Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/31824DF561899EA9333BAACB7BCC190EB33175A7.cer
File:                     31824DF561899EA9333BAACB7BCC190EB33175A7.cer (raw, json)
Hash identifier:          9vuo2wPMH6K7FiohA3f7KCd3MftEtafQh/Z6HctMNp0=
Subject key identifier:   31:82:4D:F5:61:89:9E:A9:33:3B:AA:CB:7B:CC:19:0E:B3:31:75:A7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7FD878226890C95AE0D80194333EC4BF809670F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/1/31824DF561899EA9333BAACB7BCC190EB33175A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:56:29 +0000
Certificate not after:    Wed 02 Apr 2025 19:01:29 +0000
Subordinate resources:    AS: 263129
                          IP: 177.155.84.0/22
                          IP: 2804:172c::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d8:78:22:68:90:c9:5a:e0:d8:01:94:33:3e:c4:bf:80:96:70:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:56:29 2024 GMT
            Not After : Apr  2 19:01:29 2025 GMT
        Subject: CN=31824DF561899EA9333BAACB7BCC190EB33175A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f9:df:a9:1c:2e:67:80:f0:c2:33:d9:aa:07:
                    3c:34:e0:0e:45:8e:1b:e0:39:45:82:5d:2e:52:74:
                    39:2c:f5:99:8d:d0:23:d0:f6:fe:68:63:05:90:95:
                    59:8f:11:6c:a7:3d:6f:7b:c2:ed:d5:50:35:6a:96:
                    6f:92:8e:da:3a:30:71:56:be:db:08:69:3f:25:06:
                    43:c9:09:9c:e2:cc:e6:7b:d9:98:42:34:c8:b3:0e:
                    81:7a:bf:89:d7:f0:9a:9a:27:1b:18:cd:f7:29:32:
                    ca:04:60:a7:d4:e1:1f:34:d4:43:69:2c:d8:03:ac:
                    5f:98:d8:48:71:91:93:f2:9a:97:ec:dc:2f:f1:fe:
                    21:40:38:a9:cf:e4:94:bf:17:2e:2c:51:0d:c3:c9:
                    40:4c:6e:7f:c5:9c:61:cc:93:e4:d6:b7:c2:74:15:
                    1d:d6:24:98:97:31:4f:78:cb:ff:28:9b:2a:e8:e3:
                    ae:68:53:b5:eb:7b:36:da:e8:90:33:e9:8c:43:72:
                    c5:de:a6:3d:5c:80:a9:31:fa:29:b0:ec:41:13:09:
                    cb:47:17:e5:58:2f:4f:df:c3:9f:73:2b:1f:8b:cd:
                    4e:ba:01:c5:3e:e7:7d:a9:7c:d9:46:11:30:f4:b2:
                    68:d9:85:18:45:46:f2:a4:48:30:14:49:65:16:86:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:82:4D:F5:61:89:9E:A9:33:3B:AA:CB:7B:CC:19:0E:B3:31:75:A7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/1/31824DF561899EA9333BAACB7BCC190EB33175A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.84.0/22
                IPv6:
                  2804:172c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263129

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:cf:e1:e1:04:93:46:3e:67:c7:ec:50:a3:88:b0:80:19:
         2c:d4:90:c2:85:51:7e:17:72:ad:b9:fb:bd:1e:77:07:5b:f9:
         f5:a7:c5:33:f9:ab:59:fc:f2:28:b9:9b:33:69:b0:9b:ae:fb:
         1f:25:f4:e6:5f:34:a3:4a:05:89:1f:7c:59:93:94:f0:c3:b2:
         d1:73:80:58:fd:d8:18:34:45:d7:fd:dc:73:ab:b1:29:40:7a:
         ed:03:b7:35:a7:bb:c9:60:80:f4:e1:d2:fb:a7:47:de:fe:c2:
         2c:9c:4b:52:b9:57:2f:03:7e:62:30:40:89:19:23:16:ac:de:
         1b:2b:03:82:e4:82:38:ad:82:5d:8b:97:1a:8c:17:8c:5c:9a:
         d7:95:8b:0f:b9:a7:6a:bb:ae:ce:a1:59:84:50:3c:17:02:70:
         c9:e8:40:c1:cb:48:da:f6:b8:df:d1:dd:b3:c7:be:c4:08:8f:
         97:74:6e:3c:70:1a:ea:1d:83:be:04:59:61:db:0b:cc:e5:a0:
         13:6a:68:d5:3c:57:5d:22:0e:0b:80:83:49:23:db:47:b8:23:
         60:5d:7d:b0:fe:f9:d3:59:08:ce:ff:f7:ad:e1:43:cb:36:85:
         a1:d6:c7:82:5e:fc:0e:12:ec:ad:ae:f0:6c:5f:8e:31:f0:8c:
         a6:be:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org