Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C7BCA1C7F70908966573833040A015B0E9CA93E7.cer
File:                     C7BCA1C7F70908966573833040A015B0E9CA93E7.cer (raw, json)
Hash identifier:          tLx5WOrUooNWmkFZOYjweKNqw+8pweYm+Zu8LupMeOw=
Subject key identifier:   C7:BC:A1:C7:F7:09:08:96:65:73:83:30:40:A0:15:B0:E9:CA:93:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C8D76CCA9880A9B1892D5FC86B42317D1DE9694
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/C7BCA1C7F70908966573833040A015B0E9CA93E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Nov 2024 12:43:08 +0000
Certificate not after:    Mon 03 Nov 2025 12:48:08 +0000
Subordinate resources:    AS: 266343
                          IP: 170.239.4.0/22
                          IP: 2804:365c::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 19:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8d:76:cc:a9:88:0a:9b:18:92:d5:fc:86:b4:23:17:d1:de:96:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  4 12:43:08 2024 GMT
            Not After : Nov  3 12:48:08 2025 GMT
        Subject: CN=C7BCA1C7F70908966573833040A015B0E9CA93E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:57:34:2c:9b:ad:41:c0:20:fb:21:68:fd:
                    ec:43:24:6a:6f:77:47:32:47:c8:11:ca:7d:67:91:
                    0f:44:ed:f2:13:7b:88:cd:03:eb:99:d5:1b:ec:2f:
                    44:ae:40:10:6f:73:50:d9:cf:6b:be:22:33:61:36:
                    d8:bf:df:07:9c:fe:69:26:4b:59:4a:67:12:84:44:
                    85:c6:ee:b4:51:1d:29:98:23:a2:33:42:b5:56:f4:
                    3b:72:d3:d1:ac:83:bf:ae:9e:8e:7e:f7:66:90:13:
                    57:68:7f:56:ff:03:87:b0:78:1f:ec:11:c1:a7:46:
                    cb:79:af:66:22:6a:d9:4c:ca:ab:83:d0:9c:b5:2e:
                    e0:de:93:2c:62:2d:2f:c0:1f:ad:00:c9:78:49:d6:
                    2c:b9:47:ab:80:00:b6:cb:b7:36:2a:a7:f7:6b:43:
                    a2:40:7e:2a:5f:ce:21:19:3f:b3:90:af:2e:d5:ec:
                    3a:29:33:21:5f:c5:79:86:65:0e:49:78:e4:70:7a:
                    69:b3:c4:20:20:4c:a5:8b:4a:b9:e4:45:14:40:de:
                    27:ee:89:6a:3d:6b:9c:02:73:d6:a1:20:e4:41:a6:
                    ae:c7:57:86:c9:2d:c3:ff:36:4a:63:e8:5a:98:62:
                    46:51:74:f4:58:1e:e7:e3:62:09:c1:ee:e0:1c:b4:
                    63:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:BC:A1:C7:F7:09:08:96:65:73:83:30:40:A0:15:B0:E9:CA:93:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/C7BCA1C7F70908966573833040A015B0E9CA93E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22
                IPv6:
                  2804:365c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266343

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:7f:52:1d:17:54:ce:4d:b9:ee:e5:7b:84:63:c3:19:16:
         12:21:cb:85:24:10:01:2c:29:49:d2:e4:c5:33:e6:38:97:e6:
         1a:44:1a:b2:0f:0f:57:77:df:eb:93:ba:9b:01:70:25:b6:e3:
         11:c4:2e:8f:c6:8f:4b:a3:cb:14:83:c6:97:c8:98:7e:36:c9:
         55:d1:12:0e:d6:bd:94:b6:32:60:54:54:f9:27:73:b4:dd:bf:
         02:ad:88:a8:22:53:36:65:48:e3:df:19:03:e6:4f:71:eb:97:
         25:f5:b0:1a:eb:70:5f:72:88:31:58:a2:e6:0b:e6:19:49:e3:
         2a:33:a2:35:4f:be:68:60:6d:8e:49:38:bf:da:eb:58:c2:cf:
         43:0a:0f:c8:41:aa:e3:41:a6:79:b9:5f:33:e7:f3:5f:a3:d2:
         c5:5d:21:b4:b6:1a:60:9f:a1:68:7f:0f:f7:1b:87:90:60:3a:
         9a:30:01:9a:5c:4c:fa:f5:c2:b1:2d:ba:25:89:ba:ca:f3:82:
         e1:d2:34:c8:50:da:f6:97:c4:ae:56:6d:3e:36:68:69:b3:8f:
         77:e7:46:80:5e:14:21:ea:32:50:96:43:8f:e8:aa:05:b0:b0:
         3b:73:4c:b8:2d:4a:94:1a:fc:c7:32:9e:19:5d:9d:8a:e6:a5:
         3f:5a:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 22:21:21 2024 by rpki-client on console-fra.rpki-client.org