46AB420EC6761A5D29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:12:40 +0000
Certificate not after:    Thu 03 Apr 2025 04:17:40 +0000
Subordinate resources:    AS: 266105
                          IP: 45.5.196.0/22
                          IP: 2804:3ab8::/32

Validation:               Failed, certificate revoked on Wed 01 May 2024 21:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a2:3f:b0:a5:0f:81:45:46:9c:7a:46:ab:42:0e:c6:76:1a:5d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:12:40 2024 GMT
            Not After : Apr  3 04:17:40 2025 GMT
        Subject: CN=BDED1ED39E25BB8119504E29E3014EC3968ECCEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:0c:97:78:83:24:3d:86:6d:31:a5:28:20:
                    02:0d:e3:bc:9e:96:cc:e7:11:c0:a8:2c:cd:a0:8b:
                    69:4d:32:8b:34:42:d9:0e:7a:89:6c:14:79:28:01:
                    ac:be:79:93:71:db:d0:48:ad:d3:f5:6c:00:46:24:
                    23:cf:48:d3:be:b5:6b:13:2c:10:83:52:cb:02:3e:
                    2e:cc:47:6d:8c:c1:b3:94:3a:33:63:91:87:47:6b:
                    71:af:f5:a7:ba:3a:c7:19:b4:43:d4:59:6b:34:05:
                    14:68:3d:b1:56:be:c7:a3:98:c9:2a:7f:f8:6b:29:
                    18:bc:fa:c7:7d:c0:0d:bb:90:31:60:a5:d8:59:d9:
                    ac:fb:52:e4:2b:db:d5:d6:f0:bc:ed:17:a1:29:d2:
                    f6:45:4e:6c:34:f1:c7:75:da:8a:6d:5c:76:58:45:
                    68:96:2d:cc:5c:e1:af:74:32:3b:f3:af:71:a6:b2:
                    0b:58:7f:2e:38:1f:e7:76:ca:00:15:f1:ba:8f:d5:
                    28:d4:3b:7f:75:48:5a:26:36:db:72:fe:51:4a:53:
                    00:29:cb:ca:06:30:c8:4f:bb:b5:9c:3c:1e:45:e4:
                    6c:4b:bf:fe:0d:19:3c:18:d5:55:31:03:1b:2a:30:
                    5f:32:80:cd:8b:f4:0b:1c:01:08:db:11:da:48:6a:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:ED:1E:D3:9E:25:BB:81:19:50:4E:29:E3:01:4E:C3:96:8E:CC:EA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.196.0/22
                IPv6:
                  2804:3ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266105

    Signature Algorithm: sha256WithRSAEncryption
         b2:8a:5c:91:a6:66:dc:35:57:79:32:92:14:59:67:aa:09:47:
         7d:61:e8:97:c5:c8:c7:4a:75:e3:c0:d7:e5:80:90:f5:5a:f4:
         43:3d:c4:ed:e7:94:49:98:b1:9a:e5:9c:06:f5:94:5b:df:53:
         07:ae:d8:55:0f:66:92:b8:b0:89:39:25:94:5c:a2:97:fb:cd:
         a1:00:70:d1:41:de:53:13:61:14:22:92:62:cd:42:db:0d:16:
         94:c4:69:c1:77:4a:7d:89:cc:77:83:70:28:9a:a4:4a:43:25:
         4f:22:21:43:d0:8e:c6:63:79:47:43:13:50:f7:00:d7:c5:e7:
         8e:26:c0:6b:be:82:9f:40:a6:51:61:b6:bd:79:b3:3e:b4:77:
         79:cf:5a:25:0d:ee:41:22:11:15:12:ae:00:dd:65:01:b1:c4:
         11:dc:3b:2a:b2:c1:52:15:fe:be:57:78:09:9b:95:29:0a:85:
         f7:0b:53:e5:eb:a9:cd:07:39:b6:f5:94:98:56:1a:49:24:98:
         14:ea:c0:da:f0:12:66:51:40:04:ca:12:7f:8c:b3:66:07:ee:
         17:50:4b:a4:36:13:45:94:39:90:a3:bb:e4:eb:5d:8f:c3:c5:
         f9:53:44:b1:bb:c9:fd:ab:f6:39:8b:c2:81:59:55:db:17:fa:
         5a:69:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org