This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.cer
File:                     7B8E1235434FD5859B1AF0FE61E3D03E968369A1.cer (raw, json)
Hash identifier:          LWMeM6MB/ndYL2b5aFDsrZnPsCk8etH6Kja/vCASUFU=
Subject key identifier:   7B:8E:12:35:43:4F:D5:85:9B:1A:F0:FE:61:E3:D0:3E:96:83:69:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       262FD73AEDF9FB483AD6258E3E2C45154585DFBE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Aug 2025 03:22:14 +0000
Certificate not after:    Wed 12 Aug 2026 03:27:14 +0000
Subordinate resources:    AS: 265121
                          IP: 143.208.116.0/22
                          IP: 2804:2ad4::/32
Validation:               Failed, certificate revoked on Wed 13 Aug 2025 04:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2f:d7:3a:ed:f9:fb:48:3a:d6:25:8e:3e:2c:45:15:45:85:df:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 13 03:22:14 2025 GMT
            Not After : Aug 12 03:27:14 2026 GMT
        Subject: CN=7B8E1235434FD5859B1AF0FE61E3D03E968369A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:6f:fd:8d:4c:73:74:db:74:44:12:97:c8:
                    c0:9e:ff:61:1f:d9:35:a0:e6:4c:9b:33:86:ac:d6:
                    b0:38:ef:b1:04:ed:53:f3:10:60:8a:33:66:e0:eb:
                    0c:11:23:10:05:37:de:8f:10:a7:51:fd:f6:20:2e:
                    59:79:b7:d5:e1:f7:7a:45:5f:5f:08:2a:f6:13:56:
                    96:e4:f4:a8:89:6a:d3:d9:69:ad:5e:1a:f9:e1:c5:
                    12:6a:ab:cd:b7:17:47:6a:a7:5d:bb:5c:7c:53:ad:
                    0e:15:fb:fc:af:da:06:4a:1f:e2:5f:19:2f:02:0a:
                    fc:fa:41:e6:dc:a0:74:04:c6:ec:2e:9f:fa:d9:1f:
                    84:51:a0:35:71:be:17:0d:e4:2e:b4:93:fe:48:9a:
                    48:c9:28:10:47:bd:bd:23:69:ea:4d:3d:a0:37:f1:
                    4b:96:6f:84:19:8d:b6:bb:de:00:10:0a:6f:b1:12:
                    52:39:c0:0c:79:92:20:72:52:82:c7:64:c1:fd:f8:
                    f6:ec:fe:49:b7:3f:f3:51:fa:9e:b4:f3:1a:d0:4e:
                    7b:c5:ea:62:95:18:c0:31:07:0d:84:3b:b6:1e:b1:
                    26:64:fc:51:64:db:72:c3:91:e1:42:02:16:e1:6f:
                    cd:7f:d9:11:80:cd:f3:49:fa:52:0a:95:07:de:89:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:8E:12:35:43:4F:D5:85:9B:1A:F0:FE:61:E3:D0:3E:96:83:69:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.116.0/22
                IPv6:
                  2804:2ad4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265121

    Signature Algorithm: sha256WithRSAEncryption
         58:25:e2:e4:59:74:a4:d8:6e:99:cb:95:d0:1e:d0:8f:c2:3e:
         87:e4:87:eb:d5:5f:d1:a7:32:db:c9:94:90:72:4e:93:0a:b4:
         0c:65:93:77:53:35:66:d5:59:10:6d:15:1b:15:07:08:44:87:
         ca:d0:d6:99:67:75:4e:ef:3d:b3:ce:b6:e8:67:d4:f8:c2:97:
         36:ca:40:70:db:5a:cf:8a:40:0e:71:ec:49:5c:3c:9a:b6:79:
         68:b4:fc:59:a1:95:bb:d8:bc:a3:71:fc:2f:3f:71:b1:a6:67:
         42:e7:f6:74:2c:2d:e6:6d:bd:b0:ec:0b:9d:c4:dc:72:22:5e:
         82:2b:5b:c9:b6:fc:73:d4:9d:05:4b:9f:ec:07:35:2e:82:09:
         b5:40:26:b1:da:64:b1:4b:1e:52:30:ab:e5:e7:fc:d6:27:e8:
         27:db:b8:30:00:bf:0c:86:6e:eb:84:4e:15:14:1b:67:9c:2f:
         f9:f0:5e:8e:06:b5:39:f2:99:db:2b:de:16:d7:f5:c3:bb:36:
         aa:8a:d2:5a:74:da:ea:cc:97:94:9b:1e:11:9a:34:88:b9:41:
         43:54:7d:77:32:69:9d:50:11:84:ce:5a:dd:6b:99:29:e1:4a:
         69:a9:1f:b6:ee:6e:44:08:ce:91:11:6d:e0:74:be:21:a9:0e:
         46:44:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----