This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31372e302f32342d3234203d3e20323633303537.roa
File:                     3136382e3232382e31372e302f32342d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          IQsIM4PRrow+d5ud6XddEbVR4DUPDbU8W38sGk2gty8=
Subject key identifier:   A7:37:CE:40:3A:99:3E:55:93:3E:70:63:D3:1E:BB:01:7F:63:60:64
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       3567C011247D6BE925DA39D5F7694F2B74623A70
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31372e302f32342d3234203d3e20323633303537.roa
Signing time:             Fri 05 Sep 2025 12:23:52 +0000
ROA not before:           Fri 05 Sep 2025 12:18:52 +0000
ROA not after:            Fri 04 Sep 2026 12:23:52 +0000
asID:                     263057
IP address blocks:        168.228.17.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 21 Dec 2025 02:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:67:c0:11:24:7d:6b:e9:25:da:39:d5:f7:69:4f:2b:74:62:3a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Sep  5 12:18:52 2025 GMT
            Not After : Sep  4 12:23:52 2026 GMT
        Subject: CN=A737CE403A993E55933E7063D31EBB017F636064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:59:2d:99:ef:b1:46:23:f9:96:4a:a9:4f:
                    76:e1:5d:c0:50:8f:76:c6:ec:ec:79:30:82:a9:65:
                    78:5b:cc:8c:a3:d4:79:a3:ad:69:d6:94:b0:db:ea:
                    a0:60:3b:70:66:fe:46:2f:43:23:0f:19:56:0f:10:
                    ad:bf:e9:0a:ad:31:65:f6:72:99:fe:88:70:17:97:
                    f9:f1:a2:5f:e8:c6:14:23:f6:45:d7:04:f1:b6:11:
                    97:ec:48:7c:c3:d1:19:5c:12:ad:a0:a0:1b:4a:47:
                    f1:93:1d:9d:34:1f:40:e8:b5:d1:b5:15:13:22:5d:
                    2c:ca:5c:72:f9:1a:8d:9d:17:ca:10:ec:d0:82:3e:
                    ea:b8:a7:ca:9b:db:8c:2e:5a:6b:2d:c9:1d:5a:94:
                    d6:46:c2:7d:b4:6f:cc:ed:0d:66:b4:f5:5c:1b:d9:
                    ca:97:ce:ef:c3:9f:07:ff:dd:6c:e4:72:58:2b:46:
                    f7:41:cb:af:e6:e4:e2:a5:98:74:b9:1b:6b:7d:6c:
                    29:d2:d4:6d:9a:d1:55:40:11:7c:27:52:7d:b5:6c:
                    be:f5:6d:7e:eb:06:5b:99:dc:39:3f:37:99:a6:70:
                    d0:97:fb:aa:01:3e:d1:8d:3a:05:4b:5c:a5:5b:8c:
                    75:26:ce:8c:6d:ff:a1:5b:46:bd:66:e3:3c:37:41:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:37:CE:40:3A:99:3E:55:93:3E:70:63:D3:1E:BB:01:7F:63:60:64
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31372e302f32342d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:46:63:2b:86:df:22:74:12:c5:7e:1c:fe:1e:f2:36:75:
         03:bc:90:ad:ef:38:e4:d8:c5:dc:ad:d1:e1:27:f2:3b:9e:a6:
         af:5e:6d:2b:4d:65:b5:8c:d6:42:6f:cb:e4:07:ad:7e:d7:c4:
         21:9b:cd:1c:b6:57:ae:cd:da:93:ea:28:97:5b:85:40:fd:ae:
         cc:6e:81:62:9b:a6:e4:0b:e1:49:0f:7e:93:89:3f:6f:67:96:
         ac:b2:71:5d:0c:28:97:67:2c:53:d2:6c:1e:05:a9:be:28:32:
         db:9e:66:82:69:43:93:25:3c:9f:ee:b3:e6:67:8e:02:05:1c:
         d4:26:00:69:21:6e:16:95:87:75:e3:1b:f2:cb:42:1d:f1:b4:
         0f:80:8c:fb:9b:20:b0:4e:d1:96:fd:3d:db:84:3f:7f:83:51:
         ef:72:c1:71:27:ba:ae:6a:ee:32:ac:ee:bc:43:a6:fa:f8:59:
         da:f0:7e:14:1b:ce:1c:68:3f:66:78:b4:a7:d0:98:98:9e:ba:
         8f:a4:4c:9f:d1:6c:24:ed:93:f4:d4:b7:5f:9c:62:f3:7f:94:
         46:12:97:af:08:6e:65:d2:1a:64:f2:09:74:54:ea:64:57:75:
         cd:2c:01:a0:ff:1a:a2:d6:78:26:ac:f3:ee:0f:7e:54:b7:65:
         04:d2:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----