Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.cer
File:                     ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.cer (raw, json)
Hash identifier:          VEvbZOHVLAiVb6+egDfEM/H/EhpjaXwkW33VJzFs+Us=
Subject key identifier:   AD:B3:FE:91:80:4F:34:34:8D:6C:F2:26:CF:C7:CD:62:F7:1E:25:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35CC59B71C567A7FF1A5E36AB45777A967852330
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Jan 2025 19:36:09 +0000
Certificate not after:    Wed 14 Jan 2026 19:41:09 +0000
Subordinate resources:    AS: 264948
                          IP: 168.232.196.0/22
                          IP: 2804:3064::/32

Validation:               Failed, certificate revoked on Wed 15 Jan 2025 20:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cc:59:b7:1c:56:7a:7f:f1:a5:e3:6a:b4:57:77:a9:67:85:23:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 15 19:36:09 2025 GMT
            Not After : Jan 14 19:41:09 2026 GMT
        Subject: CN=ADB3FE91804F34348D6CF226CFC7CD62F71E25A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:16:86:95:47:23:06:fa:ef:3d:09:81:60:
                    08:67:fc:ab:76:d2:46:13:4e:f9:31:3e:83:9e:82:
                    b6:cf:41:0b:5b:58:26:20:f2:bc:06:f5:0a:a9:d7:
                    fe:ec:c1:0f:51:1e:5a:ec:ed:35:26:36:27:57:8c:
                    06:09:92:ae:c8:32:5c:19:db:f9:63:47:84:1f:f1:
                    8b:e5:f2:32:38:30:81:5e:cf:8f:36:a0:ba:e6:6d:
                    03:da:d3:ac:77:45:8c:bc:a4:36:76:6c:5a:d6:32:
                    f9:5b:54:ea:99:c6:79:e6:9b:ef:37:25:33:8a:ef:
                    79:1e:b2:a3:c3:ab:22:de:81:24:d3:5c:4f:0d:0f:
                    a0:e8:8e:be:5e:42:03:5f:dd:8f:64:0c:7b:0a:21:
                    a5:18:b1:09:9e:02:b0:16:86:b7:32:4e:50:8c:10:
                    ac:2e:75:30:e3:a4:ad:60:6f:c7:47:c5:18:3a:c5:
                    9f:63:fe:17:b6:f0:a1:bc:7c:e1:c2:e7:32:19:9f:
                    62:4f:0b:6b:18:c0:58:9c:f5:5f:ac:03:19:a8:f5:
                    9a:b8:ee:d0:c1:94:57:79:c3:9c:da:58:8e:3d:fb:
                    d8:cc:27:fc:56:13:ea:40:b7:ac:be:7c:d3:4d:90:
                    87:bf:bc:0b:e1:5e:49:e5:a9:8b:da:f8:1f:78:df:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:B3:FE:91:80:4F:34:34:8D:6C:F2:26:CF:C7:CD:62:F7:1E:25:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/22
                IPv6:
                  2804:3064::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264948

    Signature Algorithm: sha256WithRSAEncryption
         6a:e7:58:af:80:ae:10:f2:37:ab:67:47:0a:1b:7d:3c:28:03:
         a3:54:c6:a9:15:81:08:4f:04:ed:da:5d:33:97:95:8f:88:ed:
         f3:33:0e:5d:84:4c:56:c3:61:7a:68:af:55:25:96:fe:d8:8d:
         c9:ec:7e:82:2b:82:a8:09:ae:a2:ee:4d:ba:a3:09:4c:1a:33:
         94:84:67:64:f4:f5:bb:99:91:75:5b:b6:a7:01:94:69:62:83:
         9c:5c:a6:ef:39:6e:80:47:e4:1e:84:44:ee:3c:18:cd:72:a7:
         c3:e9:de:76:4d:62:ce:0e:11:97:f5:38:b9:96:e9:ab:6b:de:
         80:1b:63:02:f9:97:e2:45:96:19:e8:a6:cc:0a:4a:29:54:01:
         87:62:8a:4b:c9:a5:51:5c:84:ea:3b:5e:a7:97:85:33:e5:c6:
         81:9f:b7:7a:ad:48:7d:9d:38:87:e0:91:84:c7:1a:e7:f0:ae:
         72:45:77:a3:fb:ef:b2:97:15:cd:7e:be:a4:f3:b3:c6:11:d5:
         43:6b:ec:43:92:26:50:77:3b:65:cb:4c:24:e3:6f:21:14:63:
         47:0a:8f:62:96:f0:54:f1:57:76:3a:89:40:df:6b:b0:0f:3d:
         69:7e:7c:59:60:2a:6f:03:10:fe:b8:87:61:6f:7c:d7:83:d3:
         8c:32:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 15 23:20:55 2025 by rpki-client on console.sobornost.net