Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.cer
File:                     C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.cer (raw, json)
Hash identifier:          McY1mUkeDn53j7C+RnYivuQmdwtusVdAbz+4XR58U2U=
Subject key identifier:   C0:C7:5B:B1:4B:E0:79:B2:32:D4:9F:11:3F:3B:DA:F4:EB:8F:D6:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B48C1315726C5B2473EE2DB9E9E145DF7DDA4CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:27:09 +0000
Certificate not after:    Thu 03 Apr 2025 01:32:09 +0000
Subordinate resources:    AS: 265254
                          IP: 168.0.164.0/22
                          IP: 2804:2cf8::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 23:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:48:c1:31:57:26:c5:b2:47:3e:e2:db:9e:9e:14:5d:f7:dd:a4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:27:09 2024 GMT
            Not After : Apr  3 01:32:09 2025 GMT
        Subject: CN=C0C75BB14BE079B232D49F113F3BDAF4EB8FD686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:82:06:e6:b2:16:80:8b:89:10:cf:65:27:
                    a4:36:51:8b:4c:cc:00:34:8d:c1:a5:33:1e:f3:73:
                    a4:a9:70:23:f7:18:ba:61:74:ba:bf:b3:b6:65:d3:
                    d3:1d:82:62:5c:94:3d:8b:cb:12:32:8a:67:c9:3d:
                    63:b5:22:60:cf:e3:45:c7:a2:3e:f8:18:c6:45:34:
                    a8:01:15:d9:7b:c4:3e:a0:1e:4d:cc:5d:ff:f2:dd:
                    6e:62:36:60:02:29:b2:b4:55:ea:19:50:e9:4d:9d:
                    45:ba:52:b3:a8:4d:10:c1:73:40:fc:11:fa:5b:9b:
                    f6:25:be:38:85:db:51:3e:9d:d7:a7:8f:16:c4:a6:
                    43:60:17:bd:6a:ef:98:29:09:91:75:7b:25:72:54:
                    3a:17:ec:a6:7d:da:e4:86:ef:1e:3a:5b:1e:b0:71:
                    17:9b:ac:fe:d5:b9:67:84:aa:a3:46:90:7b:ec:8e:
                    5a:ac:5d:85:47:a0:34:6b:e3:76:29:ca:17:11:de:
                    ba:57:99:c3:69:64:6f:29:25:50:8e:65:35:a1:b6:
                    5e:07:dd:00:b6:d1:91:4c:fc:ed:72:77:23:1f:12:
                    b8:3f:23:e6:72:0a:2f:61:1b:f1:00:6c:99:5a:16:
                    12:07:e9:99:b1:a2:7e:59:b6:ec:73:ce:48:02:eb:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:C7:5B:B1:4B:E0:79:B2:32:D4:9F:11:3F:3B:DA:F4:EB:8F:D6:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.164.0/22
                IPv6:
                  2804:2cf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265254

    Signature Algorithm: sha256WithRSAEncryption
         aa:4b:95:c0:7a:e2:6f:b5:ab:b6:f7:04:25:f5:72:90:12:9f:
         a0:47:eb:a8:0a:12:fe:21:62:7a:26:91:bf:d5:25:53:54:44:
         c7:f0:02:5d:80:1c:41:0f:1f:4b:81:fa:0f:2a:1e:f1:72:d5:
         a5:29:34:98:e5:ac:ba:1b:a4:f2:4e:8c:de:6e:47:c7:23:6b:
         60:72:e4:40:31:28:55:49:ef:49:ee:70:d8:71:e1:e8:56:43:
         26:ca:96:eb:79:b0:dd:cb:23:db:45:24:16:3e:47:be:45:6d:
         cd:2e:cc:c3:72:da:66:ef:84:6c:dc:c8:51:9a:b1:61:4b:1b:
         43:a6:41:ad:3f:45:1f:43:6f:30:91:54:01:b6:19:88:76:d7:
         37:bc:ed:a6:be:83:05:11:41:9d:62:4f:76:fc:c8:f4:90:a2:
         ae:9a:39:8e:e7:36:34:34:a8:a7:3c:96:af:3c:e2:96:78:85:
         84:9a:fd:56:b7:97:5c:26:bd:d6:12:fa:d6:62:02:86:26:17:
         e1:34:d6:cd:67:98:a7:b4:c5:86:a8:a5:7c:6e:b6:28:0a:87:
         02:56:99:fd:34:b2:d3:a2:c7:b6:e0:1e:16:b5:90:f9:a5:63:
         87:c3:af:c0:c9:e0:7d:17:6c:79:b7:66:e7:71:c4:60:8f:51:
         9d:65:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org