Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.cer
File:                     F9AA4548FC56DE800F12B58EFA6C206EA63B0585.cer (raw, json)
Hash identifier:          gDNRKRSiUsudgTqnFqDz9cUMaAxO//ieVhH44Ok6sVs=
Subject key identifier:   F9:AA:45:48:FC:56:DE:80:0F:12:B5:8E:FA:6C:20:6E:A6:3B:05:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       144F6483954F4CFBADD7053BAACD357B98E44BCE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Nov 2024 16:15:38 +0000
Certificate not after:    Mon 03 Nov 2025 16:20:38 +0000
Subordinate resources:    AS: 267942
                          IP: 45.166.4.0/22
                          IP: 2804:5590::/32

Validation:               Failed, certificate revoked on Sat 09 Nov 2024 17:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4f:64:83:95:4f:4c:fb:ad:d7:05:3b:aa:cd:35:7b:98:e4:4b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  4 16:15:38 2024 GMT
            Not After : Nov  3 16:20:38 2025 GMT
        Subject: CN=F9AA4548FC56DE800F12B58EFA6C206EA63B0585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:72:01:63:e0:7a:92:08:93:25:a2:cd:45:
                    1f:a9:80:32:f3:86:87:99:eb:20:ba:2b:e8:d1:a9:
                    83:65:8a:40:be:fb:b0:62:e1:1d:b0:12:a2:85:c1:
                    73:8c:ef:8b:23:1b:46:f9:5e:66:ae:43:da:b4:76:
                    79:37:9e:fc:79:14:55:09:a8:e7:eb:cc:31:c5:0f:
                    21:aa:d8:db:78:6e:54:f2:83:fa:01:5e:30:8f:aa:
                    e1:94:98:e2:6f:c7:30:b5:8b:6c:ce:78:86:6d:0a:
                    96:08:ad:7d:63:40:89:90:c0:a1:51:03:8c:ba:ab:
                    76:05:04:90:6d:f4:55:76:28:b5:a9:a3:d9:42:64:
                    0f:7e:30:ef:fd:26:fe:42:1e:ad:86:4e:e8:b1:d6:
                    86:53:eb:9d:93:70:d6:3a:7e:dc:a4:cb:03:bf:13:
                    e6:e8:db:36:f1:9d:96:22:10:d1:61:47:41:30:fd:
                    cc:b8:a6:9f:ca:cb:23:68:ee:55:6b:9e:1f:ae:e4:
                    23:b5:9b:cd:ef:f4:52:39:2c:2e:c5:53:21:65:be:
                    37:99:24:3c:a4:0d:f1:0b:15:76:99:3d:44:66:e1:
                    5e:5e:8a:63:9f:c1:9e:59:fd:da:87:85:4b:11:fb:
                    dd:37:9c:c7:85:94:ca:67:eb:8b:d6:f7:4f:e7:5a:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:AA:45:48:FC:56:DE:80:0F:12:B5:8E:FA:6C:20:6E:A6:3B:05:85
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22
                IPv6:
                  2804:5590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267942

    Signature Algorithm: sha256WithRSAEncryption
         7e:bb:91:ea:9a:6d:9f:32:67:ee:e6:93:95:2a:7c:00:33:12:
         89:4a:4e:7a:66:65:ae:cc:a5:13:f3:33:45:9c:c2:20:54:26:
         d7:7f:da:1a:0d:f0:b1:39:4f:52:01:2a:38:ca:f0:82:65:5a:
         c3:a4:be:58:5a:4f:b1:b0:4e:b8:8c:15:a8:48:c2:de:0d:a1:
         77:31:61:13:17:ca:79:5a:02:4e:0f:6e:24:ce:bf:3b:ef:7b:
         88:b4:df:49:a1:a0:90:5b:32:c9:11:ec:0e:8a:de:29:77:39:
         7d:c6:2f:8f:4f:3d:12:80:5d:1f:1a:c8:42:c7:97:2e:29:d8:
         2b:83:84:af:e5:86:15:5c:4b:28:ab:4e:c8:c2:f9:68:fe:f4:
         63:34:c4:93:4a:aa:a4:16:37:7b:7e:42:65:e4:47:e3:04:f1:
         66:f4:13:df:7b:bf:54:b2:24:6f:82:f6:4f:f6:0e:86:af:c4:
         4a:41:26:7c:63:d5:ad:dd:9e:d8:98:6a:cf:83:00:52:5a:d8:
         f5:9f:ce:50:fd:0a:ef:6a:af:49:61:f8:06:82:7c:81:33:8a:
         7b:6c:02:8e:7b:27:c6:17:fe:47:e3:11:1d:4e:1c:55:b3:3d:
         e5:ab:84:39:2d:39:1e:2e:f8:a4:de:7d:e8:2d:fb:ad:4d:36:
         92:c6:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 19:53:15 2024 by rpki-client on console-ams.rpki-client.org