Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4818F51893DDF6EBAAFBCBB37911AD0D245CD178.cer
File:                     4818F51893DDF6EBAAFBCBB37911AD0D245CD178.cer (raw, json)
Hash identifier:          W0H5PI1Yd6/qbUstUB3qYfrUgqdPVOzgoE83h9trkfs=
Subject key identifier:   48:18:F5:18:93:DD:F6:EB:AA:FB:CB:B3:79:11:AD:0D:24:5C:D1:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37C4D87AC31E0A51CED12A2D597150A8524F4258
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/4818F51893DDF6EBAAFBCBB37911AD0D245CD178.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jan 2024 17:15:58 +0000
Certificate not after:    Wed 01 Jan 2025 17:20:58 +0000
Subordinate resources:    AS: 266194
                          IP: 45.5.176.0/22
                          IP: 2804:3c2c::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c4:d8:7a:c3:1e:0a:51:ce:d1:2a:2d:59:71:50:a8:52:4f:42:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  3 17:15:58 2024 GMT
            Not After : Jan  1 17:20:58 2025 GMT
        Subject: CN=4818F51893DDF6EBAAFBCBB37911AD0D245CD178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:81:93:f9:a3:97:3d:89:59:5d:01:ff:17:
                    32:f9:68:58:fa:84:2d:f0:46:0f:a6:fc:c8:69:b1:
                    90:3a:03:29:03:46:8c:89:93:ee:a6:51:52:64:fa:
                    ed:3c:91:f3:72:88:f1:bf:22:a1:c2:c0:ea:ba:44:
                    5e:cc:ff:90:41:33:11:a1:83:74:b4:c3:53:30:9d:
                    ea:b7:0c:fe:e0:af:bd:2a:4d:87:57:20:6b:01:2b:
                    a3:99:e3:99:45:14:36:3e:ad:de:8d:63:1c:49:d9:
                    70:ca:bb:a9:9b:a5:af:0a:ca:7a:75:d2:b2:d7:34:
                    4c:2e:e1:2d:66:a5:ee:61:b2:7d:9e:a2:5b:2d:1b:
                    cd:65:ed:76:41:43:92:82:ca:58:db:d0:12:53:f3:
                    2b:1a:aa:c4:ca:b2:65:25:6e:1a:f1:f2:89:87:5f:
                    ef:7d:c3:97:36:29:66:cb:e5:d8:ff:f4:e2:38:54:
                    28:24:f6:bb:b0:d5:7e:ef:32:26:d2:37:6c:16:b1:
                    21:d4:1e:9d:25:77:30:7c:29:34:ce:c8:67:c9:14:
                    ac:fb:d0:88:4c:f9:a2:be:d8:91:85:21:bb:62:ba:
                    a5:1e:57:0e:d8:80:67:5f:77:61:20:39:fe:ee:c7:
                    25:fd:9d:1d:a7:9e:e8:16:fd:70:2c:70:37:ce:07:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:18:F5:18:93:DD:F6:EB:AA:FB:CB:B3:79:11:AD:0D:24:5C:D1:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/4818F51893DDF6EBAAFBCBB37911AD0D245CD178.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.176.0/22
                IPv6:
                  2804:3c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266194

    Signature Algorithm: sha256WithRSAEncryption
         5e:f1:58:df:bd:bb:89:58:00:92:55:d9:dc:4a:2a:ca:d2:8e:
         04:78:e6:ed:b5:23:fb:29:48:5f:e6:6a:b4:da:56:e9:de:74:
         f0:1e:3c:ee:a0:89:02:f8:9a:05:72:43:3c:0f:8b:ea:0a:3b:
         da:60:b5:a5:5d:82:53:71:be:68:ed:5e:1e:32:0f:01:78:78:
         a8:7e:94:b7:bd:98:d2:3e:a0:72:89:06:b8:c0:fe:2e:d6:bc:
         87:4a:f7:94:24:6f:21:79:38:c6:2b:9d:f7:6c:b6:4e:4a:c6:
         9e:31:81:15:c2:da:9e:2c:35:1f:14:9e:d4:b9:fd:81:db:e2:
         de:51:dd:a2:54:dd:24:76:6a:2d:26:53:46:95:9e:f4:2b:0c:
         a6:ba:bc:c7:8b:7c:fe:1e:36:b0:26:7c:11:9a:05:87:c5:1a:
         81:10:ff:30:40:68:b8:dd:73:20:44:0a:c7:27:06:37:2c:00:
         1d:99:cd:39:7e:f9:66:19:50:ad:07:12:18:60:d5:ed:7d:52:
         1b:0e:b0:2d:de:1c:47:4f:f1:1d:72:0e:9d:b0:e5:d4:97:aa:
         d7:80:dd:ae:23:c4:7a:22:0f:f4:47:4c:dc:bc:c9:90:32:4c:
         59:c4:8f:ae:cd:4f:d1:bd:12:fc:3d:cd:a3:83:48:61:78:11:
         48:bb:44:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 20:28:42 2024 by rpki-client on console.sobornost.net