This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233382e302f32342d3234203d3e20323633303537.roa
File:                     3137302e3234342e3233382e302f32342d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          fkD0q77ObYiJX40WEBChfab+e/WE65d/NIkA0A6AXow=
Subject key identifier:   75:46:36:03:F2:F0:57:E9:00:54:01:88:23:BE:5A:05:D0:3A:0C:C7
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       271C24EA72F9FF2043959A560151FC1CFD433385
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233382e302f32342d3234203d3e20323633303537.roa
Signing time:             Fri 05 Sep 2025 12:24:36 +0000
ROA not before:           Fri 05 Sep 2025 12:19:36 +0000
ROA not after:            Fri 04 Sep 2026 12:24:36 +0000
asID:                     263057
IP address blocks:        170.244.238.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 20 Dec 2025 09:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1c:24:ea:72:f9:ff:20:43:95:9a:56:01:51:fc:1c:fd:43:33:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Sep  5 12:19:36 2025 GMT
            Not After : Sep  4 12:24:36 2026 GMT
        Subject: CN=75463603F2F057E90054018823BE5A05D03A0CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:33:10:fd:d9:2b:ad:63:db:5c:9f:28:0b:
                    4f:b2:d9:04:65:89:27:6c:93:64:8a:0a:1b:d7:db:
                    e9:0f:ff:d2:79:79:37:43:df:89:62:d8:73:b8:9b:
                    19:59:3f:32:39:2e:95:59:64:d5:84:3f:71:2d:02:
                    47:9c:3c:ee:07:f6:ec:32:28:93:c0:1e:34:d2:4a:
                    d0:8b:70:f4:d1:8e:c3:12:b6:ad:b9:dc:12:b1:5f:
                    ea:a6:62:d8:62:3b:e9:a9:8a:70:58:a6:d8:57:ca:
                    9e:3e:3b:b1:89:8e:45:63:8b:58:74:6f:d7:86:6f:
                    b4:c0:49:62:2c:dd:ef:a7:03:0d:7c:62:e8:60:47:
                    f6:ae:07:56:0d:af:d5:d5:43:97:b9:f9:aa:4c:b5:
                    dc:09:7a:32:ec:68:66:ab:41:f9:4a:86:36:16:4e:
                    9d:85:bd:ab:4b:84:4e:67:c7:22:4d:32:8f:51:c7:
                    a4:bb:cf:48:3e:f3:6b:72:2e:14:35:2b:94:b3:98:
                    00:d0:41:67:4c:c7:ff:76:62:cc:f7:18:01:53:51:
                    49:ed:a4:9e:9c:a8:2f:67:2e:3d:d6:8e:96:3c:d5:
                    d4:4f:66:23:20:36:62:dd:ff:06:20:2e:b0:ea:bc:
                    ed:29:f4:99:34:23:1f:58:7c:05:c8:41:3a:db:8a:
                    20:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:46:36:03:F2:F0:57:E9:00:54:01:88:23:BE:5A:05:D0:3A:0C:C7
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233382e302f32342d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:bc:b9:ed:2e:ff:2c:84:8b:82:a9:44:58:df:cb:6c:e3:74:
         ac:9f:78:84:0c:35:ed:a3:bc:3a:f1:f0:fd:40:1f:58:05:f3:
         ed:e7:a6:c0:6b:a1:b1:95:49:ef:69:7f:5a:ff:43:07:56:7f:
         47:96:c1:16:c5:64:c6:71:8b:49:98:18:c6:c9:db:cd:86:6f:
         db:1e:5f:35:f5:c7:76:e8:db:76:b1:e5:ad:1d:87:74:70:41:
         8b:86:e6:e5:ba:7c:49:fd:fd:25:e2:27:d9:1d:4e:1e:bd:86:
         3a:72:2a:2c:65:eb:fd:e3:66:4f:b7:bf:1f:2e:7e:11:5e:bf:
         60:5a:dd:6d:11:bd:dd:13:73:1c:67:4e:50:95:ba:c7:91:a3:
         bf:3d:01:4a:0d:3d:07:b5:39:d8:37:6a:1e:fb:4b:e0:17:63:
         c1:49:fd:fa:90:a1:42:d8:a0:84:d9:41:a3:15:3b:5d:8a:c8:
         8b:98:75:bd:d8:f3:c2:a0:d5:d8:44:15:1d:5f:7c:a0:40:85:
         05:bc:1d:46:61:39:52:68:dc:8e:63:37:71:d9:e1:21:9f:32:
         d5:4b:cc:c8:bf:83:31:6b:e6:09:ce:2d:cf:2c:ab:84:b2:be:
         0d:f9:c0:62:fb:15:fc:7c:d6:00:8e:c1:39:30:86:0a:74:b6:
         f6:71:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----