Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
File:                     D2ADA57D8601634394F4D09E2D0517E3029FE940.cer (raw, json)
Hash identifier:          Zt1QyUY86l+b5dfg6ONQhi7kcoUgECux/CIMOIE588Q=
Subject key identifier:   D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5187455F5C00CE133EF78E9CED8C3071A6E98420
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 17:14:33 +0000
Certificate not after:    Fri 06 Dec 2024 17:19:33 +0000
Subordinate resources:    AS: 52759
                          AS: 61832
                          AS: 268018
                          IP: 45.165.228.0/22
                          IP: 45.236.68.0/22
                          IP: 138.122.84.0/22
                          IP: 170.81.192.0/22
                          IP: 177.38.200.0/21
                          IP: 177.39.56.0/21
                          IP: 177.53.216.0/21
                          IP: 177.66.120.0/22
                          IP: 177.72.0.0/21
                          IP: 179.96.216.0/21
                          IP: 187.60.240.0/20
                          IP: 187.84.64.0/20
                          IP: 191.6.8.0/21
                          IP: 201.148.100.0/22
                          IP: 2804:b3c::/32
                          IP: 2804:1a04::/32
                          IP: 2804:56b0::/32

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 07:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:87:45:5f:5c:00:ce:13:3e:f7:8e:9c:ed:8c:30:71:a6:e9:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  8 17:14:33 2023 GMT
            Not After : Dec  6 17:19:33 2024 GMT
        Subject: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:b1:74:82:c4:8e:91:08:43:2c:8b:ff:75:
                    16:57:ba:3c:4e:2e:00:27:9b:ae:46:72:22:eb:e0:
                    bb:5f:f2:64:9c:1f:d1:cd:96:75:da:11:8e:e3:2c:
                    66:18:d0:d8:83:26:8f:24:d2:90:fb:42:ea:60:16:
                    5b:7d:4f:5b:93:3e:75:ae:fa:fa:c0:d5:cf:09:a6:
                    a6:86:2f:2b:9d:6f:b1:e8:65:c7:73:a9:8f:5f:98:
                    0f:0c:b6:df:09:ec:5e:fa:98:2c:a1:97:0c:22:cf:
                    46:f9:f7:6c:fe:f5:68:bf:96:5a:d0:e7:83:8a:ff:
                    8a:0d:6a:72:35:c6:db:58:cc:e0:79:fe:7a:30:e7:
                    57:83:82:4c:42:cd:f7:5d:8e:36:5f:39:ba:21:1b:
                    44:ce:96:92:b5:15:1e:06:75:ca:a8:19:a3:8b:03:
                    c5:c3:ee:dd:86:eb:b8:5b:04:4d:d4:90:de:a3:6d:
                    36:d9:97:44:8f:e7:1f:1b:45:01:e5:ab:9f:cc:a3:
                    d8:99:08:99:d3:f0:45:7b:ce:df:11:4e:15:cd:91:
                    a5:be:1d:cc:a5:82:ed:2d:3a:49:a9:db:d8:85:19:
                    4e:ee:f6:4c:6c:17:b9:fb:83:c4:c6:ce:e4:7f:db:
                    12:54:7b:d3:08:36:23:60:97:12:2d:e8:62:4c:75:
                    c7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.228.0/22
                  45.236.68.0/22
                  138.122.84.0/22
                  170.81.192.0/22
                  177.38.200.0/21
                  177.39.56.0/21
                  177.53.216.0/21
                  177.66.120.0/22
                  177.72.0.0/21
                  179.96.216.0/21
                  187.60.240.0/20
                  187.84.64.0/20
                  191.6.8.0/21
                  201.148.100.0/22
                IPv6:
                  2804:b3c::/32
                  2804:1a04::/32
                  2804:56b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52759
                  61832
                  268018

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:3e:0e:84:66:9d:0b:80:7e:df:2a:92:9d:69:43:5d:27:
         d5:e2:cd:a5:74:59:15:d3:d1:7b:63:48:43:9f:1d:4a:52:04:
         6a:5b:20:72:84:df:c3:82:e8:e6:dc:96:45:b5:42:62:cf:0f:
         e9:22:56:55:ca:40:79:15:51:8d:ad:3d:34:30:aa:6b:ad:2d:
         c7:1d:78:84:dc:84:e5:d9:f4:21:ec:67:e4:b3:e7:ea:4e:89:
         59:19:93:d2:fb:db:f4:0e:3e:64:0e:b6:bf:c5:65:e5:b9:b2:
         aa:47:ce:29:36:6c:11:b3:dd:6e:9c:71:bc:70:2c:99:d4:e4:
         f5:18:de:9a:e8:d8:fa:6a:a9:6a:ae:28:b0:a0:87:40:80:85:
         95:f2:2a:68:bf:ca:68:00:c2:e4:22:e2:33:4a:34:16:b0:39:
         1a:14:c6:5e:0f:6f:b7:44:97:68:f2:ab:40:41:b8:21:5b:6b:
         59:38:11:f3:0c:99:36:95:d8:e8:86:4a:44:11:86:74:5f:d7:
         2d:53:16:03:35:64:d0:a0:60:0a:3d:dc:60:ae:c7:82:3b:af:
         c9:39:f6:34:7e:2f:37:ef:42:de:cf:b5:df:99:69:ef:6b:29:
         24:19:96:2e:ec:5c:63:39:9a:4a:6c:8c:ef:a0:c1:78:83:39:
         04:a5:41:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:28 2024 by rpki-client on console.sobornost.net