Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4BDB9834959A4E2C5895D607775A7A9C2A1D5E25.cer
File:                     4BDB9834959A4E2C5895D607775A7A9C2A1D5E25.cer (raw, json)
Hash identifier:          +xj1dJvAYEd9Gv+OvdnMUsFWEyElwxmJ+7sBkhaSS04=
Subject key identifier:   4B:DB:98:34:95:9A:4E:2C:58:95:D6:07:77:5A:7A:9C:2A:1D:5E:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       068C9715CC07EF7AC08A6989B3CEA12D0627BB9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/4BDB9834959A4E2C5895D607775A7A9C2A1D5E25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 14:09:34 +0000
Certificate not after:    Mon 03 Mar 2025 14:14:34 +0000
Subordinate resources:    AS: 61592
                          IP: 45.224.216.0/22
                          IP: 45.232.188.0/22
                          IP: 45.234.100.0/22
                          IP: 2804:4c34::/32

Validation:               Failed, certificate revoked on Wed 13 Mar 2024 14:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8c:97:15:cc:07:ef:7a:c0:8a:69:89:b3:ce:a1:2d:06:27:bb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 14:09:34 2024 GMT
            Not After : Mar  3 14:14:34 2025 GMT
        Subject: CN=4BDB9834959A4E2C5895D607775A7A9C2A1D5E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:e6:3e:d9:be:10:f0:f6:df:d5:52:49:87:
                    21:16:6c:50:87:c8:f3:04:8b:75:87:00:e6:ce:21:
                    12:b2:de:81:a3:a1:a8:41:e0:b8:f9:17:d3:0c:76:
                    9e:d2:c1:4b:82:93:02:bc:95:9f:9b:ea:30:93:e5:
                    9a:4c:7f:03:a4:c7:40:d9:9b:49:02:00:67:93:71:
                    fc:16:fd:f7:45:d0:0a:6e:8d:e9:1f:2f:93:44:5d:
                    7d:f6:ab:8d:74:5e:58:12:17:67:7c:4e:b1:b8:42:
                    04:96:ba:3f:78:71:09:4a:7d:37:b2:17:e0:1a:55:
                    f1:b9:46:d8:90:c8:39:df:cc:ca:37:ff:18:c0:d2:
                    01:e8:96:81:c7:eb:ab:be:75:30:e0:9f:d7:c5:9f:
                    03:af:f4:65:af:28:ff:00:45:26:43:2d:10:23:ff:
                    fd:15:ad:ba:38:b5:04:52:fd:a1:f3:22:e6:0f:05:
                    d5:4e:a4:f1:3c:20:a0:99:61:94:c7:8f:9b:f0:31:
                    1a:eb:19:45:19:e7:64:a1:78:c0:d1:62:e6:69:88:
                    30:2c:8a:90:cd:69:37:cf:01:d2:87:09:5a:4e:4f:
                    12:74:24:9c:fb:b5:11:0d:e4:21:1b:fb:14:6e:36:
                    32:5b:ca:2f:fd:9b:a9:89:79:74:33:f4:3e:08:ed:
                    66:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:DB:98:34:95:9A:4E:2C:58:95:D6:07:77:5A:7A:9C:2A:1D:5E:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/4BDB9834959A4E2C5895D607775A7A9C2A1D5E25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.216.0/22
                  45.232.188.0/22
                  45.234.100.0/22
                IPv6:
                  2804:4c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61592

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:82:1b:35:79:1d:0b:c1:09:f8:c8:67:6e:28:1f:62:65:
         43:19:15:95:45:1a:14:a2:46:fd:46:38:c1:f6:7a:3c:c2:a1:
         68:44:e4:cc:c0:4f:df:1c:15:d7:e8:78:20:47:df:4c:fc:ce:
         1d:5b:b2:0b:09:89:fe:c8:ec:0e:c5:65:09:c4:cf:58:4f:94:
         77:22:04:a6:28:c8:83:88:5a:bd:3b:99:8a:f9:de:bc:a5:a9:
         73:a8:5d:2a:9a:d4:80:6e:70:8e:87:08:b7:a7:ab:23:8f:25:
         50:72:48:7f:ba:70:b0:be:3e:4e:6a:4d:86:e3:4a:cc:85:f1:
         d7:7f:7a:56:0a:7d:65:aa:d1:8a:f2:06:45:91:2f:44:d3:d8:
         50:9b:46:42:7b:2e:79:08:b1:d8:9f:b4:f8:70:48:f2:f8:5f:
         5d:8a:b0:4d:3a:e6:60:c6:39:52:57:e0:e5:04:2e:7d:83:5a:
         7d:76:9d:09:78:7b:a6:b7:9a:e9:c6:c8:e5:dc:94:d3:13:d2:
         9f:45:34:57:46:5b:62:1d:18:8b:38:18:48:5c:e5:28:aa:83:
         0d:b1:72:15:5b:87:04:63:de:8f:e3:18:5f:2a:17:f5:09:5e:
         44:03:29:31:c0:cc:31:9f:f5:c2:38:26:80:f4:56:0c:3f:8f:
         53:f8:66:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 21:00:14 2024 by rpki-client on console.sobornost.net