This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer
File:                     717380C17B82263404536494404A01EF51405E80.cer (raw, json)
Hash identifier:          3c+JGr7eUg6xERq7EA1Drcpy1vAcOpn4LabDmg9X+IE=
Subject key identifier:   71:73:80:C1:7B:82:26:34:04:53:64:94:40:4A:01:EF:51:40:5E:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       21E0275BCE02B66423A29A937DC168E3B926E56E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 May 2025 22:13:03 +0000
Certificate not after:    Fri 15 May 2026 22:18:03 +0000
Subordinate resources:    AS: 267047
                          IP: 45.227.28.0/22
                          IP: 2804:4758::/32
Validation:               Failed, certificate revoked on Fri 10 Oct 2025 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e0:27:5b:ce:02:b6:64:23:a2:9a:93:7d:c1:68:e3:b9:26:e5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 22:13:03 2025 GMT
            Not After : May 15 22:18:03 2026 GMT
        Subject: CN=717380C17B82263404536494404A01EF51405E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:4e:8d:04:d4:37:91:2d:ac:4a:02:49:1b:
                    bb:7a:ab:2e:0c:12:fc:04:19:70:da:e4:ed:2e:89:
                    5d:fc:db:94:04:24:47:4e:f3:bb:9f:f4:c2:d3:8e:
                    fb:fa:4f:90:bd:2c:48:68:86:76:a1:2f:8a:c0:67:
                    4c:8f:eb:28:d6:af:86:b9:f6:e3:85:be:c1:57:08:
                    22:fe:a5:c4:2a:5c:94:d0:7f:80:e8:3d:52:c4:ac:
                    f3:7e:f3:df:32:88:f4:b0:02:36:53:a1:b1:66:57:
                    f9:b9:03:f1:76:ac:e2:25:55:17:15:08:dd:c6:e8:
                    e2:6a:a0:d8:96:f6:e2:ea:60:e8:52:d0:65:dc:ae:
                    f4:c6:32:cd:b9:59:63:47:c6:83:e2:e2:09:8f:f8:
                    36:a7:c0:47:73:5b:65:ad:3a:e1:d6:58:1e:42:ea:
                    30:3a:53:75:4d:a7:5f:91:99:87:6c:46:a0:c5:3b:
                    a6:a0:a8:7e:b3:2c:9e:3a:73:19:c5:e8:ac:d8:ce:
                    25:5e:73:63:a4:ba:d2:e0:cb:3d:d7:0b:df:9a:bb:
                    ba:66:e1:90:0f:13:d9:34:6b:a9:c3:11:d7:3f:ab:
                    68:fe:eb:8a:42:be:ba:0f:db:8b:80:ee:1b:1a:f3:
                    a8:ce:1b:65:ad:ba:84:d0:7c:04:81:5e:63:98:f0:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:73:80:C1:7B:82:26:34:04:53:64:94:40:4A:01:EF:51:40:5E:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.28.0/22
                IPv6:
                  2804:4758::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267047

    Signature Algorithm: sha256WithRSAEncryption
         d9:55:20:d5:bb:77:76:fb:37:bc:9a:2c:54:27:96:a7:2c:13:
         43:78:07:86:84:ae:16:ec:7c:51:8b:59:9d:1e:3c:64:d6:39:
         c2:e6:be:9d:30:e5:2c:32:3b:e1:23:f1:e1:04:94:7a:9d:18:
         0a:7b:01:2b:aa:ea:51:59:c5:a6:90:ee:d1:93:da:59:dc:60:
         67:09:a8:12:48:54:b0:90:1b:95:66:7d:d5:67:35:2c:ff:27:
         5d:29:3b:a7:b1:2d:02:fb:9c:0b:7e:f5:bb:78:72:39:79:78:
         84:ec:62:51:45:14:e2:49:04:8a:69:91:5d:2a:19:8c:bf:0a:
         76:85:ef:49:74:39:dd:56:a0:1f:28:28:fe:6e:7d:10:fc:b4:
         19:12:f1:f5:f8:e0:d3:eb:e2:ef:14:3f:9c:0a:f8:13:1e:e3:
         c3:c6:55:11:ea:e1:59:1d:d9:9e:ed:a0:bb:d1:2a:4e:f5:23:
         5d:38:06:1c:61:38:d3:2f:4a:9c:de:0c:6c:94:14:0f:bb:48:
         f4:73:8f:c2:23:ca:53:29:be:28:5f:f4:0d:2a:01:fe:8c:19:
         9b:90:3a:6f:07:df:ae:86:72:75:81:99:01:69:7c:36:55:1c:
         e4:33:ac:26:c3:1c:74:d1:4b:6a:f1:0b:03:13:31:13:60:af:
         02:4b:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----