This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32322d3234203d3e20323638333438.roa
File:                     34352e3233392e302e302f32322d3234203d3e20323638333438.roa (raw, json)
Hash identifier:          JRL9OW+7H0WSvk9Vqkfi6kNfDab2QDaWYtgBokuzfNc=
Subject key identifier:   EB:D0:FB:C4:A9:47:E9:95:FF:F7:17:99:1A:CC:79:12:A1:9D:D2:30
Certificate issuer:       /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Certificate serial:       72995C8BD155178EEF9E122945B078E2A0847FF4
Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32322d3234203d3e20323638333438.roa
Signing time:             Thu 11 Dec 2025 15:37:48 +0000
ROA not before:           Thu 11 Dec 2025 15:32:48 +0000
ROA not after:            Thu 10 Dec 2026 15:37:48 +0000
asID:                     268348
IP address blocks:        45.239.0.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Fri 12 Dec 2025 15:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:99:5c:8b:d1:55:17:8e:ef:9e:12:29:45:b0:78:e2:a0:84:7f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
        Validity
            Not Before: Dec 11 15:32:48 2025 GMT
            Not After : Dec 10 15:37:48 2026 GMT
        Subject: CN=EBD0FBC4A947E995FFF717991ACC7912A19DD230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:0d:ad:9a:1e:28:ee:a6:f2:b4:5e:c3:20:
                    d7:b7:a4:74:f5:63:6c:f8:15:89:5c:9a:7b:3e:98:
                    79:fa:e1:bc:c0:98:9c:cd:27:b0:f1:d5:6a:17:ad:
                    b7:f2:09:f7:cc:83:8f:95:49:76:fe:e7:f6:03:f5:
                    eb:4f:43:1e:8c:5e:37:63:2e:45:cb:85:74:ba:ad:
                    78:bf:51:5b:ba:0e:9e:0e:41:53:48:1c:7c:e0:7a:
                    0e:bb:c3:2e:8b:4b:e7:18:cb:91:2d:3d:f0:0b:fe:
                    44:06:b7:6a:01:38:ae:a6:fd:8b:81:10:1b:7a:34:
                    d5:1c:fd:78:0e:76:ab:a6:ca:67:51:8c:61:70:69:
                    1b:0b:02:d8:3e:97:59:eb:ae:ce:43:8b:3e:0c:67:
                    ca:f4:7b:e2:eb:5e:c3:bd:72:dc:8a:25:9f:1b:a0:
                    d0:c4:53:de:ec:ee:80:dd:45:73:00:fe:69:32:48:
                    ed:45:da:45:44:9a:e5:3d:7c:de:be:da:fa:2a:32:
                    bb:85:83:f3:dd:fb:f8:2f:3e:57:73:7b:05:e6:ee:
                    aa:76:74:70:58:91:26:95:df:d7:69:1b:2a:45:f2:
                    21:ea:cf:55:c4:ce:39:ac:11:90:e5:bf:90:e3:96:
                    42:69:1b:c7:5a:4c:d7:45:e9:50:c5:de:f6:62:d9:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:FB:C4:A9:47:E9:95:FF:F7:17:99:1A:CC:79:12:A1:9D:D2:30
            X509v3 Authority Key Identifier:
                keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32322d3234203d3e20323638333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:89:a8:b4:02:4c:4f:3f:65:21:32:a2:3b:1f:e7:7a:69:
         5a:17:45:1b:37:46:2c:87:76:43:40:9f:62:18:0e:17:26:7c:
         38:ce:84:95:ac:65:19:b1:5a:c0:1f:bb:16:64:8e:bd:7c:06:
         93:6b:bd:e1:c2:9e:66:3f:37:d4:28:0a:3a:22:ae:88:94:d9:
         8a:5b:09:a3:34:d6:29:24:c2:fe:e8:7a:2b:4e:4c:f0:51:02:
         9c:a2:e8:3b:7f:f0:09:a4:19:63:d6:eb:fb:b2:d6:b9:e7:d7:
         41:dd:e9:8e:b5:89:9f:93:3e:41:c4:f2:f4:a1:df:14:ed:2f:
         85:4e:5c:23:94:5b:96:a3:8f:cd:fc:c1:79:62:f7:48:8a:aa:
         4e:d6:3a:cf:cb:c8:a5:03:c9:32:72:cc:c7:dd:f4:ac:2e:36:
         19:a7:f0:5a:08:03:89:7e:c5:f5:ac:47:6c:e9:0a:d2:4c:be:
         31:ed:fc:cc:8f:08:9f:a3:57:e4:ab:32:cb:ae:f1:75:e8:65:
         e0:59:35:08:0d:b8:a0:f6:44:a7:7c:e7:89:df:97:11:00:d8:
         47:69:83:80:9b:6f:96:c0:70:15:21:ec:47:a3:81:b7:d2:f4:
         97:1e:a5:b2:83:2e:e6:44:86:b2:7f:18:b6:42:88:e4:93:d9:
         5b:db:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----