Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.cer
File:                     CC28C3C1829243E5DD9053B79F04CA570C54DEEE.cer (raw, json)
Hash identifier:          uNRgvVLN9/bNYnDQrG2SANHpTtoFXDm2eRc2xrSF2y4=
Subject key identifier:   CC:28:C3:C1:82:92:43:E5:DD:90:53:B7:9F:04:CA:57:0C:54:DE:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2853A4CC711B1682A8E889ED9F74824BE14CA19D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Oct 2024 13:21:24 +0000
Certificate not after:    Tue 30 Sep 2025 13:26:24 +0000
Subordinate resources:    AS: 274647
                          IP: 2804:9188::/32

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:53:a4:cc:71:1b:16:82:a8:e8:89:ed:9f:74:82:4b:e1:4c:a1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  1 13:21:24 2024 GMT
            Not After : Sep 30 13:26:24 2025 GMT
        Subject: CN=CC28C3C1829243E5DD9053B79F04CA570C54DEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:04:39:be:07:30:b4:52:64:d3:c9:dc:b9:
                    d6:80:be:99:31:fb:5b:16:2d:2e:dc:3c:55:32:87:
                    7b:be:8f:4b:35:a6:a0:a3:39:8a:3e:50:a5:db:aa:
                    f4:58:19:cc:66:57:fe:a8:4f:af:e5:f0:8a:3a:12:
                    95:ae:21:d2:21:63:77:8f:3c:d9:1d:31:50:8e:65:
                    bf:46:b4:ea:cd:ac:d5:08:6c:a4:52:67:57:11:2c:
                    35:16:a8:df:65:57:64:4f:cf:45:cd:4c:67:7c:44:
                    33:9e:f9:56:4e:d2:97:a1:0a:e6:1d:d6:9f:27:12:
                    c6:8f:46:99:43:67:0a:a9:01:71:ff:5f:46:f7:02:
                    77:ca:fc:91:0a:8f:5d:1e:ba:97:52:12:fc:97:76:
                    1f:2e:bf:d7:1a:f1:22:0c:fa:ce:e5:df:34:e3:ad:
                    82:07:1b:7b:79:92:70:0e:31:0b:30:3d:a4:68:7b:
                    52:d9:1b:ab:55:fa:98:5d:ad:5d:d3:18:79:c5:b1:
                    b1:d3:5b:79:ce:4b:81:fe:14:04:77:74:a1:7a:2b:
                    1b:fd:cf:0c:de:89:43:67:39:e7:e6:88:a8:30:e3:
                    bf:38:bc:d6:09:34:54:ca:64:10:c5:7e:79:ff:7c:
                    54:a0:ce:66:d4:b3:e7:0a:c4:e0:7b:d8:ef:52:82:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:28:C3:C1:82:92:43:E5:DD:90:53:B7:9F:04:CA:57:0C:54:DE:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274647

    Signature Algorithm: sha256WithRSAEncryption
         3b:76:f1:79:1e:7e:a4:48:8e:53:88:4f:d3:aa:b8:78:ca:5d:
         69:f3:91:78:ac:d4:15:09:86:f6:5e:42:1f:e9:4b:7f:8a:13:
         e7:e5:c0:a9:44:9d:e9:5e:48:d0:f2:34:93:1b:74:29:6b:de:
         72:23:fe:14:a9:c6:02:19:ea:83:b0:5b:56:e5:9e:5d:fd:a4:
         a1:26:5e:57:9d:46:16:7c:c4:d4:4a:a5:4f:bf:17:cc:b2:23:
         b8:df:8f:22:e4:18:f5:34:7a:fc:2e:ce:d7:e0:aa:87:d6:41:
         a6:69:a9:d4:09:5f:c1:82:54:d9:50:55:e0:ec:c8:91:16:cd:
         f6:7d:ee:c6:26:5e:4e:c0:c8:91:0c:c1:ca:b7:24:b2:ca:33:
         01:6d:52:1f:2e:92:6d:bd:4d:80:0f:9c:18:22:3e:f6:60:40:
         d4:2c:29:1f:9b:a0:8b:c1:74:63:56:34:6f:a1:bd:f1:a1:0b:
         01:0d:77:05:b1:2c:2b:29:2c:37:0c:60:ad:72:57:1d:c4:f3:
         14:6e:8c:34:32:ea:a3:01:a8:3c:34:f0:6e:9c:62:28:42:10:
         ee:a3:72:4d:ce:ad:8e:dc:59:cb:bf:3f:0c:23:32:08:8b:55:
         e8:35:ab:0e:47:f7:29:e9:b5:2d:34:36:b5:bb:3c:75:60:63:
         4f:fb:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 06:48:41 2024 by rpki-client on console-fra.rpki-client.org