Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/528376214EAEB29FCE9BEA3F31AF59BE638EBD52.cer
File:                     528376214EAEB29FCE9BEA3F31AF59BE638EBD52.cer (raw, json)
Hash identifier:          5+zfQbDdRRj167+rSQxGhIpS4wq0xrug8w63vbhNNCc=
Subject key identifier:   52:83:76:21:4E:AE:B2:9F:CE:9B:EA:3F:31:AF:59:BE:63:8E:BD:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1DB33752817E907427A82C8606A249525011654E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/528376214EAEB29FCE9BEA3F31AF59BE638EBD52.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 21:57:47 +0000
Certificate not after:    Tue 14 May 2024 22:02:47 +0000
Subordinate resources:    AS: 269053
                          IP: 45.179.52.0/23
                          IP: 2804:5ebc::/32

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 12:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b3:37:52:81:7e:90:74:27:a8:2c:86:06:a2:49:52:50:11:65:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 21:57:47 2023 GMT
            Not After : May 14 22:02:47 2024 GMT
        Subject: CN=528376214EAEB29FCE9BEA3F31AF59BE638EBD52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:f3:7f:14:b3:42:7e:41:5c:c0:32:b0:1b:
                    88:bd:f9:e5:72:56:b7:a7:28:db:7e:d9:da:44:16:
                    af:dc:07:21:4b:20:89:fc:44:79:5f:18:ea:29:a3:
                    0d:55:cf:03:e2:eb:5b:d7:08:3e:39:02:29:a0:4c:
                    49:80:92:1a:8d:93:61:a6:35:81:00:83:1a:ae:48:
                    42:f5:44:85:83:57:1c:9c:29:11:4f:a2:aa:5a:b1:
                    d9:e9:5e:b5:81:9e:2f:51:47:b3:82:88:a3:20:14:
                    8e:41:97:ac:bd:94:71:31:5a:45:4b:c9:86:78:8a:
                    f2:c6:89:68:da:6d:84:71:02:63:d9:72:31:f1:94:
                    16:6f:3a:c5:27:a1:12:e3:53:4f:5e:e5:31:8f:2e:
                    66:61:72:73:85:40:76:91:2c:7c:32:bf:35:2c:be:
                    61:db:29:32:16:58:6a:09:dc:08:b3:3c:e5:ee:9e:
                    8c:fd:52:71:b8:59:e7:1b:d0:f4:87:30:c2:ae:93:
                    c4:12:54:fa:b2:39:75:89:ee:f0:92:7c:e1:15:39:
                    18:b3:aa:82:b6:3a:2e:32:88:83:16:ad:b1:c5:dd:
                    ca:cf:6e:f0:72:11:ef:e5:7a:b9:95:49:38:86:05:
                    63:32:93:60:bc:e2:2b:93:71:63:14:a5:f9:53:8d:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:83:76:21:4E:AE:B2:9F:CE:9B:EA:3F:31:AF:59:BE:63:8E:BD:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/528376214EAEB29FCE9BEA3F31AF59BE638EBD52.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.52.0/23
                IPv6:
                  2804:5ebc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269053

    Signature Algorithm: sha256WithRSAEncryption
         86:db:5c:6f:d8:90:47:d9:58:f0:60:1a:b1:dc:a5:0c:84:6a:
         05:78:db:d1:a9:62:70:ce:7b:2f:84:89:f2:28:f6:77:d9:52:
         7f:c8:d3:81:2b:b4:1c:ce:2a:b5:b8:bc:9d:76:51:28:a6:f0:
         b2:f1:c4:c3:a9:05:de:8c:b1:8d:07:dd:eb:7f:00:b8:2d:cb:
         f0:6d:b0:de:c8:45:e5:5d:6a:03:f8:99:6f:4a:eb:b6:18:1c:
         0b:80:f8:54:06:22:54:3d:e4:e1:7a:1b:60:e3:fd:8e:52:ef:
         f4:05:d6:62:fc:df:3c:d4:b4:ef:1b:56:b4:41:d3:7d:94:76:
         93:fb:f8:5d:3c:f4:b4:42:9c:5b:e5:42:6e:f7:ec:d4:a3:8c:
         08:1c:af:9d:b8:53:d7:aa:38:8b:8a:95:8f:c7:3f:b8:45:06:
         30:1d:85:a2:cf:36:1b:3b:be:46:d3:72:20:07:0f:9d:ee:23:
         6b:5c:c2:06:14:08:0a:a7:ca:8c:b8:bf:11:4d:f5:6a:93:a7:
         5a:71:11:d8:d5:f9:0a:3d:c5:5a:64:00:89:eb:9d:dc:11:2f:
         05:cb:b6:69:7a:ec:8e:c0:35:de:0c:a3:3d:2b:6a:11:8e:6e:
         73:c1:ea:5e:44:96:0f:49:95:f8:a7:a1:1b:fc:50:53:9a:36:
         79:e2:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:11 2024 by rpki-client on console.sobornost.net