Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/81698DD1397818EFC3381DF24DE22A66396A68A9.cer
File:                     81698DD1397818EFC3381DF24DE22A66396A68A9.cer (raw, json)
Hash identifier:          7Odmb9JcuWiBx6cHPEGGxBl7pBt5JmKbTdoKjD4maKo=
Subject key identifier:   81:69:8D:D1:39:78:18:EF:C3:38:1D:F2:4D:E2:2A:66:39:6A:68:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       237C73E98EFA6AF13A1BE66816979644AA97F519
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/81698DD1397818EFC3381DF24DE22A66396A68A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Sep 2023 12:08:22 +0000
Certificate not after:    Fri 30 Aug 2024 12:13:22 +0000
Subordinate resources:    AS: 262979
                          IP: 138.186.232.0/22
                          IP: 168.197.64.0/22
                          IP: 186.226.48.0/21
                          IP: 2804:9a8::/32

Validation:               Failed, certificate revoked on Fri 26 Jan 2024 12:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7c:73:e9:8e:fa:6a:f1:3a:1b:e6:68:16:97:96:44:aa:97:f5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  1 12:08:22 2023 GMT
            Not After : Aug 30 12:13:22 2024 GMT
        Subject: CN=81698DD1397818EFC3381DF24DE22A66396A68A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:05:5d:2f:19:c0:67:f9:1f:49:13:7d:37:
                    a0:32:2b:69:ff:66:3d:e1:f7:30:24:1e:9d:7f:d0:
                    90:57:db:e5:ad:f2:57:a8:58:a8:6f:37:bd:3b:e0:
                    f7:81:06:54:d2:1b:0b:33:3d:00:0b:16:98:98:44:
                    ac:6f:d1:85:05:b5:24:7a:93:ca:86:81:17:93:6e:
                    04:7b:87:93:02:c9:fc:ac:b3:94:c5:f9:42:d9:91:
                    8e:07:5d:87:9e:52:d9:3f:38:8f:a6:ae:96:f1:47:
                    91:e8:a8:15:37:d7:08:19:3f:21:b0:8f:ca:42:66:
                    2c:39:6f:49:ec:77:93:2a:d3:74:35:d3:72:57:31:
                    a1:91:63:80:bf:2b:b8:dd:fc:94:8a:14:36:ff:78:
                    11:0d:c2:39:b0:dd:52:7f:fe:72:c7:20:ee:0b:ff:
                    16:11:87:c6:ab:ad:00:b7:4f:86:e8:f9:ca:82:23:
                    a1:08:c3:e3:ee:85:82:02:a6:8b:ab:5d:8f:03:1d:
                    f5:76:a9:b8:a8:53:f3:82:2c:59:d0:84:39:39:67:
                    6d:3d:49:72:63:aa:3c:3f:7a:eb:25:07:1c:3d:a7:
                    e9:80:b0:55:74:68:8c:0b:3f:32:d2:1e:40:d2:38:
                    84:7d:74:75:28:28:d7:fa:d9:9d:e4:2b:67:0c:2f:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:69:8D:D1:39:78:18:EF:C3:38:1D:F2:4D:E2:2A:66:39:6A:68:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/81698DD1397818EFC3381DF24DE22A66396A68A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.232.0/22
                  168.197.64.0/22
                  186.226.48.0/21
                IPv6:
                  2804:9a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262979

    Signature Algorithm: sha256WithRSAEncryption
         39:b9:b0:9d:97:4f:3f:cd:ff:58:f5:d9:15:c3:24:7c:ac:7f:
         22:ba:b8:fa:d6:0d:22:e1:29:94:7b:77:d9:72:fa:e3:b8:14:
         3c:04:76:7d:50:b5:87:bd:da:6a:ba:e7:4a:d9:a3:48:a1:51:
         28:0d:65:82:95:03:74:f1:d2:cc:fb:4a:d3:58:2e:b3:33:8e:
         ce:4f:9b:84:6b:8f:d1:1e:1f:25:4e:bb:d1:88:ef:19:b2:37:
         11:68:71:f1:65:21:5e:6f:18:b2:57:ee:36:bf:5d:c8:5c:54:
         ab:c6:1b:50:80:60:b7:34:2b:53:8e:fe:85:2a:4c:0a:39:41:
         2b:d4:ad:0a:42:a4:bb:d4:e1:74:70:cf:fe:a9:34:7f:27:fa:
         e8:f7:07:3d:49:4f:0e:82:5a:c5:be:ea:96:de:db:92:a3:7d:
         2e:06:6c:c0:2e:77:d4:be:77:6c:e7:2b:ae:eb:4f:18:18:97:
         66:42:9b:d2:9b:79:f1:22:4e:63:46:80:1c:f3:79:22:8e:24:
         2a:09:3e:f9:ee:42:b0:2a:7e:79:69:38:77:59:e0:c2:28:68:
         bb:37:3b:8e:2f:00:31:22:48:41:89:a0:31:5d:bb:72:09:1d:
         81:be:86:0c:6d:0a:88:d3:3c:f7:56:6a:37:dc:f1:2e:e8:dd:
         db:da:69:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:18 2024 by rpki-client on console.sobornost.net