Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.cer
File:                     EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.cer (raw, json)
Hash identifier:          3EQD3i7LywlNTIpti2Zoqua1UEXM+VILZfs9KKSKAGk=
Subject key identifier:   EE:FF:3C:E5:B7:02:9F:1C:2C:06:B0:BA:1A:B6:0A:3E:BE:8A:9E:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11DE7B699657D158F9BB3998876941A1AF9833BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jul 2024 21:13:25 +0000
Certificate not after:    Wed 09 Jul 2025 21:18:25 +0000
Subordinate resources:    AS: 273527
                          IP: 2804:9000::/32

Validation:               Failed, certificate revoked on Sat 27 Jul 2024 20:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:de:7b:69:96:57:d1:58:f9:bb:39:98:87:69:41:a1:af:98:33:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 10 21:13:25 2024 GMT
            Not After : Jul  9 21:18:25 2025 GMT
        Subject: CN=EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:8f:59:97:88:90:fb:85:b1:3b:e4:86:80:
                    54:12:a5:45:f2:99:70:66:df:c4:df:d4:b3:ee:c7:
                    1e:68:60:ea:de:71:53:bc:41:c5:65:25:18:ee:8e:
                    66:15:ae:46:06:ec:59:9c:91:dd:82:43:8d:c5:21:
                    60:5c:a1:c9:77:3c:69:a7:74:83:df:81:9e:3c:9f:
                    ed:bd:ef:f6:e4:4f:15:7c:c2:e0:34:ba:22:b8:af:
                    3d:81:2a:90:fb:69:9e:b9:55:e7:37:9b:67:40:1f:
                    23:f1:53:5f:44:fc:4b:17:20:3c:f5:ff:ed:22:84:
                    89:6e:d8:41:9b:db:ee:c1:32:4d:b4:c5:6e:df:8f:
                    19:06:61:d4:d0:18:40:0b:b2:97:cc:82:41:65:64:
                    5a:1f:34:0e:a1:45:4f:bd:c6:5d:33:58:ca:54:0c:
                    d2:ca:12:b7:c4:d9:f4:92:26:21:ac:fe:32:b4:02:
                    df:c2:b2:7d:a7:d7:84:30:8b:49:59:46:12:6d:e9:
                    b3:e0:0b:7f:c4:1c:66:f0:e8:ac:1f:70:6b:00:15:
                    44:e5:2c:2a:f5:5a:23:a2:9d:ad:3f:4a:45:88:b9:
                    1b:c1:7c:a9:29:0f:7d:99:99:ab:8f:4b:0f:13:f4:
                    a7:c1:38:9c:8b:33:1c:f7:fd:a6:4e:2c:7d:73:1b:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:FF:3C:E5:B7:02:9F:1C:2C:06:B0:BA:1A:B6:0A:3E:BE:8A:9E:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273527

    Signature Algorithm: sha256WithRSAEncryption
         96:ac:d9:fe:1c:2b:03:74:f0:e0:e0:2c:2a:dd:13:d1:e9:95:
         1b:4f:66:3c:0d:76:89:e4:51:78:d6:48:5f:5f:46:4f:9d:a2:
         b3:23:46:e4:2c:c3:31:bd:cf:01:bc:46:0d:11:92:09:d6:ac:
         b3:a0:48:df:3e:17:08:1d:9c:4f:f0:be:92:86:7a:ae:29:de:
         18:27:af:cf:d6:05:1a:a8:54:69:fe:56:3d:c1:0b:75:02:63:
         ae:28:7d:6d:57:e8:56:dd:4a:bc:ea:62:3b:2b:88:ac:35:cd:
         70:d6:a5:d8:23:86:aa:bd:00:af:34:87:67:95:32:92:c6:b4:
         b0:b7:f5:2c:70:0f:2f:93:85:34:74:1e:5c:c2:f6:a4:72:a7:
         1f:d2:f8:e7:fe:ea:85:99:d7:57:f2:20:e0:ef:0d:ba:45:8f:
         6f:07:cf:44:ee:ca:65:9d:62:7f:82:e8:2a:be:5f:53:7c:b3:
         6c:99:20:9d:e4:cf:ed:cd:13:ef:e1:09:e2:87:ee:5d:74:85:
         a4:f3:41:07:3f:40:64:8d:66:f4:3a:c8:fe:dd:8e:14:97:dc:
         4a:fb:96:7b:74:96:27:ba:9e:74:3d:8e:06:3f:33:8c:68:ae:
         05:30:f5:31:69:cd:6c:90:40:c0:72:98:ac:cd:56:ac:c4:a5:
         dd:98:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 23:10:34 2024 by rpki-client on console-ams.rpki-client.org