Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9D0E743F2D27F38A01A968BA82B09A65DE0A493.cer
File:                     D9D0E743F2D27F38A01A968BA82B09A65DE0A493.cer (raw, json)
Hash identifier:          W6iYvRzYCRoONFcj0skhZA/nWRDB4LktJMOEq9qiPvQ=
Subject key identifier:   D9:D0:E7:43:F2:D2:7F:38:A0:1A:96:8B:A8:2B:09:A6:5D:E0:A4:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4925561A68CECEBB938F81BC07AAB241A2E93571
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/1/D9D0E743F2D27F38A01A968BA82B09A65DE0A493.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:02:49 +0000
Certificate not after:    Thu 03 Apr 2025 02:07:49 +0000
Subordinate resources:    AS: 269163
                          IP: 45.181.24.0/22
                          IP: 2804:6060::/32

Validation:               Failed, certificate revoked on Tue 18 Jun 2024 22:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:25:56:1a:68:ce:ce:bb:93:8f:81:bc:07:aa:b2:41:a2:e9:35:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:02:49 2024 GMT
            Not After : Apr  3 02:07:49 2025 GMT
        Subject: CN=D9D0E743F2D27F38A01A968BA82B09A65DE0A493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:aa:31:16:81:31:89:6a:bc:ae:84:d9:c5:ef:
                    c2:2f:b1:54:13:aa:ce:a3:1b:9f:c4:a2:18:e7:fb:
                    dd:17:e2:6f:17:19:ad:8d:46:64:1b:bd:5f:ef:7c:
                    d2:78:99:1b:78:16:88:95:b8:6f:90:99:69:29:5c:
                    17:7c:ee:43:27:c7:48:d8:e5:22:29:db:37:87:d7:
                    9c:b2:30:4f:69:99:e4:8f:0d:7b:7a:84:6f:90:d0:
                    62:3d:27:7a:a6:93:30:a1:8e:e1:83:28:e0:bd:17:
                    76:d5:92:ac:02:b4:2e:86:c7:07:92:ce:66:eb:84:
                    e3:2d:9c:9b:c6:7e:75:f8:e4:99:99:e1:51:de:e5:
                    ca:37:7b:e8:d5:e1:c5:93:5b:a9:6c:cf:72:36:86:
                    18:27:69:c4:0d:12:eb:95:a2:5c:2d:4b:2d:52:ed:
                    54:a1:d0:61:97:23:ac:85:1b:24:a3:86:a8:9f:07:
                    7c:89:10:aa:e1:f2:2e:4f:a4:3c:51:2a:64:bf:ff:
                    34:55:af:ca:af:cf:0c:fc:e3:7c:5d:1f:4b:e4:73:
                    76:ef:02:35:22:ac:b3:2e:cf:4d:52:71:73:fa:a3:
                    11:47:ad:f9:36:92:ab:53:85:f3:c9:1a:79:6a:b7:
                    d0:10:aa:9a:b3:77:85:91:62:be:9d:c5:f8:44:86:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:D0:E7:43:F2:D2:7F:38:A0:1A:96:8B:A8:2B:09:A6:5D:E0:A4:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/1/D9D0E743F2D27F38A01A968BA82B09A65DE0A493.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.24.0/22
                IPv6:
                  2804:6060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269163

    Signature Algorithm: sha256WithRSAEncryption
         b6:23:7c:30:28:eb:95:b7:4c:d0:b2:3c:91:9e:15:08:c8:d0:
         60:20:5f:68:76:4b:4e:e0:a1:87:5f:3c:fc:46:d9:27:37:3f:
         36:c1:28:5e:71:77:51:af:9d:47:30:cf:fc:bc:48:4f:59:e6:
         df:42:6b:3e:fe:45:69:59:42:80:35:1d:00:71:a3:a6:e1:c2:
         5e:7c:38:ad:cc:ce:29:a9:ac:59:a5:6a:3d:f3:b1:19:fc:ad:
         f1:d5:bf:f2:52:aa:1f:a0:f2:88:3d:f6:13:d0:16:c2:0f:41:
         79:f8:15:79:15:03:aa:7d:3f:bd:ae:b6:e0:35:7a:34:3c:d0:
         3b:fb:63:00:91:7d:49:5a:5a:d6:f1:84:9e:3d:ea:5c:1d:b4:
         46:76:63:09:1f:17:8c:80:54:0e:53:15:9c:34:10:8e:b6:69:
         16:d1:33:9e:2c:8d:e3:57:8e:5a:bf:54:01:62:5c:30:48:01:
         9a:bc:17:2d:92:8e:35:49:00:05:2b:ea:97:3b:fd:c1:90:68:
         0f:d6:f9:4a:af:d8:36:df:3b:b2:1b:67:c4:85:c7:34:f7:58:
         e8:c7:43:ea:45:fb:50:a6:aa:b1:42:51:3d:6b:f7:7a:1e:24:
         ab:9c:73:2d:2c:1c:94:4f:a4:d7:7d:08:5b:7a:2d:bd:c5:c3:
         9f:fe:13:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 23:53:30 2024 by rpki-client on console-fra.rpki-client.org