This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231342e302f32332d3233203d3e20323635383939.roa
File:                     34352e3136332e3231342e302f32332d3233203d3e20323635383939.roa (raw, json)
Hash identifier:          5U/imho5cXO244qbxfD1iQwLRXFeHpHTeiD8PHACi1U=
Subject key identifier:   E8:41:DD:F2:EB:F5:AF:94:B0:CA:A4:04:BB:5A:38:75:13:4A:42:FA
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       7AABE8474E7DD345BFDB555219C5BBE20FE1FD12
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231342e302f32332d3233203d3e20323635383939.roa
Signing time:             Fri 25 Jul 2025 18:33:10 +0000
ROA not before:           Fri 25 Jul 2025 18:28:10 +0000
ROA not after:            Fri 24 Jul 2026 18:33:10 +0000
asID:                     265899
IP address blocks:        45.163.214.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Mon 28 Jul 2025 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ab:e8:47:4e:7d:d3:45:bf:db:55:52:19:c5:bb:e2:0f:e1:fd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 25 18:28:10 2025 GMT
            Not After : Jul 24 18:33:10 2026 GMT
        Subject: CN=E841DDF2EBF5AF94B0CAA404BB5A3875134A42FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:50:8a:87:1f:ed:d6:f9:c5:4c:c8:3e:bd:
                    06:4a:6d:63:54:35:79:ca:02:0a:f8:61:84:26:fa:
                    0b:16:0c:f8:35:12:b3:b2:2d:f2:0b:b8:09:c9:94:
                    28:78:b2:39:50:d0:4d:90:b1:87:9e:82:53:09:ab:
                    c7:07:d8:40:4a:86:71:2c:00:e7:8f:10:f8:e8:9e:
                    7c:3e:ed:d9:ac:07:8f:1b:f3:b7:a0:fa:f8:3b:62:
                    bd:ba:49:c3:ad:84:a5:cb:d0:d8:49:16:05:ca:40:
                    2c:de:99:88:d3:3f:0f:a4:3b:35:27:72:62:4e:02:
                    21:7a:6e:89:d2:27:eb:69:bc:01:f6:8b:69:e5:4c:
                    97:7a:24:bb:5b:60:e2:a9:a4:d4:30:cd:40:91:e7:
                    5e:43:1c:a1:62:4a:5f:42:61:a8:f6:6f:fa:75:b7:
                    cd:e6:0e:33:62:7a:01:c1:f2:99:41:d4:9f:20:48:
                    98:25:17:0a:30:35:b2:6c:1e:57:cc:4b:41:fa:a4:
                    60:22:ab:ac:2d:ce:2b:b1:09:61:26:96:7c:87:09:
                    a7:4f:a0:86:30:fa:18:fc:8f:00:2b:6c:bd:8d:da:
                    8e:ab:8f:cd:2e:65:58:28:14:f6:ed:5e:c5:80:ea:
                    68:70:f0:05:40:19:05:be:77:24:fc:4e:a8:a1:5a:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:41:DD:F2:EB:F5:AF:94:B0:CA:A4:04:BB:5A:38:75:13:4A:42:FA
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231342e302f32332d3233203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:ee:21:44:c4:b7:b3:da:dd:eb:f0:e4:ed:59:18:80:70:23:
         0a:bf:e1:8a:e8:30:a2:38:73:5c:e8:0a:a4:a1:1a:a0:30:4f:
         62:fb:f2:81:84:c4:fe:3e:06:f6:0f:9f:6f:aa:66:9d:ef:42:
         9c:27:1e:e3:ce:d7:ef:d4:11:9a:63:d7:ff:bd:31:99:07:c1:
         09:59:42:df:51:11:40:f7:e0:19:ef:9d:f5:b1:46:61:48:64:
         d4:64:a0:74:ba:7a:ea:94:31:18:9e:79:ac:15:a5:79:bc:5b:
         d3:ea:bf:64:17:9d:27:ec:7a:14:94:b2:ee:fb:a4:1b:4d:14:
         f8:32:d2:a6:90:2d:a8:9d:b9:ca:19:02:b3:da:cc:30:81:c7:
         08:44:bc:88:55:2a:9a:c1:62:8b:f7:32:4c:fe:fa:0e:a8:d6:
         a2:8e:ee:ee:57:70:62:52:1e:2b:f5:11:99:36:86:9d:66:02:
         6d:a3:84:4f:a1:d9:f2:a0:90:c0:94:3c:46:8c:95:9c:1b:aa:
         d9:89:0d:4e:9f:26:0b:4b:a9:d8:aa:b4:64:55:5e:05:22:c2:
         33:83:60:ef:58:0d:0d:3c:99:b8:36:58:93:99:1c:a2:1d:2b:
         07:40:8b:de:1a:26:83:df:f6:9c:eb:29:d1:c1:ec:b4:37:5a:
         d8:94:c3:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeqvoR05900W/21VSGcW74g/h/RIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2
RjVFRjEwQjAeFw0yNTA3MjUxODI4MTBaFw0yNjA3MjQxODMzMTBaMDMxMTAvBgNV
BAMTKEU4NDFEREYyRUJGNUFGOTRCMENBQTQwNEJCNUEzODc1MTM0QTQyRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TlCKhx/t1vnFTMg+vQZKbWNU
NXnKAgr4YYQm+gsWDPg1ErOyLfILuAnJlCh4sjlQ0E2QsYeeglMJq8cH2EBKhnEs
AOePEPjonnw+7dmsB48b87eg+vg7Yr26ScOthKXL0NhJFgXKQCzemYjTPw+kOzUn
cmJOAiF6bonSJ+tpvAH2i2nlTJd6JLtbYOKppNQwzUCR515DHKFiSl9CYaj2b/p1
t83mDjNiegHB8plB1J8gSJglFwowNbJsHlfMS0H6pGAiq6wtziuxCWEmlnyHCadP
oIYw+hj8jwArbL2N2o6rj80uZVgoFPbtXsWA6mhw8AVAGQW+dyT8TqihWvsDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6EHd8uv1r5SwyqQEu1o4dRNKQvowHwYDVR0j
BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx
NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzQzNTJlMzEzNjMzMmUzMjMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEto9YwDQYJKoZIhvcNAQELBQADggEBAG/uIUTE
t7Pa3evw5O1ZGIBwIwq/4YroMKI4c1zoCqShGqAwT2L78oGExP4+BvYPn2+qZp3v
QpwnHuPO1+/UEZpj1/+9MZkHwQlZQt9REUD34BnvnfWxRmFIZNRkoHS6euqUMRie
eawVpXm8W9Pqv2QXnSfsehSUsu77pBtNFPgy0qaQLaiducoZArPazDCBxwhEvIhV
KprBYov3Mkz++g6o1qKO7u5XcGJSHiv1EZk2hp1mAm2jhE+h2fKgkMCUPEaMlZwb
qtmJDU6fJgtLqdiqtGRVXgUiwjODYO9YDQ08mbg2WJOZHKIdKwdAi94aJoPf9pzr
KdHB7LQ3WtiUw9o=
-----END CERTIFICATE-----