This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
File:                     87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer (raw, json)
Hash identifier:          O5O6Sbkn2NAbeih7yfCTsv8YawCSdhAw+3qu8Emx3vQ=
Subject key identifier:   87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1CED32B733A3848BA4A3EC4422E9B97DD5F2F25F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 14:46:31 +0000
Certificate not after:    Wed 25 Mar 2026 14:51:31 +0000
Subordinate resources:    AS: 270596
                          IP: 187.17.136.0/22
                          IP: 2804:6e6c::/32
Validation:               Failed, certificate revoked on Mon 28 Jul 2025 16:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ed:32:b7:33:a3:84:8b:a4:a3:ec:44:22:e9:b9:7d:d5:f2:f2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 14:46:31 2025 GMT
            Not After : Mar 25 14:51:31 2026 GMT
        Subject: CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:55:25:9c:ed:09:ae:03:1e:12:bd:99:bd:
                    51:be:52:6a:70:77:9a:5e:a0:48:d3:0d:cf:94:ea:
                    85:0a:b6:bd:63:7a:20:b7:12:47:cf:2a:c1:97:68:
                    9a:56:7a:ab:6b:c5:e0:ab:de:9c:24:49:ae:21:67:
                    55:4a:26:5a:9f:cd:fc:84:b7:c8:fb:62:19:9e:a0:
                    62:0e:4b:b8:af:4d:e7:42:b2:68:ef:1a:32:43:95:
                    ed:9b:21:25:4f:db:25:51:fd:ff:33:51:de:ab:64:
                    db:45:5e:9f:0c:65:ee:fa:e7:40:fb:d2:7a:8c:2e:
                    08:82:02:a8:21:21:af:1d:0d:5f:67:63:21:56:95:
                    78:aa:37:4b:6d:d3:69:68:e4:0a:20:49:7f:8d:06:
                    8e:40:0e:81:ba:c4:bb:76:99:b3:7c:f3:c4:1e:a9:
                    12:76:69:ec:fa:0a:cd:26:2d:71:1f:8c:4d:9a:04:
                    0f:a5:78:f8:2b:3f:e5:c5:a2:58:e6:95:4e:4c:f7:
                    d8:12:75:e1:5d:a9:35:1e:3b:81:b4:06:84:1b:fe:
                    cd:88:0c:62:13:64:0d:be:58:0a:e7:d2:31:22:6d:
                    16:46:4d:ae:8d:a8:80:b2:57:91:55:b3:9d:2a:91:
                    5b:6f:d7:e2:8d:67:50:46:42:24:35:9e:27:c3:80:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.136.0/22
                IPv6:
                  2804:6e6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270596

    Signature Algorithm: sha256WithRSAEncryption
         46:16:0a:57:90:ad:68:e3:8a:7e:60:f4:47:2d:bf:0c:f8:aa:
         5a:65:48:7d:59:5e:51:1e:07:3b:16:a9:c9:5f:d0:44:07:d4:
         51:1f:98:29:42:7e:50:a3:bb:0f:db:1a:07:67:31:71:35:7b:
         26:74:1c:89:08:ce:80:5e:8d:27:6a:3a:ed:4c:a2:5a:88:83:
         fb:af:81:76:62:64:a0:2c:db:5b:ab:b1:77:72:86:7e:27:87:
         e4:2b:0f:66:8f:78:a4:36:6e:0a:71:d9:dd:8d:be:ab:ae:1f:
         fc:d5:45:c9:f2:20:e5:d1:1a:86:e7:ee:ce:03:5c:86:6d:6b:
         87:18:09:b1:f1:4b:99:e6:cf:8a:16:2c:1b:03:41:ea:fa:b7:
         1d:a6:a0:8d:63:5a:48:36:b8:d7:70:b8:95:32:1e:e7:0f:5d:
         cb:e9:ec:3f:dd:cf:44:af:7e:d0:a4:98:c0:6d:73:cf:60:c1:
         3c:66:7d:76:20:51:4b:2d:9f:3d:1f:69:ca:e9:b1:ad:8c:95:
         ef:53:f4:cf:14:fd:20:b5:05:e5:2a:78:bd:45:9c:30:e1:1f:
         4f:d2:89:55:0a:10:de:20:d5:2a:b2:16:1d:d4:96:2c:6a:ec:
         3e:3d:9c:c1:e8:be:62:d1:c7:b2:2a:2f:fc:ea:96:e9:49:31:
         99:4b:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----