This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32342d3234203d3e20323633343832.roa
File:                     3138392e38342e34362e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          wGqj+3xCHvy8WhrNXFK+/XHS3wwi7lO3SQxzNgG1tBc=
Subject key identifier:   98:F4:69:98:66:D2:60:58:2E:DF:6A:3F:AA:60:F3:BB:1A:83:28:34
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       6BD637B3F972372AE833B03E7E28AF1F80B08599
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32342d3234203d3e20323633343832.roa
Signing time:             Mon 31 Mar 2025 17:13:30 +0000
ROA not before:           Mon 31 Mar 2025 17:08:30 +0000
ROA not after:            Mon 30 Mar 2026 17:13:30 +0000
asID:                     263482
IP address blocks:        189.84.46.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 11 Jul 2025 11:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d6:37:b3:f9:72:37:2a:e8:33:b0:3e:7e:28:af:1f:80:b0:85:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Mar 31 17:08:30 2025 GMT
            Not After : Mar 30 17:13:30 2026 GMT
        Subject: CN=98F4699866D260582EDF6A3FAA60F3BB1A832834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:bc:19:d0:99:76:2f:7e:71:72:be:ce:41:
                    3f:fd:75:4e:13:96:19:f6:59:f5:37:28:84:1b:61:
                    a4:ac:34:f1:a5:5f:ab:31:7d:c6:7f:bc:23:5a:40:
                    15:13:48:1e:9e:2c:61:bd:b6:f0:0d:36:c6:87:b2:
                    40:a5:ae:b6:f5:4a:27:a4:55:1e:23:72:ed:9b:a0:
                    2e:9b:c9:55:d6:d8:fd:ec:10:7f:46:72:b9:22:6e:
                    68:69:35:d1:80:5e:11:16:59:f9:78:7b:44:a1:93:
                    13:cf:3b:b9:18:b0:9b:f3:75:39:5d:0c:1b:cc:9f:
                    98:0a:d7:7e:b9:d1:e7:53:e2:7e:50:7a:a7:cf:24:
                    e6:93:28:9b:46:87:f5:ca:42:33:37:77:77:4e:57:
                    f8:76:5d:94:ac:97:eb:cc:87:b1:d5:ff:ce:73:91:
                    2e:45:02:fe:c5:91:00:ca:fc:77:1b:a0:b1:38:c9:
                    56:0c:66:e7:d3:5d:e9:37:1b:10:cd:14:1d:b8:cb:
                    49:a0:c6:17:26:c2:ec:2b:c0:84:e4:fe:23:db:b4:
                    43:c5:e0:28:99:ae:99:20:95:b4:8f:4b:46:d1:10:
                    83:44:d6:5d:c1:d1:11:ce:c3:77:78:49:12:75:ee:
                    da:99:0e:43:0a:0d:90:42:cf:1b:95:45:0a:57:de:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F4:69:98:66:D2:60:58:2E:DF:6A:3F:AA:60:F3:BB:1A:83:28:34
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:79:ab:73:9b:4e:1e:89:7d:f5:61:87:f4:cf:56:f4:2a:9d:
         b9:4e:93:a7:2d:95:13:cd:be:0a:fa:b4:b4:f5:81:b0:d2:84:
         05:a9:fb:25:48:85:03:2c:6f:5c:4e:d9:d4:3a:99:07:a3:c8:
         c6:12:95:aa:97:aa:f7:2e:3f:f9:92:ee:7c:96:5b:6c:28:f0:
         49:4d:41:d3:db:97:f0:9c:2e:0e:5f:ce:75:8d:a9:eb:b0:10:
         9a:e5:5a:ac:4b:84:46:ab:dd:1c:d3:55:80:09:62:48:da:13:
         2d:92:88:b7:03:2e:23:be:dd:9b:28:10:f9:56:b9:83:0f:60:
         6e:b3:01:f5:45:77:86:f4:47:6f:e2:4f:b7:9c:c4:e5:3d:2b:
         4d:be:2e:ab:aa:c5:39:c5:5d:6a:f9:cd:21:be:87:b4:64:17:
         c6:8f:e3:47:2b:fa:a8:e8:11:8e:ca:a2:f6:c8:29:2d:2a:18:
         1a:67:a0:e3:c0:69:96:2c:72:d8:56:e3:a0:92:55:28:c6:48:
         74:aa:c1:89:4f:db:db:ea:2f:f7:14:18:ce:23:94:21:bf:f5:
         85:45:48:87:de:0b:a5:9c:84:7e:d3:79:13:2a:bd:2b:42:6e:
         0f:8b:77:0f:4c:4c:f6:f7:c4:e0:8d:03:28:f0:b4:2e:00:b5:
         6b:dd:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----