Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F47CFE1B713FCFB30846A675DD6E55170E08B272.cer
File:                     F47CFE1B713FCFB30846A675DD6E55170E08B272.cer (raw, json)
Hash identifier:          i/k/2v9JAnMN6sFUQ1zZoAuq1EevHdOAog9eKRzGO5o=
Subject key identifier:   F4:7C:FE:1B:71:3F:CF:B3:08:46:A6:75:DD:6E:55:17:0E:08:B2:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B634CE8AF1C1E08E5188E82F110D430FB8BBEEF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/F47CFE1B713FCFB30846A675DD6E55170E08B272.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 02:18:52 +0000
Certificate not after:    Fri 04 Apr 2025 02:23:52 +0000
Subordinate resources:    AS: 273459
                          IP: 2804:8ef8::/32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 08:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:63:4c:e8:af:1c:1e:08:e5:18:8e:82:f1:10:d4:30:fb:8b:be:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 02:18:52 2024 GMT
            Not After : Apr  4 02:23:52 2025 GMT
        Subject: CN=F47CFE1B713FCFB30846A675DD6E55170E08B272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:70:04:6a:47:65:fe:21:63:3a:44:8e:a3:
                    02:f0:4b:fd:11:e2:6b:20:49:62:1f:18:ab:27:81:
                    88:23:1c:04:5e:af:48:2c:05:72:a6:21:29:f9:8a:
                    6e:05:8c:6e:86:f8:60:fb:7f:7b:23:a7:ad:96:8e:
                    ba:48:77:59:35:1d:22:b4:59:e2:09:1a:00:38:c2:
                    1d:5b:ab:4f:48:a9:3e:c1:c6:d3:cb:a4:b3:e0:dc:
                    f6:88:60:bc:d9:81:a4:32:a1:78:af:4c:a7:48:20:
                    82:66:19:b9:fb:65:af:7e:b7:5e:df:e8:21:56:a9:
                    8e:30:50:f2:dd:96:63:a7:42:66:75:15:e8:79:92:
                    26:82:b1:f7:4d:f1:1c:9a:a7:d4:6d:f0:90:cb:5d:
                    36:77:85:f3:d9:ea:21:26:ec:9f:16:48:60:c0:5f:
                    17:8e:57:53:5f:2e:f1:8d:11:ca:58:6c:e1:ed:3e:
                    07:0a:aa:22:96:af:34:f3:9e:ad:5e:21:a8:10:b5:
                    31:4e:23:00:e7:4b:41:bf:ca:92:61:7f:dd:15:ac:
                    1d:a7:be:5a:90:bd:1a:ce:1a:ba:ba:43:86:0d:d8:
                    98:dc:79:2f:c4:b2:b6:42:0f:44:08:21:ae:e7:b9:
                    62:41:61:1d:98:fc:27:9f:2b:35:63:6d:46:a7:19:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:7C:FE:1B:71:3F:CF:B3:08:46:A6:75:DD:6E:55:17:0E:08:B2:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/1/F47CFE1B713FCFB30846A675DD6E55170E08B272.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273459

    Signature Algorithm: sha256WithRSAEncryption
         a1:4e:ca:82:01:0d:ab:da:1f:cb:9f:75:dc:b8:02:fe:ea:76:
         5e:c1:3e:7c:aa:27:3c:75:22:33:af:63:59:91:3e:f1:67:de:
         ac:5c:72:0b:44:0c:83:13:41:86:45:52:4d:b4:43:8c:ba:34:
         cb:de:09:c9:a2:77:c6:29:9b:18:8f:d0:15:2e:1b:2a:d8:2c:
         6e:7b:63:12:75:45:33:15:1f:48:dc:df:c1:82:25:82:db:2e:
         27:de:3b:f5:be:59:b0:7d:6f:77:ce:f6:61:9d:49:8c:a1:a1:
         d1:1c:76:9c:b2:4e:ba:41:7e:12:e4:f8:ab:82:f9:a0:00:a1:
         e9:6c:7d:c4:dc:7a:d0:37:8d:3f:58:c2:8c:36:61:f9:47:46:
         f4:c9:ab:39:65:eb:c8:bd:24:a4:18:f5:e6:ea:77:9d:b4:a1:
         5c:76:56:4d:45:44:7d:85:5a:9a:b6:4f:31:b2:89:2b:42:a1:
         d9:7e:9f:e2:b7:48:27:5d:38:97:45:25:ca:f6:51:12:84:79:
         40:ff:6b:e4:b1:b7:4d:c9:ae:d9:a8:31:e5:75:04:d5:c7:2d:
         bb:75:f5:ce:02:4a:da:d9:24:c6:38:8a:b9:79:08:bf:96:a9:
         36:73:42:08:39:b5:50:78:a2:fe:26:9e:51:fd:2a:f7:9b:f5:
         35:4e:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org