Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C5F965B97897161E1C6813A73D4312473E4C180A.cer
File:                     C5F965B97897161E1C6813A73D4312473E4C180A.cer (raw, json)
Hash identifier:          1wtSd7ppNEPJbTSEPs/KFvF8SpAf6MZXSpzuR1JdRgE=
Subject key identifier:   C5:F9:65:B9:78:97:16:1E:1C:68:13:A7:3D:43:12:47:3E:4C:18:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5136523AEC0BCC27FB5F76A2A4A6A7C4EB7722FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/C5F965B97897161E1C6813A73D4312473E4C180A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Sep 2024 19:38:46 +0000
Certificate not after:    Tue 23 Sep 2025 19:43:46 +0000
Subordinate resources:    AS: 268560
                          IP: 45.163.148.0/22
                          IP: 2804:530c::/32

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:36:52:3a:ec:0b:cc:27:fb:5f:76:a2:a4:a6:a7:c4:eb:77:22:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 24 19:38:46 2024 GMT
            Not After : Sep 23 19:43:46 2025 GMT
        Subject: CN=C5F965B97897161E1C6813A73D4312473E4C180A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:5e:49:63:36:c4:57:95:21:f9:a6:a8:51:
                    c3:ea:fd:1e:81:61:91:7c:49:a9:23:d7:e7:7e:a4:
                    d1:88:76:e3:df:d1:a5:18:58:a0:f9:e0:eb:44:3b:
                    6e:a4:d1:6b:a1:8b:68:01:28:6c:a5:67:5d:f2:12:
                    6a:12:52:9d:e3:94:27:c7:cb:9e:1b:4f:61:0e:52:
                    f4:e6:f7:1c:07:71:98:b6:24:99:13:d8:6f:c7:23:
                    ba:99:bf:7b:fe:83:34:cb:14:2d:6a:76:95:9a:7d:
                    6c:55:91:7d:bf:fb:9a:9a:50:48:25:06:4a:78:3a:
                    00:07:fd:f4:49:b3:24:f5:b2:f2:8a:60:3c:7e:b4:
                    d7:34:84:97:da:e9:3f:c4:77:ac:00:eb:2b:6b:81:
                    6b:20:9d:2c:09:14:a3:18:e9:e8:66:40:cf:2c:0f:
                    b6:87:96:82:43:df:24:c5:0a:76:3c:f1:57:52:39:
                    ac:e7:8e:9e:17:01:31:ed:92:7c:6c:e6:9c:df:f7:
                    6b:3d:40:3f:a7:c1:63:a9:60:d5:bf:13:e0:0f:79:
                    58:e5:e8:db:74:7a:29:5e:a5:25:fa:78:ee:20:6c:
                    dc:47:1b:b3:18:2a:ca:e4:4c:3e:84:ae:30:74:91:
                    78:ea:6b:44:37:f7:62:eb:c9:17:97:9f:02:f8:9d:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:F9:65:B9:78:97:16:1E:1C:68:13:A7:3D:43:12:47:3E:4C:18:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/C5F965B97897161E1C6813A73D4312473E4C180A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.148.0/22
                IPv6:
                  2804:530c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268560

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:39:d3:8c:60:cd:16:03:08:fa:99:71:ab:9f:8b:2c:92:
         cb:b0:bc:54:53:ea:a2:2f:c2:df:bf:2a:83:50:12:a3:53:af:
         0a:9d:f9:ad:7f:1f:d1:dd:51:b2:8d:3f:d7:90:e4:62:3b:1f:
         ac:d6:3b:13:78:d8:44:eb:71:50:c3:73:89:7f:7d:ca:82:07:
         0f:fe:ad:f1:21:77:b3:b8:ad:01:7a:fb:3d:03:89:08:54:98:
         52:11:1e:be:69:9e:07:57:87:fd:6d:9e:c4:eb:43:e2:c1:d5:
         ca:1e:4d:c3:d9:b9:85:72:a8:5c:7f:28:12:01:91:86:8b:58:
         50:7d:74:fe:c1:c2:9d:41:5d:14:16:b1:bc:81:cd:25:ea:7f:
         d9:b0:de:80:4c:1c:ac:92:de:4d:b4:df:df:76:be:dd:41:5f:
         ee:43:c6:68:c6:03:4c:aa:53:78:a9:a8:1e:2f:c0:e5:4a:38:
         19:38:d3:8b:15:ec:79:d8:d1:f6:fc:f7:b5:bf:39:66:a8:f5:
         83:3a:f3:53:ba:b9:7e:67:53:ea:04:6d:81:da:15:ef:13:ce:
         32:63:cf:6e:5a:64:c5:5d:14:55:20:9b:28:cc:81:92:2e:1e:
         52:d3:7f:1d:79:32:34:91:be:83:3e:03:1b:7b:38:95:fa:82:
         74:ae:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 08:35:25 2024 by rpki-client on console-ams.rpki-client.org