Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF9C06663C253EE2ECBDB5AA095105FC47957945.cer
File:                     FF9C06663C253EE2ECBDB5AA095105FC47957945.cer (raw, json)
Hash identifier:          IWm2nV+YLqsX/YAzOxeV1A586McpJ8EOhKv333/CEo4=
Subject key identifier:   FF:9C:06:66:3C:25:3E:E2:EC:BD:B5:AA:09:51:05:FC:47:95:79:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04E4800885971B158F1C94833D7D466895E553F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/FF9C06663C253EE2ECBDB5AA095105FC47957945.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 May 2024 18:03:45 +0000
Certificate not after:    Wed 07 May 2025 18:08:45 +0000
Subordinate resources:    AS: 266342
                          IP: 170.239.80.0/22
                          IP: 2804:3654::/32

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 19:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e4:80:08:85:97:1b:15:8f:1c:94:83:3d:7d:46:68:95:e5:53:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 18:03:45 2024 GMT
            Not After : May  7 18:08:45 2025 GMT
        Subject: CN=FF9C06663C253EE2ECBDB5AA095105FC47957945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:c3:a1:c3:2c:db:6b:64:eb:a8:79:52:82:
                    d9:4b:6f:2b:21:23:c0:1f:48:97:4f:c8:ef:09:d2:
                    48:8c:2f:4b:df:58:63:2e:8c:3f:74:ea:89:13:8a:
                    b6:48:26:85:ff:a7:fb:ce:dd:41:ed:e1:41:30:33:
                    37:50:5b:5d:2f:23:6d:55:6e:92:3a:11:c1:ba:ee:
                    ae:1d:c5:26:98:43:2c:46:5b:fd:7c:ae:2d:d1:29:
                    c2:7d:c5:8b:5e:a2:ee:db:10:34:82:dc:ed:9d:c3:
                    1f:2e:1b:8b:d2:ca:4a:07:22:02:27:17:2c:54:58:
                    d3:54:3e:5c:ba:cb:6c:e2:b4:39:e2:87:b8:2a:95:
                    65:ca:e0:a3:d4:13:9a:15:45:bd:11:eb:cc:a3:7d:
                    a6:2c:17:0f:6f:c6:d5:5c:b3:3c:13:a3:7f:3d:3d:
                    9f:1f:dc:a3:4e:fa:0f:5c:2f:1d:5a:56:86:d8:d1:
                    84:3a:4c:ce:f6:e9:df:2c:71:79:e9:4d:b3:fb:1c:
                    c2:5c:95:e4:1f:bc:13:8f:6a:40:b8:48:13:d8:88:
                    9f:a3:ea:02:f1:39:2b:22:12:6b:f8:55:37:f0:3a:
                    78:03:5b:e9:a9:0e:97:39:8f:7b:d8:96:9c:5c:fd:
                    0e:b1:e0:61:5e:3b:c2:bb:78:9d:c7:49:dc:d0:91:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:9C:06:66:3C:25:3E:E2:EC:BD:B5:AA:09:51:05:FC:47:95:79:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/FF9C06663C253EE2ECBDB5AA095105FC47957945.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/22
                IPv6:
                  2804:3654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266342

    Signature Algorithm: sha256WithRSAEncryption
         6b:05:b6:c9:46:a1:be:13:4b:73:5f:41:f8:fd:7d:de:08:38:
         46:cb:39:23:1c:3a:66:37:fc:cd:62:79:6c:5b:27:c5:e0:fe:
         eb:76:fc:43:43:74:02:7b:53:f6:a5:ec:73:92:09:2d:56:17:
         15:89:d8:e7:d5:bb:51:6c:6c:99:66:26:3f:cd:2b:99:b6:0a:
         10:c9:e8:05:6e:9e:3c:62:24:07:a8:bd:58:2f:aa:99:b5:64:
         f3:c4:aa:83:de:3d:0f:ae:e7:af:d5:ff:5d:74:42:1c:e2:d7:
         a1:9c:05:b7:7b:d8:8e:ca:6e:08:9b:e9:46:1a:3f:1c:39:d4:
         ab:5a:a9:65:c6:78:ec:94:3a:5f:24:1f:b0:bb:40:3d:ae:01:
         0d:35:c9:84:d6:1a:9e:a6:4c:62:99:a7:a2:be:88:94:c2:31:
         77:7e:e2:ad:c5:38:d8:e9:63:72:6e:fa:43:98:9d:ec:27:34:
         c1:f2:af:97:05:1e:8c:02:a5:bb:47:5d:67:52:da:60:80:2c:
         36:19:1d:da:f8:a1:83:31:26:64:9a:58:be:60:bc:70:1b:6e:
         74:19:77:3f:8c:2f:51:92:ab:54:1f:e7:1f:0f:c9:d9:2a:37:
         b9:9b:54:38:28:c2:2a:6e:7c:4e:53:69:71:eb:d0:8c:9c:5d:
         bf:7f:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 22:23:57 2024 by rpki-client on console-fra.rpki-client.org