Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03BEE9946822B59F9B07BE9ADE06939720F115CA.cer
File:                     03BEE9946822B59F9B07BE9ADE06939720F115CA.cer (raw, json)
Hash identifier:          IVa6tWyTXXtNrws3jpUA2gcEnOQaMb0rF3xjyPph1iQ=
Subject key identifier:   03:BE:E9:94:68:22:B5:9F:9B:07:BE:9A:DE:06:93:97:20:F1:15:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E0250E97424C6587FAF204DA86FE4EC72840E8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/03BEE9946822B59F9B07BE9ADE06939720F115CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Sep 2023 16:25:35 +0000
Certificate not after:    Sat 14 Sep 2024 16:30:35 +0000
Subordinate resources:    AS: 268412
                          IP: 45.160.164.0/22
                          IP: 2804:50d0::/32

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 15:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:02:50:e9:74:24:c6:58:7f:af:20:4d:a8:6f:e4:ec:72:84:0e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 16 16:25:35 2023 GMT
            Not After : Sep 14 16:30:35 2024 GMT
        Subject: CN=03BEE9946822B59F9B07BE9ADE06939720F115CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:ad:ec:a2:7b:22:41:bb:42:f7:80:fd:4c:
                    fc:e8:b7:56:d5:6c:fa:de:2b:63:da:f6:99:d5:e4:
                    1c:f7:d6:dc:4a:54:6c:6d:d4:05:1d:da:34:14:c5:
                    06:61:6c:b6:71:db:2e:30:7a:26:91:5d:d3:66:2c:
                    bb:35:9c:3b:91:81:b3:eb:4e:20:7a:ed:5c:24:a8:
                    a6:eb:d6:03:a9:c8:fe:75:45:3a:9f:c9:0b:2f:05:
                    45:f2:b8:bb:e8:1c:e8:21:2f:f7:11:fa:73:d9:59:
                    0b:92:1a:f4:7c:9b:a7:ff:58:1a:a9:bb:ac:60:2e:
                    c3:45:84:09:c7:50:7f:c6:29:7c:e9:ce:31:7e:a3:
                    09:4c:63:4c:b6:28:69:e2:2c:e6:c5:89:e3:da:de:
                    ee:7f:fd:88:1c:26:5b:5c:44:6f:71:a4:1d:51:03:
                    b7:6b:0a:3f:2c:66:bc:9b:76:b7:64:ca:74:40:37:
                    51:27:26:15:ae:e1:b9:d0:41:8c:79:0e:bf:4f:54:
                    03:f7:23:77:8e:61:00:be:79:81:c7:f2:0b:6a:76:
                    f7:6b:57:df:dd:a4:1e:9b:23:26:8f:59:6e:8d:d4:
                    e2:5a:41:c1:27:91:ab:26:51:47:dc:d6:21:97:40:
                    08:13:73:83:a3:ff:44:da:b6:30:c9:eb:d6:74:e6:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:BE:E9:94:68:22:B5:9F:9B:07:BE:9A:DE:06:93:97:20:F1:15:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/03BEE9946822B59F9B07BE9ADE06939720F115CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.164.0/22
                IPv6:
                  2804:50d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268412

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:79:15:6f:c0:6d:b4:69:40:77:21:50:87:c7:f7:67:b2:
         ca:19:0d:a1:a7:51:3f:a4:6d:cd:92:10:f3:ff:6a:57:72:26:
         a0:46:9e:3d:ba:60:d9:cc:aa:8a:5a:87:6d:f8:89:03:0f:c0:
         e2:47:2f:92:48:23:9c:24:d0:bf:55:ca:93:5f:af:0e:73:fc:
         e8:b7:db:51:67:4b:46:c5:0d:b0:b7:6e:b6:67:24:11:c8:73:
         7b:10:cb:dc:95:59:73:5e:9c:2e:5c:97:2d:56:be:90:20:7d:
         bc:93:d4:5b:1d:14:83:95:b2:02:b1:cd:29:08:5b:4f:3f:24:
         50:c4:2d:20:79:93:b6:e6:58:cb:ad:42:0e:1e:7b:fd:71:49:
         f0:f9:c8:48:b8:b3:c9:bf:46:fb:7b:c8:c1:9d:ab:a0:42:bc:
         73:34:eb:59:f4:59:c8:80:9f:69:92:22:48:43:6a:d5:51:98:
         d0:37:f1:50:38:63:ea:16:af:39:ac:f1:75:ed:3c:d6:bc:33:
         89:ef:ae:c8:b5:29:8d:d2:a4:b6:02:70:ad:ed:da:62:b3:75:
         8b:55:71:cc:ad:fe:14:bf:e8:9b:30:87:7e:c9:69:d9:d9:41:
         fc:94:a7:68:de:28:c1:e3:24:66:54:21:64:dd:a0:83:0e:73:
         63:cb:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 22:22:43 2024 by rpki-client on console.sobornost.net