Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
File:                     F7646425053708CC938EC4540ECBBF44B2849544.cer (raw, json)
Hash identifier:          LnRZa5DusiFa+7OrrMHdHt1Y2XNYT6PoTlV/Yg0h8i8=
Subject key identifier:   F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       766856343C332CCE3B58D1E87520EB589692BBC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 01:55:35 +0000
Certificate not after:    Fri 04 Apr 2025 02:00:35 +0000
Subordinate resources:    AS: 267420
                          IP: 45.235.160.0/22
                          IP: 170.231.208.0/22
                          IP: 186.209.123.0/24
                          IP: 186.209.222.0/23
                          IP: 2804:4d3c::/32

Validation:               Failed, certificate revoked on Sat 22 Jun 2024 20:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:68:56:34:3c:33:2c:ce:3b:58:d1:e8:75:20:eb:58:96:92:bb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 01:55:35 2024 GMT
            Not After : Apr  4 02:00:35 2025 GMT
        Subject: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:78:06:bb:ac:ad:c4:c2:01:64:4d:c8:7f:
                    de:fc:59:7a:6f:17:1c:72:54:00:23:7e:a9:79:3e:
                    25:c8:b8:1e:19:6a:ba:b9:69:e4:70:d1:5e:93:7e:
                    b1:c5:9d:9d:d4:15:2f:ce:d6:aa:74:a5:bf:2e:d3:
                    10:dd:19:e5:7b:ac:b1:9e:ee:1d:96:8c:c1:44:ae:
                    c1:40:5c:81:e1:29:1a:2c:a5:ed:a1:64:19:c5:60:
                    c3:97:8b:14:af:8f:91:db:e9:6b:07:34:2f:16:b0:
                    71:9f:f9:64:38:83:86:7d:ae:dc:e8:7c:a0:d5:fa:
                    4b:43:2a:c5:55:99:11:e8:aa:71:81:bb:24:6e:15:
                    b7:7c:32:f2:d0:16:a1:ba:68:d8:65:49:3e:e6:a2:
                    6b:60:eb:3e:a4:7b:d3:31:95:2a:bf:77:e8:1e:96:
                    a3:d0:31:80:29:c2:38:60:5d:6c:98:f4:d1:15:60:
                    cd:5e:56:d1:37:27:7b:5e:a2:b8:77:06:9a:3d:84:
                    d7:2a:98:4d:8b:7b:4e:e4:63:5e:63:79:cc:e0:41:
                    78:ed:e4:02:94:8a:f2:23:a9:08:85:03:ae:eb:39:
                    8f:98:04:9c:0e:2a:8e:85:1f:6a:f0:e3:ce:56:f9:
                    92:4e:0d:a6:4a:44:7f:47:55:a7:3b:25:b1:2c:3c:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/22
                  170.231.208.0/22
                  186.209.123.0/24
                  186.209.222.0/23
                IPv6:
                  2804:4d3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267420

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:0a:3f:f2:c7:77:02:1b:d7:56:8b:24:ed:36:02:2f:74:
         50:14:43:db:bd:71:83:78:83:8d:f6:09:a9:aa:dd:15:ae:ab:
         5f:46:fa:8e:22:00:27:d6:dc:86:03:49:33:15:e9:2a:f9:ce:
         dc:3d:c0:0f:9c:31:53:eb:a6:87:5b:99:82:c2:eb:b5:99:c2:
         82:4f:36:b0:82:8a:20:86:60:13:c4:9c:e7:12:1e:04:e3:e6:
         79:e4:21:47:87:40:24:b1:0b:db:a9:09:1e:f0:d8:d3:fd:c6:
         fe:09:5b:15:0f:c8:90:83:86:c9:38:56:1d:c1:4d:87:f9:09:
         00:09:88:69:12:f6:d7:85:ff:21:b6:9b:bb:04:26:70:40:79:
         5a:48:77:51:bd:da:67:19:69:e7:91:d1:bd:27:84:ee:f8:c0:
         84:2f:a6:84:90:79:e7:c4:b5:63:6f:5b:ce:a5:ec:2a:7f:d2:
         20:17:49:b4:b2:bf:a1:91:52:83:72:25:76:c3:1e:20:72:1d:
         26:36:57:42:8c:18:35:f7:10:d8:12:cb:03:ba:72:eb:1a:28:
         49:4c:94:0c:62:61:07:0d:f7:07:b0:f3:0a:59:e3:f0:23:58:
         72:47:b7:45:7f:1f:a9:91:61:8e:7d:26:0c:4b:7a:3b:12:f9:
         34:d3:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 21:52:32 2024 by rpki-client on console-fra.rpki-client.org