Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer
File:                     D518634D88143C0017F61EB6C5447D28D1D13616.cer (raw, json)
Hash identifier:          iT6+JMRikP7jSIrLisy22thF43zw0lUUq5Th9wmmsAA=
Subject key identifier:   D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       56F8E8B2F12F8B6EDACFF583BBA968D504314D94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/D518634D88143C0017F61EB6C5447D28D1D13616.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:55:18 +0000
Certificate not after:    Thu 03 Apr 2025 04:00:18 +0000
Subordinate resources:    AS: 53046
                          AS: 61600
                          IP: 45.186.143.0/24
                          IP: 143.208.160.0/22
                          IP: 177.93.120.0/21
                          IP: 177.101.16.0/20
                          IP: 200.39.64.0/19
                          IP: 2801:80:330::/48
                          IP: 2801:80:37a0::/48
                          IP: 2804:1f04::/32

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 21:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f8:e8:b2:f1:2f:8b:6e:da:cf:f5:83:bb:a9:68:d5:04:31:4d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:55:18 2024 GMT
            Not After : Apr  3 04:00:18 2025 GMT
        Subject: CN=D518634D88143C0017F61EB6C5447D28D1D13616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:8b:09:c4:6e:87:b2:74:c9:3f:cf:26:77:
                    4f:fd:c2:a6:3c:e8:0c:eb:57:8f:f4:63:5b:79:c7:
                    e1:31:b6:ce:bb:a0:66:1e:90:de:34:97:08:2b:51:
                    a0:14:93:35:bd:5b:cd:6f:f2:70:17:0a:a9:cf:43:
                    a4:e7:5c:05:f0:b8:b3:d3:4c:5e:b1:5b:e9:76:29:
                    3a:c3:20:00:0b:1d:0b:da:bc:8e:26:27:92:0d:5e:
                    d6:6b:82:16:1a:64:48:ec:8f:4f:fa:73:f1:eb:04:
                    bc:5d:57:e6:d4:cd:96:f3:e3:fe:d4:cd:10:98:96:
                    2c:a0:9f:3b:62:9f:f8:0c:19:90:44:06:15:07:04:
                    a6:ec:66:0a:de:a2:76:77:df:ee:22:2c:78:67:9d:
                    3b:69:20:c7:8a:31:fd:a8:51:f5:af:85:89:bb:e8:
                    27:d3:df:94:39:66:0b:f4:f3:39:e0:d5:fb:0c:fe:
                    30:06:b6:34:eb:58:75:15:1c:cf:b2:b7:85:8c:7a:
                    50:21:65:b4:5c:5c:b5:61:66:c8:64:24:9d:6d:b4:
                    1e:ae:6c:87:bb:e7:fb:9f:77:d6:d5:1c:39:e5:df:
                    51:88:3f:91:8c:92:bc:62:81:70:3a:7a:ee:99:81:
                    2f:4a:34:b4:b1:05:ef:dc:3f:e0:99:2b:37:73:e8:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/D518634D88143C0017F61EB6C5447D28D1D13616.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.143.0/24
                  143.208.160.0/22
                  177.93.120.0/21
                  177.101.16.0/20
                  200.39.64.0/19
                IPv6:
                  2801:80:330::/48
                  2801:80:37a0::/48
                  2804:1f04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53046
                  61600

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:3c:41:97:85:f4:39:8f:af:83:89:46:09:53:5a:d4:a4:
         31:3f:b9:e7:1f:3f:fa:60:0b:fb:5b:b7:8e:8b:bf:21:b5:35:
         c2:4a:5e:fe:28:14:76:5d:66:16:3b:63:cf:e5:09:df:a9:a5:
         24:c6:2e:f8:e4:d7:70:64:33:c7:d6:d1:62:95:7c:fa:29:a5:
         6f:75:c4:fb:97:99:71:f5:d0:f4:16:e0:f8:a4:46:09:6b:52:
         ad:43:88:79:34:36:19:f9:b9:43:17:51:e6:23:04:28:39:99:
         1b:5e:f6:96:19:10:ed:75:5d:ea:57:b1:70:0c:bf:e5:39:77:
         f8:e5:77:ed:66:92:e8:4f:54:15:5a:45:0a:40:73:03:86:04:
         20:55:6a:d0:cb:49:37:be:62:2a:86:e1:5c:c8:47:1e:5c:66:
         a5:ad:17:b7:21:ee:70:65:8d:05:45:ce:b7:17:fe:e2:08:6a:
         74:36:89:af:80:a9:a7:d7:3d:38:78:e1:e0:23:b7:30:b1:b1:
         41:57:99:65:5d:63:d0:cf:74:82:50:2d:b4:27:58:4e:3f:84:
         fd:14:7c:ff:25:a1:b6:f9:bf:cd:56:db:39:2b:ec:78:e3:d9:
         a1:1d:55:a9:72:a4:cb:f5:f1:1e:3f:a8:4e:7d:e5:a0:fc:a7:
         18:0f:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org