This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/79684DFDE931D9553B72CBB4346C66B9C816C683.cer
File:                     79684DFDE931D9553B72CBB4346C66B9C816C683.cer (raw, json)
Hash identifier:          /Y6UNjdVafNdPEX0wkhMuj1SyGUL5TVjq1AlOTRbtbM=
Subject key identifier:   79:68:4D:FD:E9:31:D9:55:3B:72:CB:B4:34:6C:66:B9:C8:16:C6:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6773223C583B05D64F2D185E7FC6DF73414D0E68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/79684DFDE931D9553B72CBB4346C66B9C816C683.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 21 Jun 2025 14:37:32 +0000
Certificate not after:    Sat 20 Jun 2026 14:42:32 +0000
Subordinate resources:    AS: 265256
                          IP: 168.0.156.0/22
                          IP: 2804:2d00::/32
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 15:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:73:22:3c:58:3b:05:d6:4f:2d:18:5e:7f:c6:df:73:41:4d:0e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 21 14:37:32 2025 GMT
            Not After : Jun 20 14:42:32 2026 GMT
        Subject: CN=79684DFDE931D9553B72CBB4346C66B9C816C683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:3e:b5:90:74:ee:0c:dd:56:01:33:af:92:
                    c8:42:03:70:07:6b:c3:1d:50:15:fa:7f:2d:f9:0e:
                    5f:fc:3e:7a:90:13:53:f1:34:b2:5a:45:63:2a:fe:
                    e0:12:46:64:de:c3:72:da:1a:c9:e8:71:3b:8f:0a:
                    f3:8d:84:2f:f7:42:58:2f:3c:9d:04:00:ce:87:7d:
                    75:4b:e3:85:f0:a3:ba:f6:44:9a:57:43:30:a9:3d:
                    38:e4:db:40:1c:0d:07:dd:9c:64:d7:23:88:76:f8:
                    ba:3f:e5:51:21:5c:25:ee:71:96:8d:30:e2:74:f3:
                    34:b0:ea:44:f9:5b:09:fd:39:08:22:1b:ac:b5:53:
                    93:f4:89:eb:74:d6:1f:44:60:4b:dc:64:e3:60:d6:
                    25:4d:b4:fc:b1:dc:98:b2:79:dc:04:72:b9:9d:8d:
                    e5:95:8b:06:2b:8d:1a:c3:86:1f:1b:db:6c:5b:82:
                    aa:f5:35:37:ce:a1:f2:b7:76:eb:e4:b0:29:d7:e1:
                    19:e4:e4:32:36:56:f4:2f:7f:b9:24:7e:4a:c7:d2:
                    7f:8f:7d:21:1b:08:98:a2:86:b9:70:19:63:27:6a:
                    d0:07:d8:e0:7b:55:48:94:b2:c7:ca:42:46:62:04:
                    e4:26:09:69:54:60:98:23:f2:e4:51:f4:04:15:83:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:68:4D:FD:E9:31:D9:55:3B:72:CB:B4:34:6C:66:B9:C8:16:C6:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/79684DFDE931D9553B72CBB4346C66B9C816C683.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.156.0/22
                IPv6:
                  2804:2d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265256

    Signature Algorithm: sha256WithRSAEncryption
         c3:fd:75:0d:c5:39:16:38:4e:d6:0a:2b:0e:94:7d:90:22:25:
         7a:70:e8:a4:85:e9:0a:f8:f4:1a:fa:b9:11:20:a3:5e:38:b6:
         a2:10:11:0a:1a:51:ac:7c:eb:ec:60:89:ac:ad:9d:35:6e:cf:
         a2:c1:0e:1e:9b:2b:80:64:62:cf:61:5d:98:88:8d:48:31:a5:
         c8:87:a8:77:1b:1b:d8:00:c8:7d:b9:b6:6d:09:d0:7b:1e:b2:
         b4:68:84:b0:33:43:c0:76:f2:22:55:ba:88:89:23:3a:43:79:
         91:d7:dc:c2:e6:0a:b3:45:9e:cb:bb:1e:05:f7:e6:8d:b1:7f:
         ff:5e:c6:fd:bb:3f:56:fb:18:70:88:74:27:75:e6:d1:64:8d:
         a9:c6:1f:29:8e:7a:b1:de:11:d8:b8:42:e6:3d:7c:63:d4:dd:
         e4:01:f5:9a:7c:32:0c:52:a8:6a:72:36:6a:86:2b:4b:c8:f9:
         18:f7:e4:5b:71:b3:53:26:02:6f:67:87:02:92:a4:52:8d:60:
         3f:0e:0c:34:ec:ab:41:5d:e2:fa:99:15:2d:c1:3b:d2:0e:3e:
         59:07:a0:50:c3:ab:c5:50:50:70:ba:dd:ed:38:41:fb:a0:51:
         83:93:aa:15:4b:67:88:74:9f:0d:c6:7a:49:96:47:10:66:86:
         a8:c3:e5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----