Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DAD7BD98F3842521AAF9C0BE89E1E137D6F29395.cer
File:                     DAD7BD98F3842521AAF9C0BE89E1E137D6F29395.cer (raw, json)
Hash identifier:          Jw1ZbX/4vmtEde6F4V+iT2oKFmmwb7/GBgTnz16JEqc=
Subject key identifier:   DA:D7:BD:98:F3:84:25:21:AA:F9:C0:BE:89:E1:E1:37:D6:F2:93:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A8F4170EEFAA205D4CFB5AD91E703EA0FE753
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/DAD7BD98F3842521AAF9C0BE89E1E137D6F29395.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2024 16:46:03 +0000
Certificate not after:    Fri 29 Aug 2025 16:51:03 +0000
Subordinate resources:    AS: 267940
                          IP: 45.165.216.0/22
                          IP: 2804:5588::/32

Validation:               Failed, certificate revoked on Sat 07 Sep 2024 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8f:41:70:ee:fa:a2:05:d4:cf:b5:ad:91:e7:03:ea:0f:e7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 30 16:46:03 2024 GMT
            Not After : Aug 29 16:51:03 2025 GMT
        Subject: CN=DAD7BD98F3842521AAF9C0BE89E1E137D6F29395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:03:5e:56:1e:d4:4d:08:c1:ad:7c:ae:a9:
                    97:12:71:bd:85:e1:91:f4:25:0d:99:bf:8c:a6:11:
                    a9:e6:63:15:f1:fa:ad:45:c4:63:b4:f9:00:35:51:
                    f2:d7:ea:17:c6:7f:ca:a2:78:d8:30:a7:08:f7:75:
                    b4:72:e9:d2:37:a4:8c:87:8d:b8:7d:36:95:e8:23:
                    10:97:bb:05:1f:3f:bd:4c:d9:74:d2:44:0c:76:26:
                    08:81:90:1f:99:e8:a3:65:43:33:3e:b8:3a:79:03:
                    66:a8:28:72:30:fa:fe:73:9d:8e:f5:03:2c:3a:e7:
                    4a:36:97:b3:22:32:30:63:b5:63:31:62:84:39:31:
                    61:9c:de:fc:4b:bb:35:11:a3:49:f4:ac:d0:44:72:
                    97:c6:2f:a6:69:b6:f5:97:30:ff:d2:2b:2a:50:7d:
                    7b:9a:08:ff:c6:46:9d:f4:ba:51:59:dc:35:db:fd:
                    31:41:09:d1:75:87:4b:41:7f:a6:16:f1:28:d1:ca:
                    8f:aa:c0:33:42:66:f9:6f:d9:a6:ab:46:e6:32:2b:
                    bc:f4:d8:b7:35:6d:bd:4f:4d:31:19:2b:a7:03:a9:
                    d1:82:ac:98:6e:34:69:b0:a8:cf:12:8a:2c:c2:49:
                    01:07:c2:83:ad:5e:67:b8:cd:bc:c8:ce:16:5d:c8:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:D7:BD:98:F3:84:25:21:AA:F9:C0:BE:89:E1:E1:37:D6:F2:93:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/DAD7BD98F3842521AAF9C0BE89E1E137D6F29395.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.216.0/22
                IPv6:
                  2804:5588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267940

    Signature Algorithm: sha256WithRSAEncryption
         aa:70:77:f3:1e:82:ba:fb:2a:98:e8:89:0f:e9:a9:0d:3d:75:
         ed:e9:37:e8:1f:05:f1:08:fb:cf:a7:f2:37:86:b4:87:7a:cf:
         9c:b0:24:61:8a:4a:48:46:60:5b:dd:d3:a6:e4:55:47:3d:c4:
         cc:ab:59:bd:61:1f:8c:5c:95:21:84:60:10:5d:2f:b1:dd:76:
         8d:88:58:e7:24:67:d6:53:c0:d7:96:20:39:b6:50:36:3e:4d:
         ea:bd:0f:69:01:04:23:da:42:6f:11:f5:a4:e7:c2:1b:9e:ea:
         50:24:86:bc:cd:c7:65:07:f2:22:63:f1:13:f9:c0:97:3e:83:
         48:51:df:4e:ea:16:69:22:56:e1:ba:bd:51:33:b4:6b:44:9a:
         2d:81:3b:88:c4:e1:c4:35:1f:70:2b:0a:6c:f4:98:d6:8c:73:
         54:73:3e:82:73:ed:fd:da:81:78:15:79:3c:db:06:82:70:f8:
         2e:83:60:ab:66:2b:bd:03:22:5e:ff:56:b9:ec:c9:e3:90:32:
         b1:68:81:ab:a1:2d:66:0d:01:d8:03:89:d9:60:ca:d7:e7:46:
         23:d9:07:56:7b:04:db:1b:0c:a5:b7:e3:ff:65:67:c6:cc:02:
         b6:0b:e9:87:a2:e4:94:bc:fa:6a:5a:90:25:7b:6d:6b:c6:ac:
         b2:d2:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 17:07:07 2024 by rpki-client on console-ams.rpki-client.org