This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230382e302f32302d3332203d3e203238313430.roa
File:                     3138372e3130332e3230382e302f32302d3332203d3e203238313430.roa (raw, json)
Hash identifier:          dhEiLWFzJyNefmAgQFYj4EJtueUHIRsJqwCl11I6Xgg=
Subject key identifier:   88:0D:52:7D:82:1B:64:74:F7:A5:EE:02:AF:BE:50:46:84:8F:B4:8A
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       6EFF24A323AC1020B525F51A863643043327689E
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230382e302f32302d3332203d3e203238313430.roa
Signing time:             Thu 03 Jul 2025 20:55:46 +0000
ROA not before:           Thu 03 Jul 2025 20:50:46 +0000
ROA not after:            Thu 02 Jul 2026 20:55:46 +0000
asID:                     28140
IP address blocks:        187.103.208.0/20 maxlen: 32
Validation:               Failed, certificate revoked on Wed 09 Jul 2025 02:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ff:24:a3:23:ac:10:20:b5:25:f5:1a:86:36:43:04:33:27:68:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  3 20:50:46 2025 GMT
            Not After : Jul  2 20:55:46 2026 GMT
        Subject: CN=880D527D821B6474F7A5EE02AFBE5046848FB48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:b9:5f:4d:f4:a8:71:6a:d3:07:57:1f:56:
                    c4:4a:40:e5:35:0c:77:28:9e:bc:54:c4:2c:3c:aa:
                    ef:7c:d9:0c:87:88:28:2a:2c:c5:fd:04:7b:ee:46:
                    97:c8:98:61:6d:f7:43:75:80:8a:ec:9d:cd:b0:3e:
                    43:7f:43:21:85:66:ab:11:47:8f:92:64:8a:7b:34:
                    29:c2:ac:70:00:cb:ae:9b:2d:19:a8:18:96:13:0f:
                    da:aa:0c:da:1e:3c:e1:89:dd:d2:81:83:67:6c:97:
                    1c:90:57:5b:33:bd:b8:51:d9:81:85:46:78:31:e9:
                    ec:1e:dc:71:70:6c:65:46:4d:79:96:27:60:fc:d7:
                    f7:3d:aa:16:05:25:ef:d5:1f:90:bc:3e:47:45:a4:
                    7c:8d:2e:e1:f7:b0:44:a7:5e:c0:62:8f:16:3c:12:
                    7c:4c:26:04:c7:8c:9a:f5:a6:dc:00:12:2e:77:fa:
                    8e:75:53:0f:91:3c:ff:7d:ee:e1:21:91:35:2c:dc:
                    df:3d:b2:c6:06:c2:13:b6:65:5d:72:87:9a:d3:af:
                    cf:87:59:db:ae:64:cc:0e:92:d5:16:59:d7:d7:2a:
                    82:80:0b:ae:51:dc:4b:2a:43:fc:4a:91:4e:aa:49:
                    74:b1:87:48:59:ee:cc:be:28:55:96:63:4f:df:c4:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0D:52:7D:82:1B:64:74:F7:A5:EE:02:AF:BE:50:46:84:8F:B4:8A
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230382e302f32302d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:95:73:eb:f9:03:d0:58:1a:94:08:0b:02:b3:da:9f:75:b0:
         21:8c:bb:fb:d8:d6:0f:1b:84:6f:36:3b:9a:35:5f:93:e7:67:
         14:5e:ab:e6:35:0d:e0:26:79:60:3c:ff:81:f2:45:00:9b:c4:
         8a:80:9f:08:34:4c:0a:c7:48:b1:11:73:a9:8f:70:62:10:bc:
         85:62:d8:38:ea:9d:a9:92:5e:ac:a3:d1:2a:47:f9:60:9e:da:
         1d:19:9b:2a:a3:1d:08:29:ba:3f:cc:17:f2:e3:53:08:d3:ab:
         fb:6f:e2:a4:84:70:6d:27:c9:66:a0:09:03:df:e9:3b:03:d1:
         25:f6:8b:dd:46:f2:15:26:03:21:95:10:64:0a:a8:3c:54:ba:
         e9:13:80:39:b9:87:99:57:b0:63:5b:95:93:81:e5:a0:66:4c:
         92:f5:b2:9b:0b:90:3b:c9:f0:34:9b:92:a1:59:b7:a2:de:ec:
         1b:87:3b:c0:ed:79:a3:7d:97:4b:79:e7:ac:1f:56:38:10:4f:
         58:19:71:7b:53:5d:0a:ed:21:e8:9c:69:b0:ca:9c:fb:d9:b0:
         17:14:d8:d5:24:ab:e0:c2:89:43:99:96:95:fa:0c:43:3c:10:
         25:54:dc:55:aa:92:1e:df:7b:a7:74:e3:eb:1e:b2:20:3e:fc:
         38:13:9d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----