This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS268218.roa
File:                     AS268218.roa (raw, json)
Hash identifier:          qz9GPXckeBH9cw3KzBucJ1+bpe+Rt4CfYIb0RreUoWI=
Subject key identifier:   08:52:C7:79:C8:19:3C:E5:0C:E5:10:D2:46:41:3C:13:4E:26:F1:A8
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       4B72B7CDDCED4CCD0FE3FFB1FFDF406D23759945
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS268218.roa
Signing time:             Tue 20 May 2025 03:18:08 +0000
ROA not before:           Tue 20 May 2025 03:13:08 +0000
ROA not after:            Tue 19 May 2026 03:18:08 +0000
asID:                     268218
IP address blocks:        45.235.236.0/22 maxlen: 22
                          45.235.236.0/22 maxlen: 24
                          45.235.236.0/23 maxlen: 23
                          45.235.236.0/24 maxlen: 24
                          45.235.237.0/24 maxlen: 24
                          45.235.238.0/23 maxlen: 23
                          45.235.238.0/24 maxlen: 24
                          45.235.239.0/24 maxlen: 24
                          2804:4dc4::/32 maxlen: 32
                          2804:4dc4::/33 maxlen: 33
                          2804:4dc4::/34 maxlen: 34
                          2804:4dc4::/35 maxlen: 35
                          2804:4dc4::/36 maxlen: 36
                          2804:4dc4::/48 maxlen: 48
                          2804:4dc4:1000::/36 maxlen: 36
                          2804:4dc4:2000::/35 maxlen: 35
                          2804:4dc4:2000::/36 maxlen: 36
                          2804:4dc4:3000::/36 maxlen: 36
                          2804:4dc4:4000::/34 maxlen: 34
                          2804:4dc4:4000::/35 maxlen: 35
                          2804:4dc4:4000::/36 maxlen: 36
                          2804:4dc4:5000::/36 maxlen: 36
                          2804:4dc4:6000::/35 maxlen: 35
                          2804:4dc4:6000::/36 maxlen: 36
                          2804:4dc4:7000::/36 maxlen: 36
                          2804:4dc4:8000::/33 maxlen: 33
                          2804:4dc4:8000::/34 maxlen: 34
                          2804:4dc4:8000::/35 maxlen: 35
                          2804:4dc4:8000::/36 maxlen: 36
                          2804:4dc4:8400::/40 maxlen: 40
                          2804:4dc4:9000::/36 maxlen: 36
                          2804:4dc4:a000::/35 maxlen: 35
                          2804:4dc4:a000::/36 maxlen: 36
                          2804:4dc4:b000::/36 maxlen: 36
                          2804:4dc4:c000::/35 maxlen: 35
                          2804:4dc4:c000::/36 maxlen: 36
                          2804:4dc4:d000::/36 maxlen: 36
                          2804:4dc4:e000::/35 maxlen: 35
                          2804:4dc4:e000::/36 maxlen: 36
                          2804:4dc4:f000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Tue 20 May 2025 03:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:72:b7:cd:dc:ed:4c:cd:0f:e3:ff:b1:ff:df:40:6d:23:75:99:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: May 20 03:13:08 2025 GMT
            Not After : May 19 03:18:08 2026 GMT
        Subject: CN=0852C779C8193CE50CE510D246413C134E26F1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:b7:bf:a0:ac:27:d7:90:d9:0a:42:7a:6b:
                    39:93:cd:f5:f4:fc:c2:9a:a9:7c:08:39:7c:d8:93:
                    be:91:35:13:41:ec:4d:7a:3c:0e:24:b6:76:97:da:
                    b5:79:4e:98:8c:0e:2f:39:36:38:c7:ec:d3:bf:94:
                    dc:f6:16:1b:e5:de:e6:90:cb:e7:2c:ad:10:5a:a6:
                    2d:91:c0:1e:86:0d:17:6e:ac:73:c5:04:25:4f:82:
                    ab:29:3e:2d:83:1d:c5:bb:fa:2a:af:34:9f:e5:8d:
                    1a:59:18:40:d9:43:ec:34:f8:21:85:0a:79:a5:84:
                    de:df:40:4f:66:43:43:bb:13:a2:b1:e4:2d:40:21:
                    93:8f:68:ce:3c:d1:74:a9:c3:af:a1:07:89:e2:95:
                    08:bd:7f:73:57:25:99:a0:fc:f2:f2:f4:fb:41:a3:
                    9d:2a:85:9b:26:0a:17:15:e2:75:a3:ad:9e:52:b4:
                    d1:80:64:0a:ee:5b:4f:e5:31:01:cb:da:f3:89:9f:
                    98:6d:8f:0e:ec:fa:69:50:d8:41:84:05:c4:be:49:
                    a1:57:3b:b6:ea:8b:12:91:c4:6f:64:f2:41:ca:9e:
                    79:40:20:b7:07:e7:29:70:b1:46:df:70:d1:48:01:
                    b4:82:99:4c:d9:b4:85:32:46:dc:5d:ae:f3:23:1b:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:52:C7:79:C8:19:3C:E5:0C:E5:10:D2:46:41:3C:13:4E:26:F1:A8
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS268218.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.236.0/22
                IPv6:
                  2804:4dc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:62:e7:f9:0c:16:03:5e:fd:32:d9:da:fd:f2:7a:a1:b5:de:
         b1:42:78:6a:98:06:ec:fc:1b:7c:37:69:36:03:82:a7:67:93:
         79:c9:77:bb:38:8a:c9:94:4d:ca:42:ed:25:0e:58:cb:6d:3a:
         be:21:d6:41:2a:c6:f7:9e:94:a9:ec:55:b3:28:75:e4:3f:4b:
         94:2b:5e:04:38:b4:fc:3f:63:95:97:31:28:59:69:e5:66:53:
         1c:96:73:67:d1:6c:a9:a5:64:26:56:84:48:1d:68:91:84:26:
         82:3b:91:3d:70:6c:80:79:ca:5d:8b:96:40:74:b0:6b:0c:9f:
         c4:fb:48:ca:3a:1b:41:f9:16:a0:c9:82:44:3e:64:7e:3b:9d:
         9e:ca:26:8f:69:41:bd:26:de:29:54:12:41:7d:08:ae:72:c3:
         47:c7:39:67:86:e2:30:6e:c3:d3:33:a0:be:7a:4f:4f:4a:c9:
         96:03:06:7f:03:ff:c1:7c:76:02:90:79:ef:43:73:4a:96:97:
         e4:d7:97:80:b1:2d:28:e1:24:2c:30:27:8a:ce:c7:a4:d4:1f:
         a9:b7:41:24:fe:18:ce:a6:a0:89:64:d0:61:2f:2d:54:a1:0f:
         0e:2c:fe:49:3e:04:a3:9c:44:1a:e7:0f:18:c6:34:c4:89:a0:
         cf:f7:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:47:47 2025 by rpki-client