This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231332e302f32342d3234203d3e20323635383939.roa
File:                     34352e3136332e3231332e302f32342d3234203d3e20323635383939.roa (raw, json)
Hash identifier:          yf58KIvALtCtTn/KODau3JDPGyM/QuTxzARh1pS4etA=
Subject key identifier:   B0:34:A0:9D:97:70:D6:97:FF:D3:5B:28:AB:F7:C3:9B:B9:DE:11:83
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       13EB2F1D3D4D0021C6CF5A78DEE1A281FBA0D6EA
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231332e302f32342d3234203d3e20323635383939.roa
Signing time:             Fri 25 Jul 2025 18:33:04 +0000
ROA not before:           Fri 25 Jul 2025 18:28:04 +0000
ROA not after:            Fri 24 Jul 2026 18:33:04 +0000
asID:                     265899
IP address blocks:        45.163.213.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 28 Jul 2025 06:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:eb:2f:1d:3d:4d:00:21:c6:cf:5a:78:de:e1:a2:81:fb:a0:d6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 25 18:28:04 2025 GMT
            Not After : Jul 24 18:33:04 2026 GMT
        Subject: CN=B034A09D9770D697FFD35B28ABF7C39BB9DE1183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:9b:c1:22:ba:b7:1c:62:cf:fe:8c:c0:f9:
                    02:9b:85:e6:52:f6:81:85:25:28:8a:fa:1a:57:a9:
                    78:84:7c:57:91:4c:22:4c:48:57:72:aa:b2:d7:05:
                    5d:93:7a:12:4e:86:b4:b3:02:81:fa:f5:c8:69:cb:
                    32:af:27:7a:1e:92:a3:38:e9:3b:37:d7:b3:a4:de:
                    08:4b:ee:8f:d0:03:ec:4f:ec:a0:86:ec:33:d9:6f:
                    07:bc:98:f7:6c:04:cf:cf:f3:a4:f2:2f:92:47:a3:
                    eb:05:c6:a3:3d:85:87:08:d5:88:64:1d:c7:98:d7:
                    39:96:2e:be:6d:c1:89:8f:0d:93:88:cb:f3:3f:d3:
                    7a:f4:8d:32:bc:2e:27:f7:49:0b:c9:20:f4:58:9f:
                    b7:e7:6a:a3:23:96:42:c0:a3:51:56:69:12:f3:dc:
                    62:fc:5b:29:c2:44:9e:46:42:4e:93:77:35:15:ee:
                    15:69:ab:45:65:88:da:9f:c3:49:95:0b:f3:cd:ec:
                    2b:02:87:c2:ad:c7:52:17:f2:92:8c:a6:14:6f:f8:
                    f7:b3:44:58:f5:c8:bd:2e:31:e3:c4:48:ee:51:fb:
                    7c:66:15:fb:a8:ae:7a:ff:fb:3c:4e:ff:05:64:ae:
                    ad:c8:de:4f:12:4c:31:bd:52:1e:67:6d:f2:f3:4d:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:34:A0:9D:97:70:D6:97:FF:D3:5B:28:AB:F7:C3:9B:B9:DE:11:83
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231332e302f32342d3234203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:36:9e:74:23:11:d6:1e:bf:a1:66:f5:7f:68:50:13:9e:b6:
         88:5d:50:77:5d:45:f7:91:fc:55:00:e5:d3:b4:ec:a4:f4:d2:
         f8:09:da:e4:12:83:5b:3d:fa:6f:e2:e1:2c:19:86:89:d3:ba:
         89:cf:62:ee:7b:aa:f3:7f:7d:a5:77:8c:8a:3e:bf:df:3e:11:
         71:da:7b:d1:9e:af:0b:ae:17:68:6c:a1:4c:6a:31:82:80:3e:
         8f:82:ae:34:3a:bd:bf:f4:eb:28:ef:af:f5:f7:54:67:2b:e8:
         d4:22:49:75:9a:e2:17:0f:97:ac:05:df:b0:09:0f:d9:7e:4d:
         3f:a7:18:ad:dd:23:8c:73:ee:5d:68:aa:15:ab:b8:72:34:ed:
         50:45:0a:bd:4b:09:4a:a8:b9:10:c0:b0:36:bf:c8:4a:c5:37:
         38:53:2a:43:f2:4e:ed:82:6d:24:10:a5:4a:32:82:4e:0d:78:
         ad:8f:45:1c:7e:57:52:20:4c:bd:c7:79:77:c4:85:58:2b:27:
         c7:c3:e2:6e:fd:31:78:b3:c6:56:bc:08:2e:b5:b4:fa:db:60:
         7f:31:e0:75:58:ce:f5:45:bb:b3:52:63:97:74:af:1f:58:e4:
         e9:7c:92:99:1e:74:be:b5:82:11:e6:1c:61:96:57:1f:80:a5:
         1f:11:89:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE+svHT1NACHGz1p43uGigfug1uowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2
RjVFRjEwQjAeFw0yNTA3MjUxODI4MDRaFw0yNjA3MjQxODMzMDRaMDMxMTAvBgNV
BAMTKEIwMzRBMDlEOTc3MEQ2OTdGRkQzNUIyOEFCRjdDMzlCQjlERTExODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkJvBIrq3HGLP/ozA+QKbheZS
9oGFJSiK+hpXqXiEfFeRTCJMSFdyqrLXBV2TehJOhrSzAoH69chpyzKvJ3oekqM4
6Ts317Ok3ghL7o/QA+xP7KCG7DPZbwe8mPdsBM/P86TyL5JHo+sFxqM9hYcI1Yhk
HceY1zmWLr5twYmPDZOIy/M/03r0jTK8Lif3SQvJIPRYn7fnaqMjlkLAo1FWaRLz
3GL8WynCRJ5GQk6TdzUV7hVpq0VliNqfw0mVC/PN7CsCh8Ktx1IX8pKMphRv+Pez
RFj1yL0uMePESO5R+3xmFfuornr/+zxO/wVkrq3I3k8STDG9Uh5nbfLzTb2zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsDSgnZdw1pf/01soq/fDm7neEYMwHwYDVR0j
BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx
NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzQzNTJlMzEzNjMzMmUzMjMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAto9UwDQYJKoZIhvcNAQELBQADggEBABk2nnQj
EdYev6Fm9X9oUBOetohdUHddRfeR/FUA5dO07KT00vgJ2uQSg1s9+m/i4SwZhonT
uonPYu57qvN/faV3jIo+v98+EXHae9GerwuuF2hsoUxqMYKAPo+CrjQ6vb/06yjv
r/X3VGcr6NQiSXWa4hcPl6wF37AJD9l+TT+nGK3dI4xz7l1oqhWruHI07VBFCr1L
CUqouRDAsDa/yErFNzhTKkPyTu2CbSQQpUoygk4NeK2PRRx+V1IgTL3HeXfEhVgr
J8fD4m79MXizxla8CC61tPrbYH8x4HVYzvVFu7NSY5d0rx9Y5Ol8kpkedL61ghHm
HGGWVx+ApR8RiTg=
-----END CERTIFICATE-----