This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31362e302f32342d3234203d3e20323633303537.roa
File:                     3136382e3232382e31362e302f32342d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          Uf+EPf6fxHl7xIMLslXzD7wgXowafFjmSUe7w2CVrdg=
Subject key identifier:   6F:50:F6:A0:66:32:D8:0C:D5:C1:3E:4B:14:23:A4:FD:72:33:2A:C3
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       5FBA44E6664F6681D3D915696833D7AF46CC2485
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31362e302f32342d3234203d3e20323633303537.roa
Signing time:             Fri 05 Sep 2025 12:23:39 +0000
ROA not before:           Fri 05 Sep 2025 12:18:39 +0000
ROA not after:            Fri 04 Sep 2026 12:23:39 +0000
asID:                     263057
IP address blocks:        168.228.16.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 20 Dec 2025 09:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ba:44:e6:66:4f:66:81:d3:d9:15:69:68:33:d7:af:46:cc:24:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Sep  5 12:18:39 2025 GMT
            Not After : Sep  4 12:23:39 2026 GMT
        Subject: CN=6F50F6A06632D80CD5C13E4B1423A4FD72332AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:00:8c:32:14:f6:6b:13:00:16:7e:7c:fd:
                    9d:0f:ec:5b:ac:eb:f0:55:d7:95:c4:a1:cc:a8:be:
                    a6:31:07:d8:54:fc:a6:66:f7:4a:ea:78:7b:44:dc:
                    06:f1:83:1b:0e:56:af:e2:b4:d7:8f:26:a0:9d:59:
                    89:6b:3c:04:f0:dc:7c:fa:39:cc:70:e6:cb:19:c2:
                    a4:58:75:75:8c:34:47:50:6b:c5:97:47:6c:5b:ea:
                    30:bd:a2:b7:38:9c:b5:60:7d:d3:a2:e0:cc:86:db:
                    c7:4a:7d:f0:19:2a:55:c0:66:4c:14:ad:73:f7:88:
                    28:9e:e9:86:f4:4c:fa:ed:39:76:8a:b5:a6:a5:5e:
                    0d:8c:20:d7:62:3f:c2:f6:dd:a7:d8:e9:f2:1b:54:
                    f3:4d:a9:73:ce:26:01:43:d8:dd:4b:df:4a:da:1b:
                    8f:d2:0b:53:84:62:83:99:6b:cd:d7:bd:5a:4f:ad:
                    d2:e6:c9:c2:7c:e9:08:11:7c:2c:6c:45:42:3b:4f:
                    11:e3:a0:55:5d:ce:c3:1a:a5:02:55:80:76:b2:b5:
                    3b:e4:0e:3c:08:b9:4d:00:cd:be:09:bd:ea:b5:61:
                    e1:ba:98:e6:be:31:b7:04:6d:e1:2e:e0:0c:94:61:
                    5d:00:26:20:29:2b:4b:a9:ad:82:97:26:4a:54:24:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:50:F6:A0:66:32:D8:0C:D5:C1:3E:4B:14:23:A4:FD:72:33:2A:C3
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31362e302f32342d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:75:e8:14:f0:55:59:5b:70:30:6b:46:74:54:22:df:db:60:
         bc:08:85:f4:cc:87:a8:a3:d5:8b:87:cc:c3:66:7a:2e:26:c6:
         70:e2:73:99:f8:d4:d4:61:5a:10:93:67:73:d8:93:e1:ca:72:
         0e:6d:50:7a:b3:f1:1e:bb:ec:71:a9:86:2a:0b:c0:c0:a5:aa:
         ec:f6:3e:e0:ba:4f:4d:35:b4:5f:dd:40:fe:eb:4d:44:bd:42:
         d2:04:27:ce:cd:54:aa:e0:ca:0a:0f:c0:15:b6:4b:95:a9:ca:
         74:2d:73:79:b0:b4:ed:ad:fe:58:a5:45:1f:29:e6:4d:d5:89:
         5a:96:ad:eb:8d:aa:a6:6a:83:3a:01:b8:dd:8b:eb:cf:08:0c:
         30:a4:5a:1f:a1:77:84:8d:2b:e6:b7:e5:c7:93:cf:e1:09:a9:
         bd:40:17:2a:30:5a:8b:6a:2d:df:66:bc:8b:16:57:0a:82:31:
         97:bd:96:45:c4:03:74:49:59:bb:67:ee:85:bb:55:05:13:d6:
         26:42:42:83:9b:9e:99:61:63:6d:73:ff:27:4b:aa:11:18:8f:
         57:b7:bf:43:a1:86:d9:a5:86:a7:98:8d:9b:b9:cc:24:2c:98:
         a3:4e:0a:d7:32:d5:94:f8:f7:33:34:68:55:1b:f9:7d:83:62:
         b2:9b:5e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----