Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer
File:                     CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer (raw, json)
Hash identifier:          0RdXdilqwONx+rhb2ORmv+Php8WDXpWwISDRYuOYw64=
Subject key identifier:   CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60AC7BDF1949F5E938006E747166042B52C42D1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:21:03 +0000
Certificate not after:    Thu 03 Apr 2025 15:26:03 +0000
Subordinate resources:    AS: 267369
                          IP: 45.234.176.0/22
                          IP: 2804:4c68::/32

Validation:               Failed, certificate revoked on Sun 23 Jun 2024 15:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ac:7b:df:19:49:f5:e9:38:00:6e:74:71:66:04:2b:52:c4:2d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:21:03 2024 GMT
            Not After : Apr  3 15:26:03 2025 GMT
        Subject: CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:77:65:36:20:b0:41:3f:de:aa:f3:c5:33:
                    cd:21:10:34:68:90:52:58:da:6b:f9:5c:17:6c:8b:
                    cf:f7:e5:03:d9:b9:92:8e:b3:9b:7a:f8:19:80:09:
                    8f:13:23:b1:07:20:a5:34:3a:cb:a9:f6:44:21:ce:
                    67:bb:39:02:19:26:65:89:d3:9d:7a:6d:1d:38:7c:
                    7b:62:a1:f9:f5:d6:d3:35:eb:fc:cb:c2:eb:44:cd:
                    40:d2:d6:b2:99:40:c0:d4:aa:94:1a:44:33:ec:61:
                    77:ad:08:a0:c0:7c:28:b0:35:75:e5:d2:1b:01:4e:
                    e1:8c:26:64:af:fd:4f:a9:7c:6d:a5:6f:9c:dc:e5:
                    21:04:e8:9c:a7:17:26:9b:c6:8b:6e:75:ed:f8:90:
                    14:03:5c:8e:d3:e0:90:ae:20:99:45:5e:15:04:f1:
                    0c:09:6c:b4:58:6c:c7:31:80:c4:d7:6c:ed:70:54:
                    c3:61:5b:2a:23:c6:84:db:14:72:80:2c:ee:cb:77:
                    72:90:d0:91:35:15:fb:5a:b3:20:83:5d:b9:af:07:
                    6d:f6:bb:fc:72:18:f0:76:2e:c3:32:dd:7e:68:07:
                    21:fb:ee:b7:44:c6:25:3c:92:1d:a0:46:b3:cf:f6:
                    66:c4:cd:74:87:e1:4e:3d:0a:bf:af:7a:7e:de:73:
                    b8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.176.0/22
                IPv6:
                  2804:4c68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267369

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:3b:7f:d1:f6:76:a2:0f:06:71:00:7e:33:fd:af:46:af:
         f8:2e:c2:df:89:67:d5:2d:d6:c0:d5:fe:ce:09:a1:8a:10:e6:
         6f:7a:f1:69:11:35:b3:b6:96:ff:df:59:89:b8:d8:b1:82:94:
         e3:b4:3f:9d:7b:05:6f:7b:26:5c:4c:ad:20:76:c8:ad:b8:02:
         77:88:d6:5a:c3:ea:d6:23:e8:63:b5:f4:58:73:bf:39:de:37:
         af:9c:fb:ed:0c:08:1a:ad:5e:60:21:2b:8d:e3:e2:a9:96:4f:
         8a:5e:16:ce:c2:d7:ad:8c:14:92:da:8e:9a:42:91:39:e1:08:
         27:1d:44:19:2e:26:9c:95:d8:01:e4:6a:c3:e4:68:6c:47:cf:
         a6:48:3f:c0:80:7c:de:d4:99:98:c3:b2:b2:03:2f:1a:54:7f:
         5c:2f:15:84:31:49:7f:cb:1c:78:8c:b4:98:c9:1d:fc:7a:32:
         78:43:07:0f:b2:e9:1c:d4:d3:b6:7a:8a:da:a7:4c:45:4f:c2:
         63:8c:d9:e4:79:39:89:c4:21:9a:15:d2:13:bf:d7:07:8a:98:
         0f:0b:67:6a:67:6f:15:31:9d:fb:bd:84:c8:6b:56:98:77:cd:
         c6:cb:c0:23:86:47:4c:d0:82:aa:ea:21:6c:4d:b3:02:6e:63:
         f2:ec:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:21:42 2024 by rpki-client on console-ams.rpki-client.org