Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E74C301D4721AF22B7BD2C47ADA795640499007A.cer
File:                     E74C301D4721AF22B7BD2C47ADA795640499007A.cer (raw, json)
Hash identifier:          kYNwkFMwRuGG2S7247VN6+ZGeDPb6ihl6IRU1+GdVVE=
Subject key identifier:   E7:4C:30:1D:47:21:AF:22:B7:BD:2C:47:AD:A7:95:64:04:99:00:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       295429B8DB09FD78078D8E2C3FA7E7A61BBA13C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/1/E74C301D4721AF22B7BD2C47ADA795640499007A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:37:25 +0000
Certificate not after:    Wed 02 Apr 2025 23:42:25 +0000
Subordinate resources:    AS: 53180
                          IP: 186.226.160.0/20
                          IP: 2804:2ab8::/32

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 14:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:54:29:b8:db:09:fd:78:07:8d:8e:2c:3f:a7:e7:a6:1b:ba:13:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:37:25 2024 GMT
            Not After : Apr  2 23:42:25 2025 GMT
        Subject: CN=E74C301D4721AF22B7BD2C47ADA795640499007A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8a:23:05:d7:20:2a:a1:13:73:43:29:f1:a3:
                    b5:b0:2a:85:0d:1b:ef:70:c9:e3:be:dc:14:03:fc:
                    f7:69:92:1e:a7:f9:e6:1c:87:c1:7d:f2:48:c9:99:
                    32:ae:64:ac:80:05:0e:49:c9:ca:0c:e6:bf:44:fb:
                    6b:bd:f9:66:0d:be:95:c9:55:9f:5f:65:35:5f:6b:
                    37:98:b0:e7:11:1c:4f:22:e4:09:e3:34:46:4e:aa:
                    1c:e7:1c:65:5c:56:03:87:46:58:73:93:b9:f0:30:
                    6a:e5:91:18:1f:8c:d7:7d:af:7e:c3:de:e2:d6:35:
                    f8:9b:1f:04:37:a6:83:c7:2d:35:43:6d:a6:22:dc:
                    ce:ae:c3:3d:9b:ce:32:5c:51:b2:90:55:fc:b2:a1:
                    11:6c:98:2a:30:07:ab:d0:43:d9:9c:d7:e6:2b:72:
                    00:51:b1:44:9a:a4:32:31:ec:f7:ad:34:55:89:8f:
                    56:30:d1:a2:c0:a0:34:99:9f:c8:4c:84:bc:b3:5a:
                    97:b9:8a:7f:75:de:fb:2e:1c:56:fb:df:66:ea:f7:
                    ca:81:d2:14:e9:f1:b1:80:41:f6:48:24:bc:dc:4d:
                    c3:b6:15:db:24:19:57:3c:9d:8c:b7:45:b8:38:c3:
                    99:ed:a5:6f:c4:24:51:95:c8:39:ea:70:9b:59:bf:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:4C:30:1D:47:21:AF:22:B7:BD:2C:47:AD:A7:95:64:04:99:00:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/1/E74C301D4721AF22B7BD2C47ADA795640499007A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.160.0/20
                IPv6:
                  2804:2ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53180

    Signature Algorithm: sha256WithRSAEncryption
         91:a9:a1:93:0d:86:5c:1e:86:30:d7:c3:9d:fc:86:ba:da:e4:
         fe:4c:0b:0f:fd:b3:c5:d7:2b:88:95:7d:17:29:bb:8f:be:83:
         25:ea:11:18:50:58:c6:f0:c6:a2:c2:2b:7d:58:5a:e2:a0:a0:
         f5:6a:9b:de:65:cd:8c:c4:fb:45:0a:1b:2b:c1:17:14:73:55:
         39:2b:22:0e:7f:70:3e:8a:ce:ec:75:26:44:71:87:91:dc:8a:
         95:2e:79:13:2a:d3:c4:9d:e1:23:cc:4c:9b:ad:c8:53:1c:21:
         17:d7:30:ee:59:43:f1:8e:c0:e5:4b:d0:f4:ea:6f:93:82:3c:
         c1:09:46:35:dc:3e:e3:ca:14:67:34:f2:b8:4a:ad:8b:0f:b5:
         26:dd:3e:f8:83:4e:13:b2:61:50:dc:73:78:52:39:6f:97:8e:
         d4:66:39:c7:15:f6:d5:a1:11:ce:30:7e:b7:0d:ca:0d:93:9f:
         de:c9:ef:4d:89:42:56:20:99:42:2c:64:8c:69:27:9e:da:78:
         fe:6d:3d:1c:91:59:a1:46:e2:4c:2c:e9:b5:42:d4:02:4e:ad:
         d0:d2:d2:10:55:9c:40:c9:4d:30:a3:f3:95:c1:4f:1f:90:a5:
         59:6d:9a:66:94:64:96:3f:fe:5f:7b:2e:14:7d:38:da:f7:6a:
         39:60:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 16:24:18 2024 by rpki-client on console-fra.rpki-client.org