Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E6D5D57B70A49811028F6673C2911055A7E120D8.cer
File:                     E6D5D57B70A49811028F6673C2911055A7E120D8.cer (raw, json)
Hash identifier:          jcvlst1u/sZSmSdLxKVh95cLwxHHlhrG2rVPETmIdIk=
Subject key identifier:   E6:D5:D5:7B:70:A4:98:11:02:8F:66:73:C2:91:10:55:A7:E1:20:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1960E718904FF0CA24603F9DBF9B537DAADA4C18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/E6D5D57B70A49811028F6673C2911055A7E120D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jun 2024 03:04:27 +0000
Certificate not after:    Tue 03 Jun 2025 03:09:27 +0000
Subordinate resources:    AS: 267077
                          IP: 45.228.104.0/22
                          IP: 2804:47cc::/32

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 19:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:60:e7:18:90:4f:f0:ca:24:60:3f:9d:bf:9b:53:7d:aa:da:4c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 03:04:27 2024 GMT
            Not After : Jun  3 03:09:27 2025 GMT
        Subject: CN=E6D5D57B70A49811028F6673C2911055A7E120D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:b5:0a:ce:36:7b:39:ce:f2:71:c1:ea:f6:
                    01:5c:79:58:91:e6:f6:f4:43:a3:41:1c:5c:ad:76:
                    8b:a5:61:71:ce:3d:48:ab:16:f5:24:c1:95:be:45:
                    25:c6:ad:e1:56:e7:d7:ef:ab:0c:f0:c8:b1:dc:ed:
                    32:eb:40:9d:66:0e:6d:0b:66:4e:69:1c:7e:98:bb:
                    6c:99:7c:32:1c:c0:38:f1:05:73:75:b0:71:19:5d:
                    95:be:9e:55:7b:02:97:a0:b6:60:36:6e:17:c3:ea:
                    25:6e:a0:d1:b9:85:a4:14:a5:e9:59:d5:ea:75:09:
                    78:0a:2c:27:24:94:e3:a7:90:3b:f5:57:65:cd:e7:
                    d2:70:58:ab:5d:ec:53:ec:fa:2a:21:ad:92:63:c1:
                    1b:a3:ea:17:80:8e:f7:a9:eb:1a:0e:1e:ab:75:e9:
                    99:59:e3:e3:b8:98:7f:3a:1f:d6:0c:99:92:ac:2b:
                    db:ba:89:2e:84:f9:1f:94:df:71:0e:91:f5:a7:9f:
                    f3:32:c6:86:c5:e6:a4:22:23:92:20:09:e4:55:83:
                    52:18:71:03:3e:65:9e:17:40:8d:c8:fa:20:5e:c0:
                    30:1a:82:3f:76:89:d9:b1:13:9b:9c:d8:d2:45:d3:
                    82:c2:92:f3:42:9e:f2:fc:d1:1d:70:de:67:c7:f0:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:D5:D5:7B:70:A4:98:11:02:8F:66:73:C2:91:10:55:A7:E1:20:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/E6D5D57B70A49811028F6673C2911055A7E120D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.104.0/22
                IPv6:
                  2804:47cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267077

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:f8:aa:46:c4:36:06:3f:bc:6e:8a:6e:1b:2c:be:6b:7f:
         e4:59:bb:bb:10:89:1e:85:00:d6:73:60:de:33:c6:0e:cb:e2:
         4e:3e:94:82:6d:96:8c:60:58:98:e7:e3:69:c8:a6:71:c9:31:
         20:46:0d:30:08:85:08:e4:74:99:18:7c:f4:24:af:f7:6b:df:
         c7:c0:5e:ae:94:c3:90:c1:6b:18:8e:6f:ad:80:50:0a:af:1f:
         c0:d7:6d:45:c7:ec:b7:99:2f:92:80:9f:ec:aa:0a:ce:21:ea:
         23:1b:4b:3c:10:0b:b4:be:c4:33:f7:fd:79:db:51:cf:a2:32:
         9e:e9:53:f2:3b:f4:bc:40:a3:84:a6:1f:d9:7b:bc:ea:09:55:
         62:fd:9c:0e:3b:c4:34:24:62:cf:6e:01:b4:50:aa:93:d0:bf:
         e6:16:aa:5d:6d:a8:b5:93:9e:03:c0:24:46:d7:f8:77:52:d2:
         ae:9f:f2:f8:b4:c7:33:95:e4:a6:c0:19:27:92:7c:a6:80:a6:
         90:57:e8:53:81:02:57:88:0b:a8:80:2e:7f:70:75:7b:0d:6e:
         0d:f4:c5:ff:51:37:51:e5:b0:e6:06:58:34:3b:99:5a:d1:8c:
         8c:17:80:4c:63:18:3e:79:3e:42:51:de:81:0f:4e:1f:37:59:
         61:3f:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 20:01:20 2024 by rpki-client on console-fra.rpki-client.org