This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0873205C68272A68D7D979973916FCB554CA0816.cer
File:                     0873205C68272A68D7D979973916FCB554CA0816.cer (raw, json)
Hash identifier:          Ewi8fIPtHazS6TTQutu7NAJjZZD9khG+vZuMtRWjPy4=
Subject key identifier:   08:73:20:5C:68:27:2A:68:D7:D9:79:97:39:16:FC:B5:54:CA:08:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       FBA107962EA9F7BE9686D97515D9A835776078
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/0873205C68272A68D7D979973916FCB554CA0816.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Jul 2025 23:55:05 +0000
Certificate not after:    Sat 04 Jul 2026 00:00:05 +0000
Subordinate resources:    AS: 263411
                          IP: 179.97.24.0/21
                          IP: 2804:15cc::/32
Validation:               Failed, certificate revoked on Mon 07 Jul 2025 17:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fb:a1:07:96:2e:a9:f7:be:96:86:d9:75:15:d9:a8:35:77:60:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  4 23:55:05 2025 GMT
            Not After : Jul  4 00:00:05 2026 GMT
        Subject: CN=0873205C68272A68D7D979973916FCB554CA0816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:19:ee:89:a4:02:a0:63:da:e6:47:7e:f7:
                    4e:1e:b9:f0:01:3e:d9:e1:02:64:d8:54:bf:b8:ae:
                    d0:4f:f5:88:d6:b2:a6:8c:2b:08:c9:2a:eb:fa:ea:
                    90:9d:ab:0a:91:7b:19:8f:da:98:92:3b:04:7c:57:
                    59:53:8f:2b:4f:75:c4:93:7c:e2:26:ba:36:13:b8:
                    6e:4b:6e:64:2f:84:2e:2f:b3:f6:51:cc:5d:4e:73:
                    4c:cf:0b:c3:ef:1f:f0:d6:b5:80:00:5a:79:54:0b:
                    1c:5e:df:7d:ee:0a:ad:48:88:c6:be:01:4a:8c:b8:
                    e8:7d:3b:e2:f8:ea:e5:58:cc:57:b6:2c:59:b3:29:
                    3b:c4:94:83:69:54:c7:89:93:34:c6:b5:6c:29:33:
                    23:76:e1:2f:54:e1:3d:57:69:41:f0:2c:73:ac:61:
                    19:42:77:90:6c:ec:5d:0f:15:6e:a4:eb:18:a5:85:
                    11:3d:bd:fc:10:ab:ff:f3:8c:95:c4:a1:6a:df:98:
                    44:05:ca:7e:d3:da:91:37:43:0d:c2:8b:7f:66:92:
                    a8:dc:dd:8a:75:06:68:82:53:f1:86:f0:da:5a:22:
                    3b:b1:ac:e7:c8:01:53:a6:2a:ea:72:90:1c:59:47:
                    75:cd:f8:76:8c:63:53:96:a9:e0:d8:ce:1a:b5:82:
                    0e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:73:20:5C:68:27:2A:68:D7:D9:79:97:39:16:FC:B5:54:CA:08:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/0873205C68272A68D7D979973916FCB554CA0816.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.24.0/21
                IPv6:
                  2804:15cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263411

    Signature Algorithm: sha256WithRSAEncryption
         18:39:ed:c0:8d:f7:7e:fe:9e:85:5d:58:15:c4:df:a4:ba:f1:
         43:a5:6a:c1:65:03:75:3c:64:35:e1:41:1b:ba:74:dc:67:bb:
         ea:c1:9b:79:ad:be:df:0a:58:4a:66:31:53:02:7f:63:b2:aa:
         73:0e:dd:d6:e2:34:cd:23:cd:9b:cc:8a:ce:f5:21:30:d2:cd:
         45:b9:d7:85:2e:d4:a5:6b:64:66:37:93:1e:44:b6:fb:50:7b:
         73:0e:4c:26:69:97:48:9f:43:75:33:9e:2b:e7:4a:84:f1:2a:
         5e:36:e7:0d:79:3c:83:42:69:ce:92:39:01:32:a7:06:7d:9e:
         ad:3f:79:38:75:54:2e:93:a8:63:ff:17:97:ec:40:cb:69:0d:
         ba:fa:48:56:8e:d4:af:a5:06:3f:57:32:d9:9f:41:e8:1d:b5:
         07:cb:c8:41:aa:59:b4:70:76:0b:b2:2f:a5:ab:4c:46:64:68:
         ca:7c:fa:a0:c8:a4:39:94:26:aa:42:ae:e5:e3:d6:47:4f:55:
         4d:54:a0:1e:01:90:b0:58:6d:21:3d:5e:91:8b:fa:ed:ae:22:
         ab:17:5d:62:15:ea:df:ae:1c:a9:9b:be:2a:3a:0e:69:49:b3:
         7a:63:e3:bb:d9:42:ee:a3:41:3f:0e:07:69:b4:b6:6c:20:a6:
         1f:20:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----