Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E105AB76EC1E159F0B8C636B1B58629153C43F24.cer
File:                     E105AB76EC1E159F0B8C636B1B58629153C43F24.cer (raw, json)
Hash identifier:          xJZWArrvn5glygDo1YI9gpfQgkgJzRucqsa53aewH4Y=
Subject key identifier:   E1:05:AB:76:EC:1E:15:9F:0B:8C:63:6B:1B:58:62:91:53:C4:3F:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       108FFF6C7B93E96210119205D83A94E8FF5CCC76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1/E105AB76EC1E159F0B8C636B1B58629153C43F24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:47 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:47 +0000
Subordinate resources:    AS: 28663
                          AS: 53141
                          IP: 177.93.224.0/20
                          IP: 186.194.128.0 -- 186.194.139.255
                          IP: 189.1.32.0/20
                          IP: 2804:3e8::/32
                          IP: 2804:7a9c::/32

Validation:               Failed, certificate revoked on Fri 17 May 2024 13:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8f:ff:6c:7b:93:e9:62:10:11:92:05:d8:3a:94:e8:ff:5c:cc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:47 2024 GMT
            Not After : Apr  2 18:31:47 2025 GMT
        Subject: CN=E105AB76EC1E159F0B8C636B1B58629153C43F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:1a:2b:1f:be:6d:42:c3:1b:b5:23:62:f0:
                    5e:a3:03:aa:1c:f0:e8:e2:0d:19:86:01:de:80:e9:
                    ef:80:5e:a8:70:93:54:57:b4:e6:7c:21:c6:93:18:
                    75:aa:59:85:93:17:94:bb:a5:31:4b:ad:60:f7:a3:
                    e9:32:6c:88:24:a6:86:13:54:f3:f7:08:9d:44:0b:
                    a1:2e:0f:f5:31:94:b8:3b:1d:1e:17:6b:8e:c1:e7:
                    b5:29:3e:0b:cd:ad:92:b7:a4:50:95:9b:4f:19:fd:
                    0e:5d:e3:87:f2:f9:73:1e:7e:f8:03:2b:72:01:8c:
                    cb:4a:3d:25:e9:f2:21:e4:a9:03:10:32:64:f2:88:
                    1d:72:69:81:8e:6c:4f:3f:21:2a:86:96:88:2f:27:
                    c7:d7:e7:89:76:d3:70:fd:0d:30:63:c9:77:39:47:
                    73:8b:be:42:90:b3:41:2f:10:c4:a9:50:e9:a3:56:
                    98:cc:f1:08:a8:a9:7a:23:30:83:59:ae:27:1b:25:
                    63:55:ed:7e:98:8a:54:4d:76:56:9b:33:27:73:55:
                    f5:62:69:05:78:5e:45:74:ec:f6:f1:a4:c7:a6:d7:
                    6e:c1:2a:92:f9:be:97:0a:dd:8f:d1:cf:9d:00:1d:
                    75:1c:9c:0d:ce:68:bd:da:e2:69:e1:50:6a:50:96:
                    d4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:05:AB:76:EC:1E:15:9F:0B:8C:63:6B:1B:58:62:91:53:C4:3F:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1/E105AB76EC1E159F0B8C636B1B58629153C43F24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.224.0/20
                  186.194.128.0-186.194.139.255
                  189.1.32.0/20
                IPv6:
                  2804:3e8::/32
                  2804:7a9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28663
                  53141

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:b9:27:3e:4c:ed:4d:6a:c3:89:a6:53:d7:26:61:3b:95:
         07:0c:c9:70:9e:e8:a2:18:4f:e0:81:0e:8c:99:e7:d9:85:e8:
         66:80:b6:80:70:c3:b7:52:28:0a:7a:57:43:b9:2e:f5:9f:a0:
         d2:23:74:d9:eb:60:31:eb:ca:c6:30:9b:f3:00:98:ca:91:7f:
         89:c4:44:17:92:7a:0c:b6:69:34:1a:90:b2:0c:8f:16:67:6d:
         09:b7:a3:96:26:02:c1:f8:c4:45:28:41:86:18:71:a0:a5:61:
         b5:34:65:e9:20:52:b3:e7:4d:53:da:de:ce:9b:cd:d8:d7:e6:
         84:57:cb:78:83:59:53:1a:3c:6d:bf:84:69:a0:c0:32:c5:7a:
         d5:1c:ce:5c:50:67:97:3f:ba:cb:94:93:72:cd:5b:99:53:ae:
         ed:d9:4f:03:fb:36:12:92:d3:e8:5b:65:dd:f5:de:b5:e8:20:
         0e:7d:85:de:3c:8a:ab:8a:83:29:d7:25:ad:a6:4d:c3:87:9b:
         4b:3c:e2:11:51:bf:10:4f:0c:51:fa:36:73:94:9d:b5:9c:a3:
         74:f2:af:96:26:85:97:91:f0:85:c8:6a:4d:85:a2:ce:e4:a7:
         f3:71:7f:be:a6:18:04:26:18:ce:a4:e5:0b:3d:58:6e:43:65:
         57:67:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org