This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.cer
File:                     693F6FE5908AC83D8E07CCD94B49D5502D3FE383.cer (raw, json)
Hash identifier:          RjmmHFtCR05WrftHBrhakpvpzA0QL2HIo95TjkxhxIY=
Subject key identifier:   69:3F:6F:E5:90:8A:C8:3D:8E:07:CC:D9:4B:49:D5:50:2D:3F:E3:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AF361663213363C5B9138B90C7523902B9ECFEF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Jun 2025 01:36:38 +0000
Certificate not after:    Mon 15 Jun 2026 01:41:38 +0000
Subordinate resources:    AS: 270706
                          IP: 189.127.152.0/22
                          IP: 2804:701c::/32
Validation:               Failed, certificate revoked on Mon 16 Jun 2025 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f3:61:66:32:13:36:3c:5b:91:38:b9:0c:75:23:90:2b:9e:cf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 16 01:36:38 2025 GMT
            Not After : Jun 15 01:41:38 2026 GMT
        Subject: CN=693F6FE5908AC83D8E07CCD94B49D5502D3FE383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:50:0a:c1:5c:c6:4a:ec:b6:52:d8:4f:a9:
                    cb:62:79:38:e1:6b:a3:b1:90:8b:c0:a7:c4:77:5e:
                    44:02:3f:e4:4c:ad:81:5a:40:ee:33:b1:a5:f3:40:
                    15:cc:76:78:d3:76:88:eb:ae:c3:a0:ad:04:14:a2:
                    9d:de:08:af:e0:13:4f:74:02:dd:87:16:ed:e3:9e:
                    d0:41:dc:d9:24:78:02:e4:57:b2:0b:e8:80:25:26:
                    a2:ef:16:1d:2c:37:6c:eb:6a:82:8a:89:06:28:36:
                    4b:7e:9b:9a:b9:d0:91:bb:6e:b4:ab:79:95:72:04:
                    ad:0d:fe:b2:c8:d3:53:21:33:bb:ea:fb:bc:fe:b0:
                    ac:0c:5d:90:06:8d:ef:0c:60:6f:3a:66:bc:22:34:
                    bc:b4:ad:92:51:c6:57:9b:fb:f0:0f:95:a4:8a:0d:
                    11:6a:5b:ad:a8:7e:a2:f9:f3:19:da:f0:d6:26:1f:
                    03:85:fd:af:e2:7a:d8:3d:56:2e:d5:07:75:2c:0a:
                    2e:8d:9f:fe:8b:6c:9c:e5:82:cd:b1:76:12:70:8a:
                    c7:f7:da:27:3f:04:f5:ad:f4:d9:c1:a2:8f:87:79:
                    c8:2b:2e:a8:56:7b:2c:76:ed:bf:9d:63:cb:ba:6e:
                    8e:c8:b3:d1:53:3f:22:3b:39:02:15:6a:31:b6:4b:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:3F:6F:E5:90:8A:C8:3D:8E:07:CC:D9:4B:49:D5:50:2D:3F:E3:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.152.0/22
                IPv6:
                  2804:701c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270706

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:b7:2f:c9:2d:40:9e:05:93:68:4d:6b:7f:f0:d5:1a:e4:
         61:c4:10:be:7c:6a:18:e2:b2:17:5c:c2:52:b4:cd:92:8b:a8:
         5a:d4:e1:db:b6:a8:46:3d:d1:0a:b7:26:51:ef:0d:5b:f5:b5:
         0e:ee:69:b2:96:32:42:ed:d5:e9:1a:d7:c9:c6:ce:0e:07:34:
         aa:d9:85:ac:b5:28:93:99:b1:dd:ff:4c:a4:55:0b:0e:20:fe:
         10:10:05:93:e5:0c:12:fb:fd:7c:5b:11:47:9c:6f:4e:6a:05:
         51:e7:f0:0e:cd:fd:a7:ba:f0:5a:a3:f8:ed:56:9b:14:27:18:
         ac:92:2f:44:10:2e:95:09:ab:06:78:e9:7d:63:77:05:46:b7:
         23:92:d2:a1:38:46:18:46:fd:ac:b3:97:ad:bd:65:e8:7c:5d:
         23:e1:8f:9b:95:06:8e:d3:26:26:3f:94:4a:fe:54:e4:f1:c8:
         7a:5d:1a:d5:ce:c7:e2:50:c0:c0:f1:39:5f:78:2c:d2:c2:4b:
         8b:0b:de:a6:9c:17:a5:78:53:58:96:94:cf:e7:05:d8:14:95:
         29:bb:2b:01:77:99:8a:08:1c:2b:91:a2:8f:74:16:fa:ac:1d:
         89:12:6a:ee:da:47:74:48:86:ee:73:b4:44:22:c5:8c:d7:16:
         0d:9c:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----