Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.cer
File:                     5820A7350809BA171F6B4004D5F8AD4654AD3A9C.cer (raw, json)
Hash identifier:          ORrGxOs8hSG5sG6oC8TCZCzdsbqKKut/06g7go4aQhg=
Subject key identifier:   58:20:A7:35:08:09:BA:17:1F:6B:40:04:D5:F8:AD:46:54:AD:3A:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69DA4CABD99C76C7C67F46AED545BCCF1F621EED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Oct 2023 01:52:22 +0000
Certificate not after:    Wed 09 Oct 2024 01:57:22 +0000
Subordinate resources:    AS: 269367
                          IP: 45.185.76.0/22
                          IP: 2804:6388::/32

Validation:               Failed, certificate revoked on Sun 03 Mar 2024 12:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:da:4c:ab:d9:9c:76:c7:c6:7f:46:ae:d5:45:bc:cf:1f:62:1e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 11 01:52:22 2023 GMT
            Not After : Oct  9 01:57:22 2024 GMT
        Subject: CN=5820A7350809BA171F6B4004D5F8AD4654AD3A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:b7:d2:ea:6e:4c:66:f5:88:ad:38:85:b7:
                    19:ee:f2:34:01:57:4c:27:5d:dc:5c:29:04:ea:b2:
                    96:c2:c0:a7:3d:5a:fc:e8:0d:ce:d4:01:41:0e:5f:
                    84:54:ec:42:e4:f7:75:b3:ff:9b:c0:81:92:87:44:
                    89:c4:78:28:eb:1e:97:bd:8d:35:cb:02:4a:5b:41:
                    d9:ad:29:12:07:78:66:3e:df:4a:72:19:60:80:f5:
                    0f:94:87:2d:c4:4a:21:6b:e6:36:e3:97:53:e1:c0:
                    85:74:11:82:88:48:9d:8a:e0:58:ae:f9:a7:2f:92:
                    06:af:06:29:37:b6:6d:ca:ec:88:ba:43:a2:30:46:
                    c6:3e:1c:38:8f:05:8e:39:08:fe:50:65:6b:b2:56:
                    cc:bb:cd:ed:56:ba:8f:a3:4c:a8:6a:c8:3d:a4:28:
                    85:56:8e:29:20:40:66:2b:25:1c:1a:4d:e7:7c:84:
                    d2:d7:31:bb:6c:21:13:a4:99:8c:86:e7:04:dd:a0:
                    6c:9d:3a:66:94:e0:b0:5d:61:1e:9e:12:1a:a6:86:
                    a2:3d:5f:ff:2a:a6:ee:c8:b8:d7:7a:13:bd:8f:67:
                    d5:fb:b8:9a:04:89:0a:4d:2f:67:c7:f0:87:c1:de:
                    41:ec:7c:a8:fe:d4:60:d7:c9:9b:4e:3a:e8:0b:22:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:20:A7:35:08:09:BA:17:1F:6B:40:04:D5:F8:AD:46:54:AD:3A:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.76.0/22
                IPv6:
                  2804:6388::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269367

    Signature Algorithm: sha256WithRSAEncryption
         53:83:b2:8e:c9:a1:2f:61:3d:0f:81:c6:2f:db:d9:4d:b4:54:
         5f:cd:cd:9d:8b:d0:a6:12:4d:e1:08:72:12:ea:9f:21:4c:e5:
         fc:28:e7:de:ec:b9:ac:cc:18:36:19:e2:57:26:b8:1e:ab:6b:
         bf:68:32:a5:bd:bd:cb:fb:80:59:67:01:8f:1b:90:7d:c7:cd:
         da:f5:c4:90:30:8e:f6:84:62:63:1c:d5:75:c6:3a:c8:1c:af:
         93:c9:7d:f1:f7:28:55:39:0b:8d:a4:b3:a8:64:fa:0c:ce:af:
         f2:98:af:6d:27:2f:07:57:d1:b3:ba:97:51:f4:1f:e4:f0:5b:
         0b:b5:56:15:50:dc:d2:d5:10:c4:8d:83:67:9c:5e:3f:a1:b8:
         6b:a5:d0:17:b0:41:8d:09:1e:cb:14:8b:eb:6f:e2:a4:86:b9:
         6c:c1:ec:3b:c0:79:06:01:fb:98:a6:1d:b7:3c:ae:5d:13:d0:
         76:55:4c:2b:3f:ae:6e:c8:bb:ed:53:56:32:6e:f9:75:1f:2f:
         ac:e1:63:db:c7:c4:66:a7:46:6f:23:b1:8b:de:1d:84:38:51:
         d8:43:69:c6:f6:9e:36:6b:f0:a2:92:2b:c5:7f:cc:ae:9c:d0:
         98:a8:3c:84:34:91:d6:66:f8:50:b0:5d:dd:df:75:6c:7f:21:
         88:c9:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 14:42:43 2024 by rpki-client on console.sobornost.net