Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0089C30D12C7DD48591F99326EC546CBBA3BB55.cer
File:                     F0089C30D12C7DD48591F99326EC546CBBA3BB55.cer (raw, json)
Hash identifier:          deIy6yrH99CWvTUmIIl6iKz3fbinFg4fC1w6NDh13DU=
Subject key identifier:   F0:08:9C:30:D1:2C:7D:D4:85:91:F9:93:26:EC:54:6C:BB:A3:BB:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       64E8AE948010547ACA298561B969FAD375D29070
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/F0089C30D12C7DD48591F99326EC546CBBA3BB55.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 May 2024 22:51:04 +0000
Certificate not after:    Fri 30 May 2025 22:56:04 +0000
Subordinate resources:    AS: 266931
                          IP: 45.5.32.0/22
                          IP: 45.225.84.0/22
                          IP: 2804:4580::/32

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 04:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e8:ae:94:80:10:54:7a:ca:29:85:61:b9:69:fa:d3:75:d2:90:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 31 22:51:04 2024 GMT
            Not After : May 30 22:56:04 2025 GMT
        Subject: CN=F0089C30D12C7DD48591F99326EC546CBBA3BB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:33:41:2a:cc:7f:9b:21:b1:32:74:a2:7d:
                    a2:52:4b:54:63:ab:fe:ec:2d:18:77:4d:db:e2:41:
                    83:0b:24:ca:11:0e:68:3e:25:f5:2d:10:d3:e2:7e:
                    c4:e3:87:dc:cb:cb:c3:84:d0:85:15:10:26:9b:55:
                    56:dd:11:0e:60:87:66:d7:9d:8f:21:9c:da:87:ab:
                    5f:c1:e3:6a:94:05:4d:37:3e:bb:2c:d5:18:0a:9a:
                    2d:bb:5d:8b:a2:a8:d3:e4:7a:65:5e:3a:2a:92:07:
                    7b:80:18:73:f9:e4:ea:da:1f:41:5e:b8:cf:7d:9e:
                    dc:db:3f:96:b2:5e:23:ab:f3:de:2c:2d:dc:68:90:
                    b3:75:3c:4b:4e:fb:ff:3d:19:70:ef:71:85:19:d9:
                    7a:f8:91:95:2e:c4:7f:48:aa:f3:f1:3d:c9:c5:55:
                    99:b8:56:23:7c:a3:66:0a:01:64:6d:18:b9:c6:cc:
                    95:05:61:11:0c:89:0c:8b:c4:c5:cf:54:ca:fe:7d:
                    7d:be:3b:e9:c8:57:88:8b:9e:8f:5f:dc:fd:d5:06:
                    75:8b:3e:75:d7:95:53:e8:c4:b0:58:40:d5:bc:57:
                    1d:09:62:95:c9:2d:a5:63:18:6d:dd:b9:c9:36:11:
                    52:e7:21:2a:9a:58:e1:0a:c1:90:2f:4b:76:a6:e9:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:08:9C:30:D1:2C:7D:D4:85:91:F9:93:26:EC:54:6C:BB:A3:BB:55
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/F0089C30D12C7DD48591F99326EC546CBBA3BB55.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.32.0/22
                  45.225.84.0/22
                IPv6:
                  2804:4580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266931

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:37:02:d4:9e:38:14:d1:1a:8d:94:95:66:35:3f:0e:5c:
         bc:17:67:83:3a:37:2c:31:3f:17:bb:48:d4:4f:20:f2:55:5a:
         aa:a5:ab:f0:35:bd:8d:01:72:a9:05:63:78:42:a4:7f:70:ba:
         d1:ab:4b:d0:65:de:08:ba:e7:6e:33:1f:dd:d9:b4:0d:e5:79:
         d3:1f:3d:b5:64:d1:b2:17:74:56:01:e6:2f:8b:21:71:4f:0a:
         27:21:af:b7:4b:b3:91:7d:73:23:55:08:85:fd:90:a0:56:5a:
         42:40:8b:37:9c:be:a4:7d:0e:22:bc:6e:30:75:25:99:59:03:
         9f:42:d8:3b:6b:ca:4c:d5:cb:66:17:f3:b6:3b:69:20:07:02:
         15:f7:02:e5:84:9e:56:df:d7:28:65:0b:83:d4:a5:ed:ec:66:
         b0:e0:15:1d:73:2a:57:c8:e5:be:90:6a:30:8c:67:6c:2a:20:
         9e:55:b7:83:1a:24:fc:b7:0e:8d:58:de:f0:35:8d:b1:95:03:
         06:ba:ec:7e:41:78:13:5a:6e:c8:ff:28:0a:15:83:37:68:fb:
         3e:b6:50:ec:c3:0a:92:b5:da:60:2b:71:0c:d8:30:0d:9a:18:
         20:62:30:bd:d4:78:3b:94:41:d7:0e:28:d4:35:b4:f4:fe:e9:
         6b:ff:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 06:29:31 2024 by rpki-client on console-fra.rpki-client.org