Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C8ED0AD1A994310EB3CA029E137A65286B18C31C.cer
File:                     C8ED0AD1A994310EB3CA029E137A65286B18C31C.cer (raw, json)
Hash identifier:          +zgsdjTo276zrI77D+vG9em1+HSNPb174imNvbwP+pQ=
Subject key identifier:   C8:ED:0A:D1:A9:94:31:0E:B3:CA:02:9E:13:7A:65:28:6B:18:C3:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06664484E3BD6DF054A0934393DB1886B01D31CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/C8ED0AD1A994310EB3CA029E137A65286B18C31C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Sep 2024 18:51:26 +0000
Certificate not after:    Mon 22 Sep 2025 18:56:26 +0000
Subordinate resources:    AS: 269668
                          IP: 45.191.28.0/22
                          IP: 2804:6814::/32

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 23:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:66:44:84:e3:bd:6d:f0:54:a0:93:43:93:db:18:86:b0:1d:31:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 23 18:51:26 2024 GMT
            Not After : Sep 22 18:56:26 2025 GMT
        Subject: CN=C8ED0AD1A994310EB3CA029E137A65286B18C31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:41:fe:e7:0f:56:25:ff:4c:19:b9:c3:65:
                    bb:94:a9:54:11:51:74:d6:1f:f9:c2:f7:3c:4c:b9:
                    a9:08:60:69:06:f8:3b:80:7a:f5:09:fd:9a:a8:43:
                    bf:2d:c8:b0:4f:cb:ab:8f:9e:a2:24:fc:91:06:7f:
                    a4:68:4a:03:2b:4e:aa:ae:e0:c4:46:f3:f9:f7:e9:
                    5b:ba:35:b2:38:cc:2f:71:c8:42:a6:49:37:ac:73:
                    2f:72:b5:09:3a:19:48:24:75:e0:e2:07:6a:ac:7e:
                    ec:2e:e0:66:9b:99:67:04:88:7a:73:cf:4a:df:ec:
                    41:06:5c:eb:88:87:ab:11:d6:47:69:c4:70:ab:6c:
                    a8:71:8a:0c:29:b6:e0:0a:df:f9:fa:c0:70:6d:d4:
                    32:28:c7:87:df:87:07:c7:da:ad:db:8d:de:90:95:
                    eb:ff:4d:5e:6a:c0:2b:7a:33:2e:70:c9:80:39:ee:
                    9c:5f:a8:7f:3e:0e:27:95:36:21:f8:3d:df:30:d4:
                    37:d5:72:64:69:c6:ec:97:c2:af:49:82:05:c2:af:
                    54:6c:8c:cb:9d:a6:aa:3c:d1:8f:30:1f:3c:ff:a8:
                    0e:83:35:a5:96:a5:e1:4a:49:0e:95:da:96:74:16:
                    0b:21:3d:65:34:d7:f2:f2:c1:ea:84:c3:28:02:e5:
                    e7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:ED:0A:D1:A9:94:31:0E:B3:CA:02:9E:13:7A:65:28:6B:18:C3:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/C8ED0AD1A994310EB3CA029E137A65286B18C31C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.28.0/22
                IPv6:
                  2804:6814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269668

    Signature Algorithm: sha256WithRSAEncryption
         23:16:42:a7:45:35:be:4e:85:a5:cc:ac:96:1f:7d:ff:81:05:
         96:d4:ca:a2:36:2d:58:9d:f9:82:61:c7:b5:f9:f4:c6:dc:ae:
         3e:16:c2:1f:2b:35:b0:bc:71:71:2a:47:f6:56:92:a3:48:de:
         80:a2:48:6a:11:44:59:d5:2b:8e:b4:b7:cf:e5:8a:7e:e4:cf:
         6e:34:7d:a2:e4:6e:07:02:f5:e5:ca:dc:a1:ff:d9:b6:f2:50:
         4d:fa:a7:fe:71:68:4a:92:e2:c4:a4:c7:ad:5f:cf:b5:36:e6:
         e0:22:0d:b1:6d:93:ff:be:f5:ae:2c:f9:a3:df:44:a9:40:93:
         c6:4f:18:f6:9f:ef:f0:5a:54:6d:d3:fb:da:94:5a:0c:99:be:
         4a:6f:08:49:85:c5:33:df:58:f6:b2:cd:04:3b:8b:6d:89:3c:
         de:25:f2:8f:21:7e:ff:b9:aa:82:ab:02:be:f5:79:2f:41:a6:
         1d:dd:e0:7b:39:2f:4f:f8:fe:ef:f1:fa:0b:bc:03:a4:a2:9c:
         be:41:9b:66:e1:66:26:16:71:f5:7b:f4:b9:89:1f:73:1a:b3:
         08:3e:45:b4:fd:02:93:9d:70:4e:ad:f5:fd:bb:65:7c:6d:54:
         07:43:ac:86:e4:cd:da:e5:f7:cf:de:0f:0e:8a:40:79:7f:ae:
         e7:c3:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 01:31:57 2024 by rpki-client on console-ams.rpki-client.org