Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
File:                     FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer (raw, json)
Hash identifier:          A4paqreYJbQrioWS7pZqwudXCxIsSg3itrTelSEv8G8=
Subject key identifier:   FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17E8199DB640FAB988EA3775FDBD982857E34D17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 21:17:38 +0000
Certificate not after:    Mon 03 Mar 2025 21:22:38 +0000
Subordinate resources:    AS: 263661
                          IP: 45.179.86.0/23
                          IP: 168.205.124.0/22
                          IP: 177.221.56.0/22
                          IP: 187.63.236.0/22
                          IP: 2804:1128::/32

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 07:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e8:19:9d:b6:40:fa:b9:88:ea:37:75:fd:bd:98:28:57:e3:4d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 21:17:38 2024 GMT
            Not After : Mar  3 21:22:38 2025 GMT
        Subject: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:98:31:fa:6c:f7:90:68:2e:7c:c2:70:71:a0:
                    75:6a:6b:f2:7e:d6:fe:1b:66:f3:f8:06:51:aa:5a:
                    b3:0f:33:84:3c:9e:c1:1a:00:18:45:ca:80:b5:a4:
                    8a:b3:29:d4:4c:fa:97:d2:61:bc:0e:1c:54:e0:90:
                    7f:8d:de:eb:48:f2:2b:26:13:a1:44:3c:ba:b2:ea:
                    9e:65:b6:31:7b:e0:0e:ca:13:0f:d6:a5:82:d4:ae:
                    71:09:6e:b5:50:0e:76:07:c7:d8:eb:30:cd:bf:87:
                    a2:5b:3e:5d:eb:04:a0:3e:5e:03:9b:54:9e:46:00:
                    2c:c0:7f:79:f7:0c:20:37:ae:9f:83:2c:70:bc:3a:
                    89:ef:8d:89:dc:15:ab:60:8a:0f:82:9d:9a:27:d7:
                    8a:cd:75:6a:2e:d2:66:4c:20:33:d9:58:6e:bc:54:
                    6b:b9:50:d8:dc:05:21:40:d2:eb:4a:1c:35:7e:14:
                    67:10:c0:62:93:83:94:22:df:03:d7:16:f9:84:f8:
                    c5:7c:d9:e7:37:8e:a4:a5:5d:0e:e6:47:d8:7b:4a:
                    5b:87:39:b6:d9:cc:ca:64:a0:df:36:32:ff:92:ba:
                    9a:3f:46:29:d3:ae:0e:bc:4c:e5:c9:5b:70:34:c1:
                    41:33:d5:af:78:a0:55:a0:1a:36:01:83:18:17:91:
                    81:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.86.0/23
                  168.205.124.0/22
                  177.221.56.0/22
                  187.63.236.0/22
                IPv6:
                  2804:1128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263661

    Signature Algorithm: sha256WithRSAEncryption
         4d:2c:e3:98:4a:2a:e7:57:2e:40:43:a7:7f:d4:7d:e7:cf:04:
         73:9e:53:f7:8d:fd:9a:27:6e:a7:e5:d2:03:28:99:54:67:19:
         8e:98:40:2e:10:65:a4:08:39:ea:1f:59:c2:85:42:72:db:0e:
         35:8a:d0:e9:67:98:a6:bf:52:35:89:d5:7d:fb:6b:25:32:ef:
         ef:2d:d0:1c:48:d4:3f:ef:05:b6:13:4b:78:3e:6d:d5:50:d8:
         7a:bf:69:68:a5:24:c5:a9:27:ed:6c:6f:7b:51:ed:d2:70:fe:
         0d:09:e9:89:fe:7f:79:23:a2:fc:e0:4f:06:a5:06:de:d5:8b:
         37:82:f6:ca:ab:e5:45:51:b5:03:06:7d:ea:3a:40:c7:84:b6:
         92:a5:17:c9:73:52:94:27:f1:55:1e:58:01:22:ee:3d:b3:d2:
         e3:ca:ec:8f:8f:ec:e9:55:b1:c0:80:90:94:bd:54:b3:2e:33:
         43:41:b2:62:cb:55:22:87:6e:8c:4b:c4:0c:c7:a2:01:d2:6d:
         76:f0:af:ba:b0:67:4d:04:ca:9e:b0:cb:81:30:91:22:c3:f6:
         33:db:c5:ee:1a:a6:e9:3b:71:1e:3f:89:60:68:3b:0e:48:3a:
         f2:eb:60:db:f9:a1:66:de:70:9f:98:fc:3d:e1:1b:75:82:9f:
         9f:db:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 10:48:17 2024 by rpki-client on console.sobornost.net