Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA0108DD07DD39D8C1167D27C0357FCA73B61C0A.cer
File:                     FA0108DD07DD39D8C1167D27C0357FCA73B61C0A.cer (raw, json)
Hash identifier:          z0RZn3FdAX3iOMt/J76Idg5sHyxXdAvlMGtFMKLbK3I=
Subject key identifier:   FA:01:08:DD:07:DD:39:D8:C1:16:7D:27:C0:35:7F:CA:73:B6:1C:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D6B8BB37F5E718D1F8C945102F9FCF34F198F0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/1/FA0108DD07DD39D8C1167D27C0357FCA73B61C0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:51:01 +0000
Certificate not after:    Thu 03 Apr 2025 00:56:01 +0000
Subordinate resources:    AS: 269479
                          IP: 45.187.136.0/22
                          IP: 2804:6544::/32

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 00:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6b:8b:b3:7f:5e:71:8d:1f:8c:94:51:02:f9:fc:f3:4f:19:8f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:51:01 2024 GMT
            Not After : Apr  3 00:56:01 2025 GMT
        Subject: CN=FA0108DD07DD39D8C1167D27C0357FCA73B61C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:0f:4d:f0:0e:ae:92:5f:41:c6:09:f3:f2:
                    68:41:ad:8b:c5:b6:4d:2f:75:a2:df:65:2e:47:cc:
                    1c:2f:3e:0f:b3:ac:49:a9:74:8e:d2:dc:df:6e:6a:
                    ce:94:6b:08:99:74:ae:3a:36:7c:79:01:38:ac:55:
                    f4:bf:a9:8d:d2:1f:07:50:eb:23:96:1f:cf:fe:5a:
                    27:d0:ef:da:05:4d:d0:68:cc:56:c4:c7:c8:d6:36:
                    56:a7:86:4a:76:04:68:e0:29:92:82:f6:db:7f:d7:
                    75:0e:f0:74:91:4e:a8:ac:c1:b5:bd:45:ac:c0:33:
                    f8:e8:60:df:aa:ea:bd:ba:ae:59:7b:9a:05:5d:ee:
                    45:61:72:4f:e6:78:ed:73:09:e4:ab:c7:e5:0c:19:
                    d3:86:28:61:3c:f8:19:76:6f:a3:20:fa:6a:6b:db:
                    0a:e5:67:a9:38:8b:d6:2c:5d:fb:fd:29:05:c9:5b:
                    52:9c:60:d6:2b:ca:c2:3b:2c:89:c0:05:a8:34:8f:
                    1b:6b:15:92:68:78:01:53:6f:7c:cf:cd:64:1b:da:
                    78:dc:85:e9:8d:33:6e:b4:ba:ec:30:f3:c1:28:47:
                    90:d3:2b:d2:66:72:22:f6:fa:01:32:fe:85:3c:94:
                    d3:67:4b:ae:43:c7:c4:65:c7:da:2c:9d:9f:3f:d2:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:01:08:DD:07:DD:39:D8:C1:16:7D:27:C0:35:7F:CA:73:B6:1C:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/1/FA0108DD07DD39D8C1167D27C0357FCA73B61C0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.136.0/22
                IPv6:
                  2804:6544::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269479

    Signature Algorithm: sha256WithRSAEncryption
         c4:8e:b9:a0:a1:b0:75:df:92:80:c5:89:57:2a:ed:88:04:f9:
         f7:1f:a1:76:d7:93:b8:d0:98:ad:17:3e:75:92:54:28:4e:9b:
         59:42:65:f1:c2:93:f8:a9:b1:53:94:37:00:fc:b9:f3:24:27:
         41:89:6d:2a:76:c0:ac:1a:6f:ff:0c:d7:26:7c:a2:dc:43:63:
         c6:50:1a:80:f0:7f:42:3a:43:84:cb:b7:38:15:db:03:87:42:
         77:64:14:3d:63:27:c9:0d:1f:df:c8:97:d9:c9:62:8f:a4:d5:
         23:14:92:9a:eb:ab:a5:ea:49:31:30:dc:0d:c7:21:a0:ad:2b:
         c7:a3:d0:fa:04:b3:7a:d9:a8:f2:3e:3d:d0:f0:d7:9d:b9:37:
         33:61:27:50:1d:d5:8f:d0:01:2b:03:8b:d5:3e:aa:65:31:d5:
         ab:6b:50:52:65:bf:43:be:4a:25:e8:6e:0a:2a:c6:7a:4d:11:
         62:ab:1c:03:f9:24:ae:06:3a:19:69:4d:4b:6d:7b:20:c2:79:
         97:ff:4d:9d:54:bb:78:5a:cc:fb:fe:f4:e2:84:eb:b1:4c:3d:
         ab:a7:b6:3b:76:0b:ff:c6:5a:ad:04:ee:a5:e6:a0:4b:f2:58:
         28:ad:c1:e5:8d:fe:7f:23:14:b8:7a:fb:50:de:bc:a6:35:8a:
         9b:e5:c9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:39 2024 by rpki-client on console-fra.rpki-client.org