This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
File:                     34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa (raw, json)
Hash identifier:          C63v9tj/GuojWaKxKXF++aEHp17HJAiC8FaB30gs4os=
Subject key identifier:   08:41:6A:BF:5D:76:D5:F8:B7:FA:4A:ED:BD:3F:E4:10:41:3F:11:89
Certificate issuer:       /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial:       13789EFE955293B96DB0BED160DAA4C93F4F7B1B
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
Signing time:             Mon 11 Aug 2025 13:19:38 +0000
ROA not before:           Mon 11 Aug 2025 13:14:38 +0000
ROA not after:            Mon 10 Aug 2026 13:19:38 +0000
asID:                     267027
IP address blocks:        45.227.168.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:78:9e:fe:95:52:93:b9:6d:b0:be:d1:60:da:a4:c9:3f:4f:7b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
        Validity
            Not Before: Aug 11 13:14:38 2025 GMT
            Not After : Aug 10 13:19:38 2026 GMT
        Subject: CN=08416ABF5D76D5F8B7FA4AEDBD3FE410413F1189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:c6:d3:ce:5d:de:a0:a1:76:65:b6:5a:ea:
                    45:eb:91:e9:ba:83:de:15:ac:02:9a:f2:a3:4f:51:
                    29:c5:8a:87:54:5b:e6:03:ac:f1:14:41:29:7a:0e:
                    e3:e0:0d:0d:05:6b:34:f0:62:48:e2:be:f1:16:ef:
                    75:c6:dd:54:a3:04:21:b7:ae:87:19:7a:e2:85:3a:
                    d5:bb:68:fd:7b:55:58:b1:a0:c8:01:36:91:23:62:
                    e7:20:46:b6:9a:7d:36:a8:b6:6b:2e:ea:51:80:96:
                    91:71:0f:a5:94:d0:ee:9c:10:4a:51:9c:61:54:81:
                    7a:fe:4c:b6:c5:1f:39:13:92:b0:8d:53:88:c4:c2:
                    4b:7f:f2:fc:70:46:d4:a6:df:fd:a5:1c:b2:ad:db:
                    ff:b5:60:41:92:2c:e3:8a:67:bb:16:43:10:c8:1e:
                    b8:50:9f:73:77:25:c9:16:30:3b:d4:63:62:85:42:
                    79:9a:43:18:e3:b3:7a:db:a6:ca:97:4f:e0:4b:47:
                    87:9f:92:07:44:d8:36:f5:a8:ef:f7:c7:be:e4:ed:
                    5c:8d:6b:7d:7c:e9:ae:69:5b:7f:d3:67:20:2f:b9:
                    59:fe:ee:a4:a3:1d:93:13:01:47:63:3b:84:fc:bb:
                    f9:3d:71:dc:c1:87:07:50:41:a6:b0:8d:a4:c1:bc:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:41:6A:BF:5D:76:D5:F8:B7:FA:4A:ED:BD:3F:E4:10:41:3F:11:89
            X509v3 Authority Key Identifier:
                keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:2b:b3:48:d4:35:c4:d4:c3:9a:1b:23:b7:18:d2:93:18:63:
         ff:81:71:f1:3e:5a:98:c1:bf:5f:aa:b6:51:3f:58:98:86:a1:
         18:b9:ca:2c:c4:9e:2c:e1:1f:9a:99:fd:8e:87:1d:36:08:7e:
         fd:fc:be:4e:13:0e:4c:4d:e1:8b:bb:f8:11:60:cb:93:83:5a:
         0d:90:a6:88:cd:ae:3e:97:16:2f:2f:b8:1e:00:bf:73:b7:43:
         5e:5e:0c:95:52:b3:8a:fb:19:31:55:b6:ef:2c:d1:93:97:c0:
         cf:cb:fc:93:b6:84:0b:00:ba:d8:3e:8a:06:ad:27:08:0a:b7:
         73:ab:60:b8:3b:a0:c0:9d:cd:51:38:27:d5:29:53:36:f1:71:
         97:07:23:e6:92:c9:ab:bd:f5:fd:bd:25:c9:55:d2:c6:02:9f:
         51:56:7b:6b:9c:0d:93:f4:28:8b:f4:45:c9:03:6b:50:06:16:
         4d:59:45:a2:cd:c8:ed:89:d1:bb:da:e4:17:4a:f0:b0:97:ce:
         b0:df:a5:f9:8d:eb:8a:5f:d3:83:0a:14:82:f2:83:76:84:28:
         a3:1e:57:14:d8:fc:d9:d3:b5:2f:f2:43:5d:c2:45:a3:22:1b:
         82:59:65:e1:e1:61:7f:8b:76:d7:68:d9:bf:a3:5f:b6:bc:65:
         36:51:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----