Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EC5487BA16F4FC2CD331EE6A58DF5EC863F2ED68.cer
File:                     EC5487BA16F4FC2CD331EE6A58DF5EC863F2ED68.cer (raw, json)
Hash identifier:          AZVgYmjmL2AeAzpDrlOGjgwMu80IXLPVZCN1+VL0a+0=
Subject key identifier:   EC:54:87:BA:16:F4:FC:2C:D3:31:EE:6A:58:DF:5E:C8:63:F2:ED:68
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       460A0F193816E76D29CBE41E23435917E6C4C418
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/EC5487BA16F4FC2CD331EE6A58DF5EC863F2ED68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Aug 2024 01:01:59 +0000
Certificate not after:    Fri 08 Aug 2025 01:06:59 +0000
Subordinate resources:    AS: 53180
                          IP: 186.226.160.0/20
                          IP: 2804:2ab8::/32

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 09:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0a:0f:19:38:16:e7:6d:29:cb:e4:1e:23:43:59:17:e6:c4:c4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  9 01:01:59 2024 GMT
            Not After : Aug  8 01:06:59 2025 GMT
        Subject: CN=EC5487BA16F4FC2CD331EE6A58DF5EC863F2ED68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:b8:7e:fc:2b:30:c2:db:fc:a4:02:b1:8b:
                    f9:7e:8c:b4:b2:4a:c2:be:07:d0:26:fb:00:63:fc:
                    a0:92:dd:c0:a1:68:ff:df:d2:37:f6:79:76:21:20:
                    73:79:df:79:04:2b:f8:d6:60:22:2f:4a:2e:c2:e9:
                    e1:2a:f3:9b:17:94:69:eb:2d:a7:66:b2:7f:76:b4:
                    f8:ff:08:5c:1c:4d:cd:aa:13:c9:62:f9:d7:d0:27:
                    5f:9f:5f:a8:16:d1:8a:9f:f4:c5:65:c9:17:6d:b4:
                    2b:71:9e:38:2e:bf:41:e3:a9:91:b7:1f:4b:cb:cf:
                    70:20:88:af:1e:29:08:85:99:49:40:29:be:13:50:
                    1f:dd:c0:bb:59:ca:a9:26:0c:91:cc:19:53:2a:69:
                    81:b2:04:4c:58:64:d3:49:e3:9f:d4:5c:32:68:17:
                    73:64:a0:24:bf:09:fa:e6:32:1f:9d:be:4e:98:b9:
                    2e:2c:ef:a7:08:2a:49:2e:b5:41:8c:0f:af:46:b7:
                    63:5b:53:d9:a4:7f:03:55:e1:e8:f2:1f:0f:e3:d9:
                    62:38:63:a9:9e:f0:f0:ad:a5:c6:e0:53:45:97:15:
                    21:01:d1:f0:5a:88:be:40:f2:96:7e:07:30:0c:2d:
                    22:dd:71:e6:b8:bc:76:b6:1b:c8:59:73:28:02:88:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:54:87:BA:16:F4:FC:2C:D3:31:EE:6A:58:DF:5E:C8:63:F2:ED:68
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/EC5487BA16F4FC2CD331EE6A58DF5EC863F2ED68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.160.0/20
                IPv6:
                  2804:2ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53180

    Signature Algorithm: sha256WithRSAEncryption
         49:06:90:00:b2:7f:8e:58:db:59:09:76:80:30:88:d9:65:ed:
         c0:99:25:e4:6a:1e:c7:49:04:05:7f:97:54:54:dc:85:b8:3e:
         2c:15:2f:77:cb:d5:58:6f:5e:67:57:5f:26:84:4a:fb:0c:84:
         b4:18:63:18:cd:eb:70:47:06:9c:c7:6e:c0:89:d2:2a:29:f4:
         23:1f:14:21:9d:be:f1:d6:42:78:fb:cc:56:3e:da:4f:0f:d4:
         9b:c8:67:3b:f4:75:d5:b3:c5:15:b0:de:60:40:27:a5:16:2a:
         54:bb:b6:5a:dc:86:85:63:3e:6b:d5:28:74:7e:37:1b:43:a8:
         fe:8f:fe:cc:8a:be:e4:c1:2a:98:58:82:9a:e0:ec:7e:69:e0:
         ab:98:e8:42:85:16:6d:dc:30:41:df:d3:d8:32:7b:19:af:15:
         b3:a8:21:59:72:58:20:32:08:c0:67:93:f7:71:55:ef:a8:c7:
         e5:6c:1f:56:85:0b:73:18:78:5a:09:51:45:e7:30:4f:07:0d:
         36:26:9f:fd:6f:57:3a:23:6d:9d:67:af:2a:2b:53:b2:36:be:
         64:b0:78:ba:aa:a0:98:97:cf:2c:79:ff:53:d3:05:a7:42:bb:
         c6:eb:a3:a0:2c:af:e7:90:9a:d6:eb:04:2c:d0:12:6e:7c:db:
         d1:ba:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 11:47:00 2024 by rpki-client on console-fra.rpki-client.org