Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4594A304E0A8E2520A9314F9E8CFA8170C961673.cer
File:                     4594A304E0A8E2520A9314F9E8CFA8170C961673.cer (raw, json)
Hash identifier:          TUUZW30b7awycUvGL0Ry0TRVcdvgUroo6l8dHlqNGJ8=
Subject key identifier:   45:94:A3:04:E0:A8:E2:52:0A:93:14:F9:E8:CF:A8:17:0C:96:16:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5333995EC52072054CCECB0C5307BC9BA946CFC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/4594A304E0A8E2520A9314F9E8CFA8170C961673.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 13:52:48 +0000
Certificate not after:    Tue 16 Apr 2024 13:57:48 +0000
Subordinate resources:    AS: 268463
                          IP: 45.161.96.0/22
                          IP: 2804:5194::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:33:99:5e:c5:20:72:05:4c:ce:cb:0c:53:07:bc:9b:a9:46:cf:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 13:52:48 2023 GMT
            Not After : Apr 16 13:57:48 2024 GMT
        Subject: CN=4594A304E0A8E2520A9314F9E8CFA8170C961673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:66:12:22:41:5d:83:40:7c:e1:3e:c5:a5:
                    2b:76:3f:d2:0c:4a:7a:4e:5a:87:0c:34:f1:f1:6d:
                    96:53:8d:c8:de:8d:b5:36:d8:d1:c5:05:59:b8:c7:
                    63:08:a4:ee:8c:d0:f3:66:9e:27:d0:6d:02:ec:21:
                    a3:15:fb:0f:29:d1:69:28:ff:8d:0d:28:7d:34:44:
                    53:98:b7:29:50:4a:81:54:73:cb:18:41:82:ce:ad:
                    91:76:89:3b:9c:62:d6:9a:76:c8:2e:b3:e5:d3:b0:
                    fe:d1:6d:2b:7c:09:5c:1d:4e:66:c3:40:d5:a8:70:
                    5f:2f:02:d0:f4:be:80:65:dd:6d:98:de:d4:74:17:
                    20:77:36:c4:33:7e:93:21:72:25:2d:18:dd:f9:31:
                    4f:61:d8:60:65:1b:81:54:84:e3:06:61:97:b7:fa:
                    33:26:8d:92:36:84:6f:16:af:e2:c8:2f:ce:a6:c6:
                    e4:63:ab:70:21:1e:1e:08:f0:dc:54:3c:5e:d7:6a:
                    09:2a:78:81:d8:1e:f0:ca:b0:ec:d6:94:f4:50:34:
                    b1:b8:c0:26:79:8f:19:59:56:de:ce:a3:75:03:7a:
                    5e:22:61:f4:25:e1:2f:de:67:73:b9:8d:10:04:53:
                    45:0b:92:26:f5:a1:75:c8:5d:c2:a5:1d:c5:33:63:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:94:A3:04:E0:A8:E2:52:0A:93:14:F9:E8:CF:A8:17:0C:96:16:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/4594A304E0A8E2520A9314F9E8CFA8170C961673.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/22
                IPv6:
                  2804:5194::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268463

    Signature Algorithm: sha256WithRSAEncryption
         46:56:ac:76:62:29:e0:78:e8:48:d2:7e:f0:40:4a:21:14:24:
         b0:4e:a5:d3:83:a7:23:88:fc:e1:ea:e5:0c:79:de:85:68:c9:
         49:24:a6:70:f3:1a:4d:41:c7:1d:8b:bd:8e:84:c7:5a:3d:ad:
         e1:4a:fe:41:fb:51:1a:0e:48:8f:e7:59:73:34:43:c4:1e:7c:
         52:47:cf:67:15:01:3b:72:0b:4b:fb:56:14:3b:1c:52:48:bc:
         66:a7:31:09:8f:c7:26:10:c7:71:97:49:98:7b:13:d8:95:98:
         e4:b4:46:8e:97:5d:19:6f:5a:df:af:80:e3:22:69:55:25:d1:
         02:39:51:33:4f:2b:6f:df:82:f9:8b:95:b7:cc:b6:2a:32:a1:
         48:b0:e8:0a:9e:0f:bb:fc:90:f7:bd:af:18:cd:36:5c:9c:a8:
         9a:af:57:75:b3:ad:0c:fc:8b:0e:46:ce:12:d5:cb:94:29:b2:
         44:0f:55:eb:86:bc:65:85:59:28:2e:34:79:34:59:de:dc:f3:
         35:a9:e7:af:8f:82:6e:cb:8e:3d:31:db:af:6e:49:3a:41:f7:
         41:b1:13:7d:41:30:c2:c2:25:29:64:ee:65:cc:bf:a5:1a:57:
         d6:57:5b:44:42:12:a8:0f:9c:78:85:de:90:94:07:ad:d3:ec:
         40:26:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:39 2023 by rpki-client on console.sobornost.net