Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.cer
File:                     CB6C6266A30903A3C0A747ABFDA7510F516400ED.cer (raw, json)
Hash identifier:          Dvjw00FWtbodJQMBPUMdDDVirriGdurfKDCFkweQ5vY=
Subject key identifier:   CB:6C:62:66:A3:09:03:A3:C0:A7:47:AB:FD:A7:51:0F:51:64:00:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       F79BE5F28DC88E2C539C1C050F627160C722C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 May 2023 23:08:10 +0000
Certificate not after:    Sat 25 May 2024 23:13:10 +0000
Subordinate resources:    AS: 11432
                          IP: 200.155.128.0/18
                          IP: 200.170.192.0/18
                          IP: 200.194.248.0/21
                          IP: 200.201.128.0/19
                          IP: 2804:138::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f7:9b:e5:f2:8d:c8:8e:2c:53:9c:1c:05:0f:62:71:60:c7:22:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 27 23:08:10 2023 GMT
            Not After : May 25 23:13:10 2024 GMT
        Subject: CN=CB6C6266A30903A3C0A747ABFDA7510F516400ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:51:ed:01:c2:44:7a:82:40:ce:a2:2f:74:
                    69:e1:4b:b8:d8:62:85:0a:92:5d:b3:ea:e1:00:50:
                    aa:20:99:43:e9:97:c2:c9:0f:df:ee:b9:c1:e1:fb:
                    a1:57:de:f4:13:91:a7:bb:73:94:1b:37:30:e0:8a:
                    1a:c8:82:56:53:fb:60:70:6e:88:8b:23:56:79:78:
                    02:22:52:5b:58:cf:bb:ec:2a:e3:52:eb:94:80:b9:
                    56:59:b3:ff:8a:85:07:bb:7c:4e:35:d7:f4:c4:6d:
                    25:99:49:2d:51:10:f0:24:d6:da:5c:eb:56:5d:61:
                    6b:9a:4a:c5:b9:c1:ac:e0:01:2c:63:90:a9:62:d4:
                    1e:47:1f:20:f8:bf:91:02:2a:ae:0c:e4:42:4a:01:
                    1a:4f:9f:bc:24:dc:81:ce:48:58:8f:d6:21:f3:81:
                    b2:2f:9a:ce:cf:89:a7:77:dc:e9:68:e9:32:f7:c4:
                    c9:41:bc:bb:73:87:9c:9c:f7:73:7e:8d:07:fe:f3:
                    a1:e1:2d:de:3e:de:55:82:73:17:aa:fd:d5:32:74:
                    10:20:0b:d9:35:69:b6:25:94:37:2f:26:c1:cc:1e:
                    fd:0e:c8:cc:e8:74:71:90:a4:03:f6:8e:9f:c9:c9:
                    a7:75:44:d5:b3:0b:26:2a:11:ae:8d:9a:56:ff:38:
                    8e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:6C:62:66:A3:09:03:A3:C0:A7:47:AB:FD:A7:51:0F:51:64:00:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18
                  200.170.192.0/18
                  200.194.248.0/21
                  200.201.128.0/19
                IPv6:
                  2804:138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11432

    Signature Algorithm: sha256WithRSAEncryption
         3c:82:8d:2a:01:f6:ec:50:e4:8f:ec:a6:bf:b1:fb:49:4a:66:
         63:3c:1a:70:d9:10:63:ac:67:ed:fc:80:36:c6:c4:3b:6e:e9:
         1d:aa:67:58:b8:7a:ca:1a:c5:6a:cd:45:61:85:62:1e:d6:0a:
         b4:21:38:e0:de:a0:56:49:48:60:b2:e5:20:bd:39:6f:d5:f5:
         13:33:f6:e3:c7:11:91:58:b3:5f:b8:a4:95:b0:9c:12:a8:12:
         90:6d:76:56:7e:e8:b3:d0:d6:ea:ec:1d:04:8e:1c:8b:37:85:
         d8:30:0a:54:f6:75:97:37:c5:4a:49:a5:c8:13:c4:5d:b9:ff:
         19:54:19:e2:2d:a2:d1:ac:f9:95:46:f6:55:93:9e:d6:92:36:
         fd:2d:9f:75:15:66:87:d7:8c:78:54:50:0e:76:1c:41:62:8e:
         33:30:32:c7:00:ba:19:77:8e:63:a7:4f:23:f1:7f:47:56:b2:
         93:82:f0:55:07:0f:8c:0c:45:d8:cb:50:d9:4d:44:78:7e:44:
         08:b9:92:df:2f:1c:5e:06:06:b1:0a:14:97:53:3f:3c:e0:ed:
         77:ec:7d:f1:a8:af:ac:da:22:78:79:ee:46:e6:fb:c6:85:6d:
         07:8c:9c:b9:61:49:65:26:04:53:b8:3d:fd:2b:cf:56:d7:c7:
         9a:61:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:29 2023 by rpki-client on console.sobornost.net