This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130382e302f32322d3232203d3e20323636393131.roa
File:                     34352e3232342e3130382e302f32322d3232203d3e20323636393131.roa (raw, json)
Hash identifier:          8eDV7ukvGe4FASCy35y2nEY7Lqhzlt/UtJkJhNccVO8=
Subject key identifier:   7F:26:92:B9:8F:71:71:5C:FB:F2:D6:F9:C3:28:90:B2:61:A3:3F:E5
Certificate issuer:       /CN=8174C9AD000FD5B5D370A3A331707606802570C2
Certificate serial:       610C809F7E5FEA9D49A5C98B166BE5293749CB12
Authority key identifier: 81:74:C9:AD:00:0F:D5:B5:D3:70:A3:A3:31:70:76:06:80:25:70:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8174C9AD000FD5B5D370A3A331707606802570C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130382e302f32322d3232203d3e20323636393131.roa
Signing time:             Fri 30 May 2025 14:44:54 +0000
ROA not before:           Fri 30 May 2025 14:39:54 +0000
ROA not after:            Fri 29 May 2026 14:44:54 +0000
asID:                     266911
IP address blocks:        45.224.108.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Fri 30 May 2025 16:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:80:9f:7e:5f:ea:9d:49:a5:c9:8b:16:6b:e5:29:37:49:cb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8174C9AD000FD5B5D370A3A331707606802570C2
        Validity
            Not Before: May 30 14:39:54 2025 GMT
            Not After : May 29 14:44:54 2026 GMT
        Subject: CN=7F2692B98F71715CFBF2D6F9C32890B261A33FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:a6:31:c4:4f:e9:26:93:2b:65:c6:24:64:
                    4d:ca:65:d1:08:7c:51:93:93:4d:22:59:56:db:69:
                    c1:e0:13:df:ea:0e:e3:ad:fa:02:b4:1c:df:7b:4e:
                    e2:25:a1:a0:1a:b4:29:55:e0:86:e6:29:30:b1:9c:
                    f3:fb:54:b0:be:0d:18:fd:b6:f0:9b:6f:f6:5c:5c:
                    98:f5:f6:e5:e3:22:60:f6:71:49:e1:86:c9:86:bb:
                    b4:3b:a9:52:89:71:6f:f3:60:8e:97:6d:45:d1:c6:
                    0b:c2:e1:1f:10:43:a2:29:c7:5f:e4:c4:03:c4:50:
                    92:a0:64:98:24:1a:e4:23:9a:67:a2:36:b6:4e:2f:
                    b9:68:8e:48:22:27:82:68:c3:1f:0a:39:58:0f:2d:
                    f5:d2:db:58:a5:02:89:48:b9:30:9c:cf:5a:0f:69:
                    38:98:bc:0e:91:1b:7b:d0:77:13:8a:22:2e:c1:c6:
                    46:23:1d:1f:f5:6e:b5:fc:22:d5:c7:b5:60:2f:ed:
                    36:2d:d8:25:88:ca:e0:82:81:9a:4b:29:fb:31:cb:
                    70:9b:bc:58:5c:f6:2a:ca:ab:d1:4d:6f:35:d2:74:
                    b8:69:71:a5:46:92:6f:49:1f:4b:d3:f8:c8:9d:fa:
                    26:7e:61:2f:41:53:30:9e:ba:90:28:a7:09:0c:c0:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:26:92:B9:8F:71:71:5C:FB:F2:D6:F9:C3:28:90:B2:61:A3:3F:E5
            X509v3 Authority Key Identifier:
                keyid:81:74:C9:AD:00:0F:D5:B5:D3:70:A3:A3:31:70:76:06:80:25:70:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8174C9AD000FD5B5D370A3A331707606802570C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130382e302f32322d3232203d3e20323636393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:82:24:81:a4:58:d0:8e:7b:e5:3e:3d:21:49:d4:74:12:ed:
         0a:af:31:c0:fa:a1:10:3b:aa:4b:cf:88:0c:1c:41:5d:be:d9:
         51:a5:31:e8:c0:4f:ca:10:c9:21:36:da:31:84:8b:8b:7a:85:
         f9:d9:c7:a1:d9:e6:62:2a:74:e4:17:83:1b:f6:77:5c:4e:c4:
         e4:f7:52:d8:d3:49:1c:4e:f2:c6:c7:4a:cc:ad:13:cf:dd:f1:
         94:3b:c1:aa:a2:d7:53:17:85:9e:1c:a9:dc:78:5b:52:2e:1c:
         75:8a:8e:52:1f:dd:1a:19:09:56:63:2e:c3:4d:a9:f6:6c:83:
         42:43:66:1b:c1:0b:e3:b2:9f:8b:c7:7c:e0:cc:03:39:a2:da:
         11:3b:d1:6f:5b:36:7b:3d:61:a6:10:14:b9:c2:32:fc:51:67:
         26:0c:0c:57:aa:59:fa:e9:42:82:15:e5:62:04:17:6d:a0:76:
         c5:49:bf:35:03:cc:26:1e:74:a7:c0:ac:74:3f:54:2f:56:6b:
         bd:fd:b1:46:6d:18:e5:c1:0a:58:85:e1:46:5a:7b:f2:31:09:
         5c:d6:f8:20:b6:51:02:47:de:50:54:24:55:6b:b7:1f:94:a0:
         c7:f9:ab:66:73:06:d5:ec:06:b0:e0:60:60:9b:d6:18:c1:12:
         5f:34:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----