Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
File:                     2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer (raw, json)
Hash identifier:          yZdX1zSempleNafwsIiTG/2UBtFbRUcuJRoHgL7ZSdY=
Subject key identifier:   2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D5E560E7C5ED5753DCB11355F5B710B92ED05EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Sep 2024 18:52:30 +0000
Certificate not after:    Fri 19 Sep 2025 18:57:30 +0000
Subordinate resources:    AS: 268692
                          IP: 45.165.208.0/22
                          IP: 2804:5524::/32

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 05:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5e:56:0e:7c:5e:d5:75:3d:cb:11:35:5f:5b:71:0b:92:ed:05:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 20 18:52:30 2024 GMT
            Not After : Sep 19 18:57:30 2025 GMT
        Subject: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:43:25:1c:d3:eb:2c:2c:3e:f2:9e:b0:e6:
                    81:d9:0a:94:9a:71:a7:04:d3:36:90:3c:c6:d7:ea:
                    45:d4:07:2d:8e:24:0f:95:52:6d:4e:46:31:3e:02:
                    b9:af:14:a2:5d:39:be:ab:34:53:ca:b8:5d:71:50:
                    68:f2:8a:98:ce:4b:a0:c3:e6:0e:88:d3:22:c6:3e:
                    35:ba:fb:d6:f9:85:2a:8f:65:73:12:ee:3b:82:c6:
                    cf:7b:1f:a5:87:56:8d:62:a6:a1:06:b2:2b:d3:19:
                    1b:19:e5:db:3e:57:3b:e6:92:90:88:ae:4f:a8:05:
                    73:c6:13:e8:cc:6a:de:95:61:f7:c4:15:cf:a4:dc:
                    35:2c:b9:89:43:94:8c:cc:88:65:6c:11:7f:74:34:
                    89:a3:65:87:d0:56:d6:fd:72:75:23:ad:d1:0b:09:
                    aa:5c:2e:79:cd:1a:d4:03:5e:eb:08:9f:fe:50:1d:
                    53:d7:f4:8e:b3:9e:11:4e:29:54:9a:1b:fc:7a:34:
                    de:ea:36:cb:89:9c:7d:25:60:7a:35:6a:9a:df:2d:
                    23:02:65:16:db:22:da:57:3e:df:af:f9:2c:a5:29:
                    e2:86:65:02:d7:c6:10:1d:81:03:bb:97:f0:a8:39:
                    4c:42:21:56:fd:84:12:e0:2b:ee:0a:f7:10:f7:e3:
                    4d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.208.0/22
                IPv6:
                  2804:5524::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268692

    Signature Algorithm: sha256WithRSAEncryption
         d9:74:4d:a9:c3:b3:69:f6:50:08:65:97:34:a0:49:58:e3:17:
         a9:74:83:b4:6c:72:b0:9f:1d:fc:20:91:87:e9:0a:ea:e2:b8:
         ff:c4:2d:30:6f:af:4c:a8:ae:e9:b4:06:14:19:b1:3e:36:cb:
         74:01:65:72:af:a1:e2:47:95:84:43:15:2f:b8:28:e0:1d:48:
         8a:cf:fc:20:4a:e6:ac:1d:68:68:3b:21:d0:80:25:1f:cc:3c:
         32:de:1f:0d:44:f1:e6:15:4c:2d:56:46:1d:8a:fb:5c:4a:cc:
         52:40:a5:a0:88:bd:4f:26:91:d8:8a:4e:55:a8:3a:26:bc:5b:
         fd:d0:6b:34:e4:e2:3b:b5:ce:a8:57:13:7e:3c:14:ca:18:51:
         9b:ef:8e:f0:ae:47:c8:b8:99:b0:f5:84:0a:38:2f:fb:80:fc:
         3e:03:0e:7d:aa:44:5b:4e:81:17:9d:b6:9d:7a:23:ab:e5:5b:
         c4:d4:a5:80:5b:c2:f2:9a:c2:d7:f7:60:a5:4b:28:d9:de:9c:
         0a:52:47:8f:ec:df:38:1f:42:fc:ea:6c:5e:02:69:f9:76:ef:
         4e:77:61:2e:92:b8:a2:ff:6b:fb:dc:86:a3:5e:bc:28:10:6f:
         88:c5:43:fd:01:67:59:40:34:8b:0e:dc:f2:79:9e:d2:79:22:
         07:1a:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 08:35:25 2024 by rpki-client on console-ams.rpki-client.org