This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31382e302f32342d3234203d3e20323635383939.roa
File:                     3133312e3139362e31382e302f32342d3234203d3e20323635383939.roa (raw, json)
Hash identifier:          HV9EYgKE7qb5y8xnO+sLUDIWk+UFeabOKgxOTzg+0HA=
Subject key identifier:   A8:00:13:92:8F:43:FE:95:00:AA:EC:4A:B9:55:02:9E:3E:04:33:87
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       221B47002A62D38967029C3EF06CBCBBAB44E7EF
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31382e302f32342d3234203d3e20323635383939.roa
Signing time:             Fri 25 Jul 2025 18:34:06 +0000
ROA not before:           Fri 25 Jul 2025 18:29:06 +0000
ROA not after:            Fri 24 Jul 2026 18:34:06 +0000
asID:                     265899
IP address blocks:        131.196.18.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 28 Jul 2025 06:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1b:47:00:2a:62:d3:89:67:02:9c:3e:f0:6c:bc:bb:ab:44:e7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 25 18:29:06 2025 GMT
            Not After : Jul 24 18:34:06 2026 GMT
        Subject: CN=A80013928F43FE9500AAEC4AB955029E3E043387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:a5:0c:81:f3:1a:69:26:7f:92:27:56:a2:
                    6f:9c:a2:b9:b7:a4:e3:d4:f8:7e:bf:7d:a5:d3:33:
                    06:5c:00:1f:27:a3:c9:39:ee:20:ef:70:77:ad:8a:
                    7b:f6:b0:91:77:16:2f:96:b1:0a:ff:3f:46:12:94:
                    cb:04:0f:f4:7c:fc:85:19:3c:03:49:77:e3:6b:f5:
                    c4:9c:04:06:c6:2b:79:b1:39:89:eb:2e:a8:68:31:
                    cc:1b:4b:f7:53:6a:c0:8e:10:23:17:35:4b:7f:b0:
                    c2:0f:b3:57:1a:73:11:9e:fe:56:4e:d8:ed:26:99:
                    02:0c:55:1d:f6:00:ed:9b:0d:96:8a:a0:d5:c1:83:
                    85:f4:02:d3:84:a8:c3:7b:be:b2:1e:15:c7:ca:fb:
                    39:24:c5:70:07:81:15:47:fa:5c:fb:cb:93:d1:17:
                    01:9e:54:3d:dd:2d:75:4c:95:b8:3e:95:4d:3f:92:
                    a5:5e:fc:bb:0f:cf:27:1c:a2:cf:df:0b:af:38:76:
                    b0:4c:e6:99:58:a7:3f:96:34:ba:9b:ba:72:e2:e8:
                    80:9d:61:9e:67:c2:47:c1:14:36:1b:3c:e6:46:a2:
                    8b:1d:10:06:d2:7e:44:d9:a1:40:95:f9:9d:f1:19:
                    8a:54:56:b6:f1:16:b1:73:2f:82:69:bf:be:35:0a:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:00:13:92:8F:43:FE:95:00:AA:EC:4A:B9:55:02:9E:3E:04:33:87
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31382e302f32342d3234203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:73:0a:e2:6f:81:ca:2e:70:62:f0:f7:ce:2a:fa:e1:07:78:
         c6:55:af:c8:9b:d8:cb:8d:2e:71:7d:bc:7c:8c:ee:ad:ba:a2:
         70:e8:4f:4b:d1:3a:db:1f:b6:36:0e:51:8b:32:37:39:30:54:
         f8:c2:3e:78:62:e6:c8:0f:f3:2c:c6:0d:71:dc:ef:9f:45:d8:
         47:56:7a:f4:e5:4b:68:27:1a:22:61:35:5b:7c:4b:37:f9:d4:
         3c:86:8c:88:11:b5:27:97:44:00:f3:bc:fa:61:ab:87:a0:05:
         0d:58:b1:d1:3b:f9:6d:83:af:07:d2:1d:0e:9d:41:2d:9d:13:
         27:fa:a3:41:df:a4:82:8b:9a:dc:40:b6:59:fa:b4:aa:72:e1:
         3f:63:43:84:61:67:d1:2f:08:79:f1:45:b2:72:26:db:b4:f6:
         bc:78:68:a6:86:75:dc:90:62:7a:3a:f6:7f:5e:8a:55:86:e1:
         32:a7:28:2d:22:c1:08:5b:f2:6a:c8:cb:22:1b:96:2f:42:3d:
         51:7f:ea:98:e1:49:19:da:3b:a6:4c:90:d3:c7:e1:9c:09:7e:
         68:6a:3c:f3:bc:f1:1c:a2:9c:7a:61:b8:2e:50:75:d9:43:5e:
         b5:58:cd:b8:07:a7:b4:3e:5c:8d:75:6f:87:fd:97:90:49:d8:
         e9:a0:9a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----