Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/941DE780A8E93B929D00D03565112A1AE840E539.cer
File:                     941DE780A8E93B929D00D03565112A1AE840E539.cer (raw, json)
Hash identifier:          p63R/PFVvuLgj+fjhnUdlc1GYB3a1CZncZmnKeylx7k=
Subject key identifier:   94:1D:E7:80:A8:E9:3B:92:9D:00:D0:35:65:11:2A:1A:E8:40:E5:39
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43ADEB9BEE5D9460EB0D925EFF2408A897786711
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/941DE780A8E93B929D00D03565112A1AE840E539.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 Apr 2024 01:49:54 +0000
Certificate not after:    Sat 19 Apr 2025 01:54:54 +0000
Subordinate resources:    AS: 269034
                          IP: 45.178.108.0/22
                          IP: 2804:5e74::/32

Validation:               Failed, certificate revoked on Sat 20 Apr 2024 03:14:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ad:eb:9b:ee:5d:94:60:eb:0d:92:5e:ff:24:08:a8:97:78:67:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 20 01:49:54 2024 GMT
            Not After : Apr 19 01:54:54 2025 GMT
        Subject: CN=941DE780A8E93B929D00D03565112A1AE840E539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:c0:6f:e6:d8:d2:55:74:1a:29:aa:37:ed:
                    80:e1:fb:ed:04:b8:86:43:ad:95:8d:bd:c8:7b:f6:
                    17:9f:81:7b:d4:67:dc:45:20:4e:54:c5:d4:a7:21:
                    ce:b0:22:f9:9f:2c:a5:a0:33:2d:9f:96:65:96:ca:
                    9a:76:c8:2a:12:9e:a7:fe:09:d5:aa:6c:78:90:8c:
                    49:b1:8e:e7:e9:53:f1:20:d9:f5:e6:82:4d:16:de:
                    8c:d6:ea:89:3f:c8:5a:e4:db:33:8d:d0:18:35:56:
                    26:ae:5c:dd:f5:50:c1:61:d9:40:0d:d1:1b:85:1b:
                    37:90:3f:bd:4b:9f:a4:b1:e9:a6:aa:6d:57:db:87:
                    9f:9f:fd:69:72:51:94:b5:da:2a:3d:82:e1:88:6e:
                    c8:ee:76:15:90:88:ab:68:f1:a3:17:af:18:e5:d3:
                    a6:b4:79:3f:ae:2e:f2:ea:27:e4:3f:fb:66:f3:00:
                    46:41:fd:f7:75:d3:6d:40:bc:59:bf:ae:0d:4e:c8:
                    e0:f1:b6:a8:95:5e:bd:1c:93:f6:ea:28:9b:b0:b3:
                    0d:20:af:6e:20:7c:48:04:4a:ff:75:69:5f:d8:b3:
                    d1:43:a6:2d:b4:b8:d1:03:0a:5c:ea:af:16:04:a9:
                    97:a4:1e:6e:20:fa:4a:45:69:69:f9:69:04:ca:03:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:1D:E7:80:A8:E9:3B:92:9D:00:D0:35:65:11:2A:1A:E8:40:E5:39
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/941DE780A8E93B929D00D03565112A1AE840E539.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.108.0/22
                IPv6:
                  2804:5e74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269034

    Signature Algorithm: sha256WithRSAEncryption
         2d:1c:c3:dd:93:7e:5c:89:8d:66:42:0f:89:99:d9:52:2d:1d:
         b8:06:35:2f:a5:bd:88:3d:a0:38:d9:d8:b6:5e:98:c5:ea:11:
         e3:5c:3d:e8:92:f8:b7:6c:70:82:e7:33:bc:b8:53:ef:4e:6b:
         2e:2b:c6:26:6c:e7:1e:de:b1:a6:46:11:f4:07:75:99:d6:b6:
         fb:7c:67:75:f3:4b:aa:5f:c8:a6:ac:67:30:22:e2:fb:f2:a0:
         f8:c2:6a:e7:9d:7f:ca:28:38:90:af:a9:51:cb:c3:35:88:a8:
         18:fd:74:2a:d8:82:48:42:ad:e7:6d:22:fa:3a:e9:32:38:94:
         64:6e:24:c4:ca:8c:19:f2:20:9a:00:96:94:c7:4d:74:89:56:
         42:06:b0:1f:76:23:a6:04:ec:d8:3a:9f:70:7c:2c:35:75:cb:
         a2:aa:63:62:e9:d9:20:41:f8:df:e6:df:91:3f:03:54:25:36:
         aa:bb:dc:44:32:5e:f3:3d:55:77:af:5c:76:92:d9:e9:1b:0e:
         1c:24:b3:d0:3e:d8:07:c0:91:11:cf:1b:65:62:99:4f:04:df:
         ed:04:d5:df:6c:d0:49:37:11:d5:72:9c:e2:b9:3d:f0:2a:f1:
         4c:3d:a3:b5:40:cf:71:31:f9:bf:19:3c:24:85:72:33:a8:47:
         88:2d:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 07:46:11 2024 by rpki-client on console.sobornost.net