Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer
File:                     31037FF040C22F66E096B2D5B9EB165D6398002D.cer (raw, json)
Hash identifier:          d7QQ0tUxIwWKquW1jtggp0sMl01AJy3DYm1HilaOCfw=
Subject key identifier:   31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79D319F337C371E4667033B258851F5D0CB2D573
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/31037FF040C22F66E096B2D5B9EB165D6398002D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Oct 2024 19:58:43 +0000
Certificate not after:    Wed 22 Oct 2025 20:03:43 +0000
Subordinate resources:    AS: 269667
                          IP: 45.191.60.0/22
                          IP: 2804:680c::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 00:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d3:19:f3:37:c3:71:e4:66:70:33:b2:58:85:1f:5d:0c:b2:d5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 23 19:58:43 2024 GMT
            Not After : Oct 22 20:03:43 2025 GMT
        Subject: CN=31037FF040C22F66E096B2D5B9EB165D6398002D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:9c:31:9f:bd:bd:e1:3b:76:59:08:77:1e:
                    7d:27:da:09:2d:d3:e8:8b:b0:71:96:bd:cf:52:d6:
                    bd:23:57:06:22:f0:23:87:43:2a:70:c9:6c:c6:53:
                    9d:dc:96:f6:ba:8f:99:c6:28:1b:a4:8d:95:34:5e:
                    63:bc:b3:9b:29:66:99:bc:1e:b2:c6:7e:65:1c:f3:
                    d4:8e:b0:54:08:03:1d:1c:f0:ce:f9:41:55:5b:3d:
                    bb:c9:25:69:c8:9a:ad:2f:6f:a8:01:27:8d:2b:f2:
                    3c:a8:81:ea:7f:17:07:c6:e5:57:be:d8:f8:c2:32:
                    04:e5:49:01:76:7f:d0:9f:ab:42:c1:d1:c7:4a:c3:
                    80:45:46:eb:da:2b:c7:96:0e:df:cf:fd:2d:d4:ce:
                    0d:19:23:2c:d8:de:64:aa:4e:70:e6:f5:f2:65:66:
                    24:ca:e5:07:24:8a:57:37:60:58:b0:bb:8c:c3:7f:
                    7d:65:65:52:f6:f2:9b:15:d6:cd:cf:1e:d7:b0:e7:
                    00:10:46:46:64:b9:94:1b:1c:64:b4:ca:a8:99:16:
                    b6:13:ef:a3:99:06:48:52:f4:68:85:c2:2e:15:bf:
                    ae:64:2c:4d:13:f7:b9:b6:7e:e0:e0:37:49:3e:04:
                    98:08:f2:ac:17:d5:c8:f1:ed:28:70:f2:27:e4:ed:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/31037FF040C22F66E096B2D5B9EB165D6398002D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.60.0/22
                IPv6:
                  2804:680c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269667

    Signature Algorithm: sha256WithRSAEncryption
         81:ab:2b:f3:eb:1a:69:27:d0:e5:db:a5:56:c2:37:8f:54:b0:
         ad:b4:a2:f8:ce:c5:a4:ce:cc:2b:8d:66:f8:19:47:f6:b4:1b:
         40:6a:e8:3b:e8:05:81:03:6c:5c:c3:46:45:d1:3d:0f:8e:3f:
         1c:a7:13:c1:3c:6e:e8:22:44:31:c4:86:f0:f9:9c:1b:89:d5:
         6a:f4:af:5a:de:31:95:27:69:f8:71:42:c7:81:1f:0d:67:29:
         4d:aa:87:21:2c:e0:09:3d:81:39:74:c8:80:e4:9f:2d:2e:9a:
         3e:eb:b0:32:c7:85:92:57:88:77:b1:da:91:35:30:e0:94:72:
         e6:80:cc:5a:57:86:9b:2b:8f:84:da:35:f9:1f:75:e7:26:fe:
         47:be:ca:60:f5:96:5f:50:a9:a6:d0:f3:f7:fc:57:6f:2c:f7:
         20:7a:57:ae:74:0f:ce:fe:95:91:5d:dc:2f:17:2a:33:d9:0b:
         ee:9b:6d:13:ba:e8:4a:ba:e4:26:7a:d0:4d:0c:de:1c:59:b8:
         c4:c1:19:0e:fa:ff:d3:0c:b5:10:bc:79:10:f0:cf:93:47:1e:
         c6:05:86:32:de:51:21:43:dd:24:aa:f4:28:a8:b5:5c:34:5c:
         a7:8c:7e:67:ee:75:5d:f1:a7:bc:54:9c:c6:50:9a:b2:e5:a6:
         d1:11:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 03:28:41 2024 by rpki-client on console-fra.rpki-client.org