This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer
File:                     E60613C40750D451F206828E45EE1C7D8EC84BAE.cer (raw, json)
Hash identifier:          d9ep8ChBuRjugHblBP1Apn6AEViwDBdBeO5GAAyf/5E=
Subject key identifier:   E6:06:13:C4:07:50:D4:51:F2:06:82:8E:45:EE:1C:7D:8E:C8:4B:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       13EE4DBCC4EF222ADAB382ECBE946C67735A091C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 May 2025 21:20:28 +0000
Certificate not after:    Fri 01 May 2026 21:25:28 +0000
Subordinate resources:    AS: 52923
                          IP: 177.184.176.0/20
                          IP: 2804:acc::/32
Validation:               Failed, certificate revoked on Thu 05 Jun 2025 16:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ee:4d:bc:c4:ef:22:2a:da:b3:82:ec:be:94:6c:67:73:5a:09:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 21:20:28 2025 GMT
            Not After : May  1 21:25:28 2026 GMT
        Subject: CN=E60613C40750D451F206828E45EE1C7D8EC84BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:76:94:f8:75:69:b8:7c:12:ac:bb:7b:f0:
                    00:72:b4:83:0e:34:2d:a4:14:31:14:df:93:6f:71:
                    99:23:fb:c3:92:fb:93:f7:5b:fa:a1:70:07:13:00:
                    93:28:7d:9f:a7:2d:91:c2:56:d6:ed:51:b9:96:15:
                    2e:46:d1:ad:cb:11:dd:9f:63:34:c6:e0:68:7b:5b:
                    04:6a:ba:81:79:df:f8:61:bd:03:7c:ad:bd:60:5b:
                    b0:da:4b:b4:45:91:f3:09:66:73:73:0c:66:e7:3c:
                    9e:76:f3:8a:cd:b6:90:e3:92:ca:51:6f:de:7a:31:
                    a9:98:7c:43:85:b8:cf:ab:b8:3e:c7:03:21:af:2a:
                    d4:43:03:02:d3:d0:e3:f0:f6:cd:5b:c0:54:42:7d:
                    cf:44:e1:ab:47:a7:fe:c8:87:14:48:1b:16:75:b3:
                    75:29:d9:ae:70:35:a1:80:2a:3c:35:d7:f9:d5:26:
                    af:98:eb:1f:d3:08:23:11:06:5f:87:e9:6e:39:25:
                    36:ae:d0:b7:98:c2:11:50:4d:16:34:f8:50:7a:28:
                    20:b2:82:cb:9b:d6:e8:4c:08:66:2e:e6:c9:b1:21:
                    7d:14:fd:18:95:61:59:bb:dc:4d:17:52:df:e9:9c:
                    7b:73:26:b0:d2:57:e5:0f:57:ad:9e:9e:8d:03:ca:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:06:13:C4:07:50:D4:51:F2:06:82:8E:45:EE:1C:7D:8E:C8:4B:AE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.176.0/20
                IPv6:
                  2804:acc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52923

    Signature Algorithm: sha256WithRSAEncryption
         2f:d7:df:b1:c9:d4:f7:2f:e8:bd:17:f3:42:ee:89:6f:2b:c0:
         fa:31:44:07:97:41:c3:91:c8:59:52:e5:23:c0:81:99:df:8d:
         f9:e8:c2:43:d8:08:fb:37:bd:63:c3:01:35:78:e5:c7:b6:03:
         37:c5:41:b1:4f:74:ca:e5:bb:fa:eb:6b:b2:fc:21:87:fb:ae:
         90:1b:c9:c2:ad:24:49:3e:27:fe:0a:c1:48:3e:86:97:79:6a:
         42:67:f2:e4:48:d0:cb:22:84:67:cc:ae:19:59:4a:c3:0b:ba:
         3f:51:9c:ab:42:ed:99:a6:1c:2d:7b:7e:a5:c1:e5:17:b4:f8:
         14:f6:2c:ea:52:1c:c9:39:d6:f2:fe:1e:28:1a:bf:d5:e6:09:
         8b:2f:ca:b8:25:ac:4b:99:d1:84:f6:15:51:c4:3d:8e:47:99:
         a3:bd:3d:88:73:8d:9d:bf:90:b6:92:03:ec:22:b8:90:e7:4e:
         ab:90:34:c9:46:15:eb:19:da:13:78:a8:91:8a:bf:02:17:9c:
         1d:1b:2e:26:96:5d:35:78:ea:87:ea:37:6b:64:d3:76:5a:d6:
         ce:59:4a:15:82:5a:39:10:9b:4c:ea:4d:64:32:1b:e8:a9:ea:
         d0:9c:f0:45:25:65:c5:a2:89:df:64:2c:77:68:25:5d:e9:99:
         f0:9a:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----