This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.cer
File:                     ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.cer (raw, json)
Hash identifier:          bOjGBxPN9p0FuUGxbZHf04H6iTb5mR8hHZCJO1eLJXg=
Subject key identifier:   AB:A0:0F:C5:B6:DB:63:AD:D2:ED:5D:33:5E:AE:47:AE:23:48:FD:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DEFB7CE3CF35286B804E8B5243240A51EB1A645
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 May 2025 09:30:15 +0000
Certificate not after:    Thu 28 May 2026 09:35:15 +0000
Subordinate resources:    AS: 267108
                          IP: 45.229.108.0/22
                          IP: 2804:4844::/32
Validation:               Failed, certificate revoked on Thu 07 Aug 2025 06:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ef:b7:ce:3c:f3:52:86:b8:04:e8:b5:24:32:40:a5:1e:b1:a6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 29 09:30:15 2025 GMT
            Not After : May 28 09:35:15 2026 GMT
        Subject: CN=ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:c9:cd:8d:ec:54:15:62:c4:ac:f1:cd:8c:
                    37:dc:72:a7:26:06:f6:58:3f:8e:2f:ad:bb:de:06:
                    53:df:e4:76:09:7a:e0:5d:b7:b3:90:83:61:cd:ba:
                    f9:9b:a4:14:3b:90:bc:01:e2:e7:c8:f1:bf:85:06:
                    72:3f:fe:cc:be:21:44:83:f6:ce:3a:3e:0d:d6:0c:
                    12:81:09:45:cc:12:f2:d3:b6:fd:02:79:40:48:a3:
                    4d:2d:2a:78:15:e8:b2:63:7b:a1:e6:b2:98:d0:ca:
                    61:ec:7e:45:8e:34:42:37:1d:30:3e:d2:5a:5b:20:
                    50:10:4a:02:99:0d:c1:43:39:4e:4a:eb:ed:07:87:
                    81:09:eb:94:31:18:13:fe:c8:36:c9:06:27:59:af:
                    67:03:f6:18:71:33:a2:01:69:5b:04:2b:8e:f4:5d:
                    10:17:5f:78:50:ac:b1:17:6b:0c:4f:4b:fe:7b:46:
                    a3:18:ad:c2:ad:06:df:04:f5:f5:f1:a8:59:79:f0:
                    2b:de:1b:8d:48:ce:48:cf:63:b2:bc:35:73:6c:61:
                    65:5c:27:72:28:2e:f9:bb:02:da:b4:d7:ee:f5:da:
                    45:4a:dc:ae:31:f8:75:f5:32:07:f0:59:93:7a:33:
                    57:06:ff:a2:40:2d:3d:23:87:93:ac:90:99:7c:53:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:A0:0F:C5:B6:DB:63:AD:D2:ED:5D:33:5E:AE:47:AE:23:48:FD:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.108.0/22
                IPv6:
                  2804:4844::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267108

    Signature Algorithm: sha256WithRSAEncryption
         23:68:25:16:5d:28:5b:b5:de:a0:8b:78:e3:de:de:a6:fc:0f:
         9f:4f:e8:45:a3:82:f5:fe:f5:7a:1d:6b:6c:3d:30:55:b6:ad:
         2e:ea:a9:90:13:b4:e0:8d:d5:9b:81:81:65:09:35:9b:2b:af:
         4e:55:a9:ac:50:c6:6e:1b:81:d1:d0:ea:e6:2d:b9:ac:f4:d7:
         a6:0d:c7:95:b6:9c:e3:5e:76:84:36:8b:85:ec:0b:42:5a:13:
         66:61:14:4f:68:94:5a:19:8f:8b:71:e3:62:9f:a1:04:61:2c:
         66:48:f6:f8:eb:43:19:47:19:97:39:3b:b1:ff:38:a9:51:8e:
         e2:a8:56:cc:66:d5:00:d2:7e:f6:b8:43:4f:7e:38:e3:45:d3:
         75:50:bf:14:d3:dc:20:4b:07:4b:c2:b0:23:c5:3e:7d:2a:8f:
         23:4b:fe:03:40:37:88:76:56:52:b0:99:94:d2:b0:29:cc:d3:
         81:21:3b:45:5d:49:b9:61:35:44:81:ea:aa:6e:8b:f9:22:82:
         a2:0c:f0:50:e2:91:fd:0d:9e:64:53:7a:28:bb:74:41:d1:75:
         7d:b0:ef:2e:04:c4:a5:67:d5:94:cc:b8:71:b6:c2:ce:b4:09:
         a2:ce:2f:53:fe:8a:03:c6:be:86:7d:97:85:6e:6a:ec:a9:af:
         24:3e:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----