Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/659E72DC3BF41FD2ADAACE89599EBA94B9751914.cer
File:                     659E72DC3BF41FD2ADAACE89599EBA94B9751914.cer (raw, json)
Hash identifier:          W1JaCJB4XxnCnlRaWUnywjPNI4bw77WUEhsGXLnblEg=
Subject key identifier:   65:9E:72:DC:3B:F4:1F:D2:AD:AA:CE:89:59:9E:BA:94:B9:75:19:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11AD2DA6069138421D9CCFCEC9F8CC1A135AF6A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/659E72DC3BF41FD2ADAACE89599EBA94B9751914.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 14:44:58 +0000
Certificate not after:    Thu 04 Jul 2024 14:49:58 +0000
Subordinate resources:    AS: 264565
                          IP: 45.163.24.0/22
                          IP: 138.36.44.0/22
                          IP: 138.255.48.0/22
                          IP: 2804:21a0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ad:2d:a6:06:91:38:42:1d:9c:cf:ce:c9:f8:cc:1a:13:5a:f6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 14:44:58 2023 GMT
            Not After : Jul  4 14:49:58 2024 GMT
        Subject: CN=659E72DC3BF41FD2ADAACE89599EBA94B9751914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:52:9b:72:05:f7:cd:d4:48:4c:4b:03:c7:48:
                    b5:26:35:a8:ee:cb:34:95:20:a4:1b:86:64:ac:2d:
                    07:e4:a1:9e:62:08:d2:69:bb:f9:d5:c4:88:bf:a1:
                    d2:a5:c2:22:e2:32:bd:05:f2:59:21:f1:95:57:48:
                    9d:da:76:fb:87:0f:00:d4:a4:d0:68:c7:f0:57:2e:
                    e9:ea:1c:52:fc:c5:0a:bc:8e:93:33:d1:79:6e:fd:
                    6d:07:e1:b6:3f:41:af:4a:04:a3:6f:4c:d0:93:2f:
                    b4:92:b0:67:14:1d:83:54:e9:11:8f:73:55:15:93:
                    c0:2b:72:85:d7:e2:1b:2d:21:3b:27:73:f4:7e:4b:
                    72:58:f0:88:fe:91:2b:aa:1a:77:aa:45:c6:7a:8b:
                    48:6d:dc:63:ba:1a:fe:91:fc:6c:3b:23:db:1a:2e:
                    b6:82:fb:4e:47:ee:9e:d5:4a:81:5c:f7:2c:43:7d:
                    93:2a:b7:2a:eb:db:63:74:c5:ba:07:4e:99:e9:d8:
                    3e:44:ac:7a:98:52:ed:38:f1:e6:ce:8c:ba:c2:37:
                    b3:31:07:7d:dc:c3:f3:eb:db:3a:7c:2f:c9:97:b7:
                    0b:c2:08:fe:4d:ec:11:53:0f:79:6b:ea:66:67:2e:
                    07:f1:71:47:76:db:aa:44:04:b8:86:4b:88:97:6c:
                    f4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:9E:72:DC:3B:F4:1F:D2:AD:AA:CE:89:59:9E:BA:94:B9:75:19:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/659E72DC3BF41FD2ADAACE89599EBA94B9751914.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.24.0/22
                  138.36.44.0/22
                  138.255.48.0/22
                IPv6:
                  2804:21a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264565

    Signature Algorithm: sha256WithRSAEncryption
         b1:ac:4a:b9:58:2d:57:41:a7:31:f2:fb:c6:7f:93:09:cd:3a:
         2e:ec:4d:eb:ba:7b:77:21:b6:0c:fa:78:7a:f2:72:b1:9c:94:
         3e:e8:79:55:98:b3:61:e1:a5:bc:5d:63:f5:7d:e7:32:f4:81:
         d4:6e:41:ed:b5:48:b8:6e:a8:10:3f:e2:86:62:6e:56:1b:b3:
         1d:ed:3a:f1:ae:0d:c5:61:a7:d5:14:d2:7c:a1:61:89:d9:36:
         b1:0d:5c:68:76:9e:0e:60:bb:2c:6d:d4:10:f4:97:03:9f:8a:
         31:13:52:fd:e6:4a:83:9d:74:f3:1f:70:14:93:0a:7a:6f:a4:
         d0:1c:fe:6c:ab:39:43:3f:00:a3:f9:86:a8:96:30:09:6e:29:
         1f:b3:f8:44:58:51:6a:f3:08:83:22:3f:7e:91:b5:c5:02:c9:
         e1:c9:84:8b:3c:03:00:1f:40:66:db:ba:f8:8b:c2:ac:ec:09:
         06:0c:62:1d:9b:42:8a:ef:77:60:ba:73:2f:00:5f:5f:10:98:
         aa:77:b3:d8:4e:6b:57:73:23:56:75:18:22:6f:05:1a:3e:9e:
         89:7a:d0:17:61:93:a0:4a:2e:c8:95:bf:e3:e7:ad:fa:f9:80:
         09:20:fc:54:54:d0:19:bf:8f:32:f6:91:21:d5:d0:60:71:6b:
         22:f7:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:38 2023 by rpki-client on console.sobornost.net