Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E7044B9875B76D032FA76B6E624B341154EEF644.cer
File:                     E7044B9875B76D032FA76B6E624B341154EEF644.cer (raw, json)
Hash identifier:          tP5nEfN5eAdm88dNQscUdl2QgKf588lAhFCjKVc9RR0=
Subject key identifier:   E7:04:4B:98:75:B7:6D:03:2F:A7:6B:6E:62:4B:34:11:54:EE:F6:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25BAA58339843481E6A7B5EC03866767E24172A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/eaQ9LudPVFSuwhrfQ1tbtx8Qn9h518JEHCEUqVuuhjV/1/E7044B9875B76D032FA76B6E624B341154EEF644.mft
caRepository:             rsync://rpki-repo.registro.br/repo/eaQ9LudPVFSuwhrfQ1tbtx8Qn9h518JEHCEUqVuuhjV/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:09:27 +0000
Certificate not after:    Thu 03 Apr 2025 12:14:27 +0000
Subordinate resources:    AS: 267026
                          IP: 45.226.236.0/22
                          IP: 2804:4704::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 06:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ba:a5:83:39:84:34:81:e6:a7:b5:ec:03:86:67:67:e2:41:72:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:09:27 2024 GMT
            Not After : Apr  3 12:14:27 2025 GMT
        Subject: CN=E7044B9875B76D032FA76B6E624B341154EEF644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:d4:2e:10:3b:56:64:c0:06:1e:d9:86:31:
                    a2:9b:e6:f2:72:d4:77:c9:19:29:84:47:5d:c2:93:
                    c8:62:81:cc:83:a1:de:e8:01:cb:5f:fb:1d:72:8f:
                    65:f6:2f:10:27:ce:2d:07:86:b7:74:f8:88:b3:16:
                    ff:3e:d0:03:51:b9:7d:f9:4a:e2:62:bc:4d:bd:2f:
                    c9:24:96:16:a9:8f:e5:2c:65:fb:a9:67:4c:02:05:
                    9a:9f:c6:4c:23:4a:fe:9e:7d:ce:ba:90:63:8d:45:
                    5a:a1:04:4e:c6:7f:c7:1e:57:33:1d:ea:2c:0d:df:
                    9b:f6:78:3f:e1:1b:b3:68:22:27:18:a6:c8:b6:fc:
                    57:6c:5f:1d:20:c4:70:df:89:ba:81:6a:aa:53:08:
                    38:9f:cc:a0:69:41:32:13:0e:a3:d9:ff:17:68:14:
                    13:94:21:d4:13:dd:b8:1c:3e:df:99:51:f7:8f:fc:
                    80:94:8a:d7:2d:32:95:95:af:29:ca:97:a8:48:ac:
                    3d:c1:7f:82:b8:14:78:c5:91:92:f4:47:25:fe:48:
                    f7:14:b3:ec:66:7d:ee:45:05:64:5d:b3:bc:42:27:
                    24:c9:3d:57:c2:91:3c:00:e4:4b:92:38:65:cd:fd:
                    ba:14:f0:18:3c:1b:0c:65:a3:60:24:87:1f:bb:2d:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:04:4B:98:75:B7:6D:03:2F:A7:6B:6E:62:4B:34:11:54:EE:F6:44
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/eaQ9LudPVFSuwhrfQ1tbtx8Qn9h518JEHCEUqVuuhjV/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/eaQ9LudPVFSuwhrfQ1tbtx8Qn9h518JEHCEUqVuuhjV/1/E7044B9875B76D032FA76B6E624B341154EEF644.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.236.0/22
                IPv6:
                  2804:4704::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267026

    Signature Algorithm: sha256WithRSAEncryption
         26:f7:db:d5:71:02:de:49:6f:2d:52:c7:13:e9:d3:d7:c7:21:
         ee:d9:c6:09:03:aa:5d:1a:af:a3:bf:b0:ca:c9:e1:1a:9b:f3:
         70:f2:c6:03:df:c9:1c:e9:69:3f:c8:df:41:59:72:b3:0e:f9:
         4d:0c:ac:fa:84:99:59:b6:b3:7a:30:97:80:09:b3:2a:a2:a9:
         32:45:fe:40:d4:4a:5d:1f:fa:97:7c:ad:be:6c:7a:e2:73:7d:
         62:09:47:34:fa:66:32:61:c2:7f:98:2c:c0:c6:ed:da:bb:5d:
         95:fd:4f:b7:9b:10:57:92:92:39:e4:34:36:d2:83:46:4a:42:
         09:d2:a3:68:5d:56:7d:33:5d:7c:e8:8d:62:a4:20:dd:3c:75:
         68:c9:89:ed:32:b1:32:13:1a:a4:55:d9:92:e3:99:62:5b:41:
         62:da:a7:a0:2c:54:dc:79:78:46:7c:21:c9:4a:f8:36:09:1a:
         57:b4:f7:72:e9:b4:47:78:f2:2c:06:95:6f:5c:c8:c6:cf:73:
         26:47:d8:df:8a:a0:b0:9a:f2:6c:91:75:99:8e:0b:5a:30:6d:
         a3:89:38:a2:83:b0:57:70:5d:f9:be:bc:17:a3:61:51:c8:9b:
         11:2d:cc:63:07:3c:d0:67:03:de:50:28:ae:f0:39:22:38:5a:
         23:9f:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org