Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF31193C3835054B599D8F3EC91F21735ECE5DA0.cer
File:                     FF31193C3835054B599D8F3EC91F21735ECE5DA0.cer (raw, json)
Hash identifier:          o+rL+ifM06phQVMkG/EiyQjjyiqAKPpuKmPI43Bf37Y=
Subject key identifier:   FF:31:19:3C:38:35:05:4B:59:9D:8F:3E:C9:1F:21:73:5E:CE:5D:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A0C0916084149B171FCDFD3E98F62C6FFB5CAF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/FF31193C3835054B599D8F3EC91F21735ECE5DA0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Sep 2024 14:55:08 +0000
Certificate not after:    Thu 25 Sep 2025 15:00:08 +0000
Subordinate resources:    AS: 267108
                          IP: 45.229.108.0/22
                          IP: 2804:4844::/32

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 08:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0c:09:16:08:41:49:b1:71:fc:df:d3:e9:8f:62:c6:ff:b5:ca:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 26 14:55:08 2024 GMT
            Not After : Sep 25 15:00:08 2025 GMT
        Subject: CN=FF31193C3835054B599D8F3EC91F21735ECE5DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:da:29:08:67:54:b3:89:57:60:bd:b0:4c:
                    1e:2e:e1:ef:2b:af:17:e8:14:28:ec:68:94:7b:07:
                    f0:1e:c0:68:1f:f7:2b:03:ac:50:c4:b7:36:51:40:
                    12:cc:c1:25:7e:4a:57:4d:0c:7b:9c:27:f6:4f:8e:
                    0a:c8:fb:a8:66:a4:68:66:38:9f:d3:d7:c8:26:5d:
                    a5:53:8e:a9:4c:7b:52:27:91:f9:c1:6f:5c:90:ec:
                    4b:34:9d:14:f7:49:31:bb:bd:85:8a:89:94:26:be:
                    ac:97:61:a3:8b:8f:a3:43:42:8d:f6:81:b1:e8:e2:
                    cf:69:03:18:c6:da:dd:f8:d9:23:38:9c:8b:98:59:
                    66:6d:94:31:c5:1a:36:44:b6:8b:24:a6:db:3b:3c:
                    91:3f:c7:f2:c6:6a:d0:46:04:7b:57:06:69:ff:d8:
                    f3:94:35:f0:5e:47:51:26:2e:d3:6e:67:65:ba:64:
                    09:43:65:b4:a5:80:d7:67:13:00:f4:56:3f:40:c0:
                    9b:b3:5b:f3:9c:eb:73:bb:c2:e6:3f:94:5b:f5:0f:
                    9c:8f:67:1d:3b:0b:59:37:ed:b9:3a:3e:75:c1:34:
                    cd:2e:b7:d6:ce:39:70:f5:40:4a:9f:2f:6d:e0:10:
                    b5:b5:99:bd:87:4e:71:99:1a:a3:d5:6f:af:90:c7:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:31:19:3C:38:35:05:4B:59:9D:8F:3E:C9:1F:21:73:5E:CE:5D:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/FF31193C3835054B599D8F3EC91F21735ECE5DA0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.108.0/22
                IPv6:
                  2804:4844::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267108

    Signature Algorithm: sha256WithRSAEncryption
         c6:8d:91:67:0b:4e:66:3f:6e:0e:c4:e8:9f:bf:af:3d:03:8b:
         19:26:5c:cc:5f:2c:e1:e7:6b:21:bc:a3:36:41:ec:19:b2:f9:
         df:41:8c:59:b8:2c:c3:7e:3f:89:48:c8:15:9b:b5:ae:17:1c:
         88:c8:64:c6:04:c3:7f:fe:14:b3:02:54:c0:65:90:ae:c9:f1:
         c8:ad:f3:82:ea:c6:40:81:1a:66:ac:5c:c9:35:a1:b8:c9:a6:
         14:ef:75:dd:ee:a2:61:80:5b:50:d2:94:b9:70:46:05:eb:1a:
         03:6c:93:90:22:c8:04:4c:2e:db:e4:49:4c:7e:f8:b2:21:ae:
         d6:77:4b:f1:d3:eb:ac:79:34:67:0b:dc:f5:40:94:af:a4:f7:
         db:d3:a9:75:e2:c0:75:17:00:80:3c:9d:7d:95:c0:c2:16:51:
         29:48:83:58:23:dc:2c:74:3e:95:09:7f:63:1b:6e:04:28:6b:
         49:7e:70:a3:44:a9:e2:56:5d:75:b1:0e:b6:95:f1:a2:23:3d:
         a6:11:3b:b9:58:a3:55:a5:ad:77:dd:98:ae:38:69:a6:78:29:
         f5:11:f4:2d:5a:ba:ba:a2:8c:8b:c1:5a:9a:a5:e6:9d:7b:1d:
         e7:7c:70:b7:1e:29:b4:71:25:1d:60:b3:f0:78:d4:ee:a5:5e:
         1c:9a:a1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 12:38:00 2024 by rpki-client on console-ams.rpki-client.org