Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer
File:                     F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer (raw, json)
Hash identifier:          Gie4FJLhBppC/7XwHqvTzPn3vqMoZP95ub9peFHN35Y=
Subject key identifier:   F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1B5F0E782E43C9E9319CB06D971D1450FF5CE805
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:07 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:07 +0000
Subordinate resources:    AS: 61813
                          IP: 138.122.196.0/22
                          IP: 201.159.156.0/22
                          IP: 2804:19b4::/32

Validation:               Failed, certificate revoked on Fri 17 May 2024 14:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5f:0e:78:2e:43:c9:e9:31:9c:b0:6d:97:1d:14:50:ff:5c:e8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject: CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:23:00:e3:a5:c2:10:7d:fa:8b:f9:63:e2:
                    ed:5a:66:ee:66:21:4f:af:ee:19:46:c4:3f:80:31:
                    0d:ad:af:28:2c:88:91:21:59:39:ee:c7:8c:aa:88:
                    37:b5:43:a4:e3:12:da:25:73:eb:b5:67:fb:cd:b2:
                    11:6f:c6:f9:d0:25:ad:9b:06:e5:fc:77:c4:ef:2a:
                    04:74:5e:8e:32:9f:ad:b4:49:ae:81:35:f2:ef:39:
                    75:94:4e:03:81:6e:a0:52:00:c3:cb:e1:9b:e0:a7:
                    60:98:bc:8b:5c:bb:01:51:14:5e:a7:81:f9:0e:9b:
                    bb:ca:67:d2:cc:09:e2:d1:78:5d:58:8f:d7:68:21:
                    86:c4:9f:bf:7d:10:21:d5:0e:6f:13:ca:da:7c:4a:
                    1a:56:17:3a:df:89:53:d8:4a:ba:db:87:6a:23:79:
                    b5:d6:d7:13:ed:b5:d5:7f:fb:6e:84:6c:40:e2:82:
                    b8:17:a2:87:8d:de:d0:f6:48:88:3a:d3:e5:92:90:
                    84:49:25:4c:96:ef:1c:c8:7d:33:96:14:47:1b:cd:
                    9d:fe:fc:ce:c5:94:ff:ac:ac:71:79:0b:c2:86:58:
                    db:04:86:af:4e:9f:a0:c3:dc:6b:36:82:c9:63:2c:
                    a8:88:e6:dc:b0:a8:42:10:12:ae:6f:49:ec:e0:1f:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.196.0/22
                  201.159.156.0/22
                IPv6:
                  2804:19b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61813

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:1f:8c:e3:6b:c7:5d:4d:14:69:90:86:7a:3e:d5:a8:cb:
         d7:d6:8d:9e:70:fc:9f:b1:89:08:b1:5a:f0:12:5b:5c:d0:26:
         eb:ac:a1:6a:6c:a6:6a:88:c2:ab:92:29:fc:0e:dd:64:33:b4:
         f7:73:2f:3a:50:8a:0e:0f:0e:54:c3:82:fe:5c:72:9f:05:b6:
         39:82:d6:24:cb:6e:0b:37:0e:07:0e:80:f3:72:1d:5e:45:e8:
         00:76:7d:64:5c:5a:e5:cf:86:0e:98:be:61:c5:f7:6e:04:08:
         a6:58:07:47:f8:b1:a5:c0:4b:1b:8d:9e:6b:53:35:7c:03:b9:
         5d:f8:00:eb:3a:c4:2a:1f:6f:6c:9f:0e:d0:a9:40:85:1b:c3:
         fe:ba:88:d3:ba:a1:ad:77:20:b2:89:f2:73:ab:7c:23:e4:08:
         f2:d7:9f:7a:7d:59:2a:d7:27:c1:78:70:a8:c1:7d:b6:dc:15:
         cf:c3:e2:a3:90:3f:63:66:3d:b4:3c:9c:e5:09:98:97:df:02:
         55:c0:34:d3:14:80:09:41:93:f6:a3:c8:fd:e3:5e:9b:89:8f:
         1e:85:a5:8e:89:df:5e:a9:b8:f8:56:70:0c:c7:fb:d1:ca:00:
         ed:c5:20:68:75:de:60:55:cf:6a:a2:d6:fd:3c:f2:8f:9a:a7:
         4b:49:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org