This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231352e302f32342d3234203d3e20323635383939.roa
File:                     34352e3136332e3231352e302f32342d3234203d3e20323635383939.roa (raw, json)
Hash identifier:          Vzooen7x0RCCOJmmsUoUclNBDmyZwOCibhHJbe7Nj1U=
Subject key identifier:   DB:54:E2:D2:DB:AF:B3:0D:59:BC:EF:4B:18:B9:25:BE:EE:12:BA:2B
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       15848A6009B2A4EA39FEF3B1B5A7642C04316DAE
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231352e302f32342d3234203d3e20323635383939.roa
Signing time:             Fri 25 Jul 2025 18:33:27 +0000
ROA not before:           Fri 25 Jul 2025 18:28:27 +0000
ROA not after:            Fri 24 Jul 2026 18:33:27 +0000
asID:                     265899
IP address blocks:        45.163.215.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 28 Jul 2025 06:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:84:8a:60:09:b2:a4:ea:39:fe:f3:b1:b5:a7:64:2c:04:31:6d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 25 18:28:27 2025 GMT
            Not After : Jul 24 18:33:27 2026 GMT
        Subject: CN=DB54E2D2DBAFB30D59BCEF4B18B925BEEE12BA2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:55:35:55:57:84:54:c1:01:01:1a:64:df:
                    b1:e4:13:3e:07:ec:e8:11:9e:80:79:a5:10:c8:96:
                    71:bf:a7:c8:90:d9:74:47:01:e0:19:11:ba:e5:1e:
                    d5:ab:18:8a:98:d0:4b:82:e9:29:5a:c5:cb:84:13:
                    86:b9:a1:8c:78:d4:b4:61:c9:a5:57:b9:48:1c:6b:
                    bf:61:aa:7f:fb:fc:7d:cc:b1:67:b9:0a:dd:f8:23:
                    b7:ac:6a:52:00:54:f0:3e:a6:ad:1d:88:85:9b:cd:
                    56:db:dc:29:fd:8c:5d:95:01:38:b4:48:a0:00:e0:
                    61:34:e5:4d:db:da:a2:13:a1:ef:dd:32:09:62:0a:
                    16:ee:24:26:14:a2:96:29:6b:c1:e9:92:70:5c:ca:
                    85:36:0b:a7:ef:38:a5:2b:f4:3a:23:e4:89:a7:2f:
                    bf:d5:cd:4d:76:c0:6c:99:61:a2:bd:37:5c:74:ff:
                    90:e9:ab:12:14:1d:87:a7:35:2e:2e:10:2f:7e:b0:
                    39:69:7c:0f:bc:ce:10:bc:2e:3b:02:72:2a:88:0d:
                    ef:6c:bb:85:8b:f1:f7:10:78:da:8b:70:73:e1:91:
                    a5:3c:8e:2c:73:1a:1d:58:12:f2:0a:30:c9:c4:06:
                    1c:59:24:15:d0:65:e3:4a:1f:96:09:ef:15:a3:29:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:54:E2:D2:DB:AF:B3:0D:59:BC:EF:4B:18:B9:25:BE:EE:12:BA:2B
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231352e302f32342d3234203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:35:7f:36:17:4d:41:90:53:02:6f:51:15:53:c9:58:62:
         6c:b6:df:9c:d8:d2:ab:9a:5b:f6:79:a2:84:8c:6e:c5:6a:95:
         17:56:b6:07:55:f6:fb:53:3c:4c:ae:27:f4:51:95:34:63:84:
         b4:81:f8:aa:16:b2:7e:78:ef:fd:37:3f:47:eb:81:cd:4b:34:
         85:fb:06:44:ee:d7:be:f6:e9:03:49:34:cd:bc:3f:ef:fe:7e:
         fa:4f:bc:53:61:44:62:3f:5e:9a:3a:0b:30:2d:12:7c:12:92:
         5c:64:3c:45:11:6d:d0:fb:b9:00:f4:53:6b:4b:60:5e:0c:55:
         1f:5f:e7:e8:3e:e3:5b:0f:99:e6:3b:da:39:99:fe:4a:5e:d5:
         9b:b0:08:df:60:b0:ca:9e:7f:ec:8e:04:b5:01:88:f8:40:5a:
         28:ad:09:ba:c1:30:49:ad:15:7d:16:80:6c:8a:d7:f7:77:78:
         e8:cd:8f:f3:f7:e6:64:9c:ab:71:f2:fa:44:df:e0:49:56:93:
         ca:9b:d4:da:af:1f:e8:77:de:97:99:fd:bd:b2:03:f9:c7:40:
         5b:75:26:40:c6:45:cd:e3:87:d9:f5:1a:81:50:70:e2:1d:ab:
         d4:59:26:37:cb:e8:7c:a2:c3:ff:61:9b:d0:42:71:c7:ea:29:
         3b:1f:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----