Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FE70D70A97328548A3EB02F4AC5B025BE416542E.cer
File:                     FE70D70A97328548A3EB02F4AC5B025BE416542E.cer (raw, json)
Hash identifier:          s2wRPcOVJxvbrvzjEh9IyMutaEtQbwPhnUx56JZQD6Q=
Subject key identifier:   FE:70:D7:0A:97:32:85:48:A3:EB:02:F4:AC:5B:02:5B:E4:16:54:2E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       426F6E4060637558CB66CBBE7F34A77102B5BB66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/1/FE70D70A97328548A3EB02F4AC5B025BE416542E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jul 2024 16:58:15 +0000
Certificate not after:    Fri 18 Jul 2025 17:03:15 +0000
Subordinate resources:    AS: 266391
                          IP: 170.80.192.0/22
                          IP: 2804:3720::/32

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 17:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6f:6e:40:60:63:75:58:cb:66:cb:be:7f:34:a7:71:02:b5:bb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 19 16:58:15 2024 GMT
            Not After : Jul 18 17:03:15 2025 GMT
        Subject: CN=FE70D70A97328548A3EB02F4AC5B025BE416542E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ad:f9:01:3f:ed:85:49:35:ad:b5:18:2f:e3:
                    fc:d6:8d:31:96:03:dc:4a:73:c1:74:e3:d2:d3:d7:
                    70:c8:40:5a:ca:fc:b7:4f:5f:54:00:2d:dd:42:e8:
                    a4:38:d2:8d:c5:f6:45:68:9a:10:f0:58:d4:08:6f:
                    ab:3b:da:81:c8:42:12:06:c2:c5:3f:10:c6:8c:81:
                    46:95:e1:4a:5c:fd:06:f8:f8:00:6e:39:c0:2a:3d:
                    e1:b2:d3:1a:d8:b0:53:f2:79:9a:e5:04:c6:ea:e8:
                    e3:ed:76:29:02:ae:a2:c2:16:a3:0a:85:98:ca:42:
                    7b:de:7a:1c:21:06:7e:87:ce:47:56:67:7d:e3:fa:
                    b5:3a:69:31:ac:5f:cb:dc:d7:8b:a9:76:79:b0:15:
                    01:ba:b0:b9:22:04:96:60:2b:ab:ef:8b:43:f5:0d:
                    59:14:23:b9:0b:a6:47:a5:98:4c:fa:19:f4:7b:2b:
                    5b:66:09:43:81:1c:26:fe:61:ff:bd:1f:a2:a7:cb:
                    da:2a:ec:90:e8:59:83:3f:1e:24:f7:d0:8a:22:f3:
                    23:e7:bb:43:45:f2:99:fc:bd:a6:1b:1a:7e:37:9f:
                    59:60:c6:b1:17:d5:92:30:b4:23:54:07:f7:8c:25:
                    05:01:58:e6:32:a9:09:08:74:33:c7:bb:28:b2:2d:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:70:D7:0A:97:32:85:48:A3:EB:02:F4:AC:5B:02:5B:E4:16:54:2E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/1/FE70D70A97328548A3EB02F4AC5B025BE416542E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.192.0/22
                IPv6:
                  2804:3720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266391

    Signature Algorithm: sha256WithRSAEncryption
         b6:5c:90:49:9e:cf:9a:03:8d:b2:84:0a:7e:30:50:e9:73:21:
         3c:14:7a:9a:c2:d6:8c:15:fe:b8:f5:87:2a:c3:87:66:04:b5:
         7c:76:27:c1:64:ba:94:aa:9e:92:47:4b:54:27:60:1f:c1:9c:
         c6:5a:60:7c:bb:b2:ec:52:4b:94:65:29:fc:8b:1b:d6:79:81:
         a6:2d:cc:d3:0e:e8:84:42:d3:94:32:9f:d1:c2:2f:25:01:4b:
         79:b3:47:1f:a0:12:9b:39:23:c0:26:19:95:27:b2:d3:85:3b:
         aa:67:ed:b1:9b:26:19:9e:fd:16:46:25:a1:85:e0:3b:38:ed:
         29:2c:2c:28:7f:d9:b3:12:80:cb:2a:ee:27:5e:c5:d4:dc:95:
         31:10:c3:a7:a3:e5:72:a7:38:57:4b:7d:06:83:c0:98:e7:d9:
         81:51:cc:1f:0f:a7:12:19:04:40:99:7b:47:82:f0:4f:10:f1:
         7b:c7:04:81:00:4a:3b:a3:44:2c:72:51:51:9e:09:ac:e5:6f:
         02:86:18:62:6b:85:db:fd:ce:27:b9:77:48:43:0e:68:0d:91:
         ca:db:29:04:e5:b9:36:7a:81:45:94:1f:1f:0e:40:2a:69:91:
         9c:53:c5:db:b3:b1:39:94:3e:67:7e:a4:96:fa:5e:52:7f:97:
         58:ba:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 19:34:33 2024 by rpki-client on console-fra.rpki-client.org