This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60F3BCFB765685597657D6F6D44B454867570BEC.cer
File:                     60F3BCFB765685597657D6F6D44B454867570BEC.cer (raw, json)
Hash identifier:          7FvHbX5XGp1Hxf60Lb6QORlKGqoMlNB3f88FgHOQFNg=
Subject key identifier:   60:F3:BC:FB:76:56:85:59:76:57:D6:F6:D4:4B:45:48:67:57:0B:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E80EE50E83EBB3FCD4A4B00281FF18EE74A3D2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/60F3BCFB765685597657D6F6D44B454867570BEC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Jul 2025 20:40:41 +0000
Certificate not after:    Thu 16 Jul 2026 20:45:41 +0000
Subordinate resources:    AS: 268836
                          IP: 45.174.28.0/22
                          IP: 2804:5b58::/32
Validation:               Failed, certificate revoked on Fri 25 Jul 2025 03:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:80:ee:50:e8:3e:bb:3f:cd:4a:4b:00:28:1f:f1:8e:e7:4a:3d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 17 20:40:41 2025 GMT
            Not After : Jul 16 20:45:41 2026 GMT
        Subject: CN=60F3BCFB765685597657D6F6D44B454867570BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:52:1d:6a:40:4f:bd:4b:41:42:90:34:cd:
                    66:e8:99:4c:e6:c2:13:cb:f6:1c:ea:67:59:ab:82:
                    4a:35:0b:fe:dc:31:05:6c:ae:b0:3d:01:a1:03:38:
                    7b:0c:e6:5a:0e:5a:a3:ef:66:be:5b:ff:62:90:43:
                    7f:08:3b:fe:34:e1:13:44:ee:a1:2a:d7:cd:15:51:
                    ab:34:18:cb:32:3b:2c:97:a7:8a:86:28:22:b2:9f:
                    f4:ce:65:e7:7e:0e:16:05:14:46:49:99:4d:d1:b3:
                    25:3b:f1:10:8d:08:05:67:3c:31:98:46:57:bc:db:
                    57:ec:a6:1e:2e:eb:c2:99:64:58:43:5d:30:82:67:
                    8f:e4:b3:5d:82:a0:e6:87:16:60:23:14:9f:34:50:
                    99:00:2b:9b:fa:17:31:88:72:44:6b:90:e3:2a:2a:
                    c4:88:ce:06:2f:ab:39:2b:eb:c0:85:68:de:19:2b:
                    44:66:b0:1c:6e:a8:5f:18:14:7b:ee:68:4d:a1:07:
                    25:38:88:6e:ff:8d:20:3f:bd:3c:90:60:be:3a:d6:
                    18:9b:e8:a8:78:ef:35:37:83:f8:f0:22:58:fe:73:
                    69:2f:69:cd:2b:43:e6:9c:64:ff:6e:bd:38:54:21:
                    51:a5:5b:1c:c6:19:d5:b2:c8:ae:1a:1b:3b:e7:38:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:F3:BC:FB:76:56:85:59:76:57:D6:F6:D4:4B:45:48:67:57:0B:EC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/60F3BCFB765685597657D6F6D44B454867570BEC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.28.0/22
                IPv6:
                  2804:5b58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268836

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:2b:93:fb:91:22:21:b4:da:42:2a:20:46:1f:c5:ca:34:
         9f:91:e6:bf:5b:f0:ad:2a:21:7a:0e:ec:cc:34:9a:6b:fd:9c:
         f5:63:9a:8d:5d:2b:48:0e:e8:9a:f1:c2:6c:13:a9:43:25:f3:
         bc:1e:07:4a:68:dd:74:49:78:76:4e:e7:a9:cb:e1:54:ea:53:
         36:59:64:cf:d1:b2:d9:5e:95:65:be:20:80:28:46:3c:72:eb:
         b6:1a:e1:53:2d:68:05:00:5d:3f:da:ae:75:bb:93:69:11:bd:
         6f:e6:7d:46:03:dc:7e:76:76:6b:9b:f2:31:57:22:65:92:31:
         23:c3:b8:e9:f2:38:7a:fc:8d:a8:fd:16:1d:08:6c:b9:28:bb:
         a4:65:2a:e6:56:18:9f:85:22:9f:e4:2c:02:66:68:9b:39:09:
         6d:45:4d:79:fc:de:6a:e3:98:ba:b5:09:1c:83:70:d5:f0:9a:
         d6:bb:a3:e4:7a:00:f7:6b:92:85:24:a9:08:5b:a5:7b:06:d5:
         a8:5c:51:99:7b:14:30:65:5b:c9:14:64:e8:2f:9c:cd:88:9a:
         70:7a:ab:c6:7a:6e:e6:8e:96:a6:b4:51:f3:ec:8e:84:c7:92:
         68:ae:88:76:d3:4f:c4:f4:7d:e3:fc:21:98:0a:67:31:48:99:
         f0:ce:fc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----