Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer
File:                     F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer (raw, json)
Hash identifier:          aQdy0jbQ/oLfexd8iy1A6QNGGqcqaTV3OWZAvwnukkE=
Subject key identifier:   F7:37:E6:09:C9:AE:95:95:DC:55:02:5F:C9:5C:8B:F6:32:44:E8:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4692729750C50C731C4D2450771A27EA88CC5FBF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 14:06:53 +0000
Certificate not after:    Mon 30 Jun 2025 14:11:53 +0000
Subordinate resources:    AS: 264162
                          IP: 138.97.116.0/22
                          IP: 2804:2370::/32

Validation:               Failed, certificate revoked on Thu 26 Dec 2024 15:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:92:72:97:50:c5:0c:73:1c:4d:24:50:77:1a:27:ea:88:cc:5f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 14:06:53 2024 GMT
            Not After : Jun 30 14:11:53 2025 GMT
        Subject: CN=F737E609C9AE9595DC55025FC95C8BF63244E8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:d1:8b:a5:5a:02:39:d6:ef:5a:a5:18:55:
                    a3:af:ba:bc:b9:8a:96:8e:78:21:df:68:07:29:43:
                    a3:af:ac:aa:47:51:19:b7:c1:e4:91:4b:7e:88:15:
                    fe:0c:c8:6c:1b:15:47:49:7b:e2:2e:c2:35:a9:c7:
                    7f:75:97:f5:aa:38:ff:78:67:72:6e:47:77:1a:94:
                    23:3b:0d:0d:64:3b:6e:1d:31:36:22:cd:03:90:b9:
                    b3:27:42:25:b3:57:08:f3:8f:3f:c3:44:9b:02:b1:
                    20:5c:57:00:c2:8a:5f:01:e4:df:d0:5b:f8:f8:cc:
                    e5:b6:91:d7:8d:20:0e:e7:f5:04:b8:78:66:c4:0a:
                    e7:c7:fb:e9:c4:3e:50:c3:ea:72:86:7a:26:94:7a:
                    81:36:07:42:61:43:59:5c:7a:a8:71:2f:f7:44:52:
                    d7:ea:17:cb:b5:a4:24:94:b8:28:d0:3d:30:aa:2f:
                    0f:d9:5d:94:86:f9:31:2a:74:b2:df:81:99:f5:27:
                    21:db:45:eb:f3:25:fa:9d:79:99:a6:fd:04:33:7d:
                    c3:ab:db:25:b7:70:21:b9:07:0f:9d:b5:38:93:98:
                    e9:f5:eb:d4:73:c8:fc:da:3a:15:05:c1:78:82:88:
                    23:b5:b9:87:4d:65:d3:0d:68:23:ee:ed:2e:6a:fe:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:37:E6:09:C9:AE:95:95:DC:55:02:5F:C9:5C:8B:F6:32:44:E8:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.116.0/22
                IPv6:
                  2804:2370::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264162

    Signature Algorithm: sha256WithRSAEncryption
         0e:7f:f2:6f:90:5b:10:e0:56:89:55:a5:b3:7b:f3:35:13:a6:
         80:ff:41:65:97:b7:92:de:15:f6:12:d9:da:79:68:33:e9:33:
         7f:9b:46:4a:2f:77:71:23:c5:ab:90:4e:48:3b:47:ae:53:73:
         07:56:fc:e5:49:3b:0d:3c:ba:02:fc:b5:b7:82:7d:9f:f6:b7:
         10:6c:59:ac:d1:76:34:16:0a:3d:6b:d9:81:2a:24:b4:fa:4a:
         e4:82:d0:3e:85:e1:00:3b:93:64:14:d9:d2:4a:db:1d:4b:51:
         61:a2:d7:87:50:de:73:4d:58:ae:8d:22:4e:2c:e6:46:f2:9a:
         92:69:81:27:70:57:fe:65:d1:15:23:6b:e0:0a:ce:ee:a8:72:
         b0:29:ec:37:a9:62:9f:a1:58:63:94:36:4d:e5:ce:47:88:f0:
         ed:f3:11:27:2c:d8:e7:47:d9:36:a4:96:30:50:3b:75:50:b5:
         75:33:d8:1c:1b:f8:71:d4:f3:9a:9a:3e:d7:da:91:fb:2d:28:
         a4:18:a6:5a:96:b9:8a:f2:1e:72:9c:e9:ea:1e:ad:4f:76:b6:
         9a:a7:31:1e:3b:f3:33:c6:79:c7:70:94:92:1a:df:c0:80:f0:
         3d:c2:cf:03:1a:1f:fb:68:12:3d:76:aa:2e:39:34:81:50:5f:
         7a:53:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 18:23:59 2024 by rpki-client on console.sobornost.net