This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/07F2D01155D284A1D960BB3A2106F0928460D782.cer
File:                     07F2D01155D284A1D960BB3A2106F0928460D782.cer (raw, json)
Hash identifier:          YxuK8WkWE00dG8qW+MVOnYlBES7rrcT4ewv+v4XZ+Ug=
Subject key identifier:   07:F2:D0:11:55:D2:84:A1:D9:60:BB:3A:21:06:F0:92:84:60:D7:82
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DD144699A228DF8210B5AD9E159E87FB2202727
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/07F2D01155D284A1D960BB3A2106F0928460D782.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 20:06:03 +0000
Certificate not after:    Wed 29 Apr 2026 20:11:03 +0000
Subordinate resources:    AS: 267952
                          IP: 45.166.48.0/22
                          IP: 2804:55b8::/32
Validation:               Failed, certificate revoked on Fri 29 Aug 2025 20:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d1:44:69:9a:22:8d:f8:21:0b:5a:d9:e1:59:e8:7f:b2:20:27:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 20:06:03 2025 GMT
            Not After : Apr 29 20:11:03 2026 GMT
        Subject: CN=07F2D01155D284A1D960BB3A2106F0928460D782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:90:19:53:a5:f4:c7:4b:6e:19:9a:af:a8:
                    71:b4:1f:38:b1:44:30:8f:00:ed:5c:c4:f5:32:bf:
                    df:b1:fd:4d:e0:e4:00:87:2b:24:05:14:ca:54:57:
                    d7:37:62:1c:fe:c9:e8:71:47:31:2a:f7:e5:5f:29:
                    34:34:78:4b:33:6a:e1:de:a5:16:4d:aa:41:0a:59:
                    72:2d:4f:22:b8:09:76:7f:6c:ef:1a:25:e2:89:b6:
                    29:87:8e:0e:ba:66:b6:08:64:f1:05:b0:ae:ca:b4:
                    3b:4b:ce:6e:20:96:6f:75:49:71:63:54:1d:62:2c:
                    c3:74:2f:39:0e:ed:0e:db:4a:31:aa:c6:4c:fe:39:
                    2f:04:74:e6:95:af:8d:8b:0b:ee:3a:d5:c5:ef:2d:
                    02:53:0e:a3:1f:fe:c9:69:79:4e:fe:8c:17:3e:49:
                    cb:23:bb:96:2b:b6:03:44:78:a2:71:b7:27:78:44:
                    aa:93:63:b0:61:f5:db:68:4e:56:0d:59:30:bb:9f:
                    fa:44:03:82:37:09:ba:cd:57:c9:50:20:28:38:5d:
                    9f:5d:a7:de:c1:18:05:05:8e:19:d7:cd:26:c8:a0:
                    b7:70:9f:a1:17:67:98:b2:f3:0e:97:59:47:fc:84:
                    b6:f8:b4:e0:eb:8a:03:43:26:b7:2a:9c:44:87:9e:
                    43:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:F2:D0:11:55:D2:84:A1:D9:60:BB:3A:21:06:F0:92:84:60:D7:82
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/07F2D01155D284A1D960BB3A2106F0928460D782.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.48.0/22
                IPv6:
                  2804:55b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267952

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:a4:a1:87:ef:8d:95:91:69:75:44:6d:3a:5c:bc:1e:e1:
         98:66:cf:70:f1:5a:0a:cf:f3:20:6b:be:5a:01:05:fd:6e:8d:
         a5:72:a2:aa:d9:85:5d:6d:25:2b:39:ce:8e:b3:2d:d5:9f:86:
         be:6a:e1:7d:21:e4:61:7f:26:61:04:15:a7:e8:46:d2:36:ce:
         78:50:a1:ac:fb:e0:93:66:a9:e9:fa:3c:df:3a:d4:99:9e:d8:
         ad:98:15:ea:41:c7:29:96:6e:e8:7b:7f:fe:d6:16:df:e2:a8:
         0d:66:4f:ab:05:78:67:6e:8c:47:b2:8c:c9:8b:c6:ba:13:45:
         54:6d:64:48:3d:fb:07:c3:31:f3:92:3e:11:78:41:ce:d6:99:
         5c:27:04:0b:cf:d7:ac:a0:a5:a4:a9:2f:20:4a:fb:5a:0c:a3:
         62:26:c9:88:dd:7a:1a:47:31:fa:a1:05:f3:4d:6c:b6:00:9e:
         22:9b:83:c1:9c:36:4c:ec:ca:87:f9:93:4b:a2:70:6a:66:1b:
         40:70:59:ec:e5:52:59:c9:4b:32:84:1a:91:d8:6e:04:f1:96:
         8f:22:db:f5:b0:71:91:dc:d3:ce:41:21:57:72:bd:40:d3:69:
         3a:22:27:8e:ee:3e:06:15:d1:5a:4f:bb:a3:fc:34:72:82:ac:
         aa:c9:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----