This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313039303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a313039303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          jaBWqgeWOVvEtFI7MvUC+MU3gD0nU2yNNbEqXqXNgn8=
Subject key identifier:   D4:36:4F:13:69:5B:9B:45:36:FB:A1:D2:F3:B5:B9:5F:FC:F8:C2:6C
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       1567687DF790C0EC3DE2B5B0765FB1D10470DFEA
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313039303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Tue 20 May 2025 04:25:01 +0000
ROA not before:           Tue 20 May 2025 04:20:01 +0000
ROA not after:            Tue 19 May 2026 04:25:01 +0000
asID:                     28403
IP address blocks:        2806:370:1090::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:67:68:7d:f7:90:c0:ec:3d:e2:b5:b0:76:5f:b1:d1:04:70:df:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 20 04:20:01 2025 GMT
            Not After : May 19 04:25:01 2026 GMT
        Subject: CN=D4364F13695B9B4536FBA1D2F3B5B95FFCF8C26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:05:a4:3b:7e:61:15:f2:ec:a1:88:45:91:
                    9a:34:2f:fa:ac:4e:1c:cd:1d:a2:ce:66:f2:ed:cf:
                    4d:b9:7e:1d:4e:b6:75:ef:6a:50:9d:18:43:f9:f8:
                    55:b8:c7:1f:19:2f:ba:06:11:ae:b3:cd:3c:b7:cc:
                    7f:40:cd:c4:0c:03:6c:10:00:73:6e:04:70:ad:1d:
                    29:1f:38:b9:b7:56:63:e1:f9:bc:9a:85:3a:2e:d3:
                    bf:8c:5a:49:56:ab:7c:3e:1d:19:10:0b:9e:81:d1:
                    29:23:0f:d0:f5:57:49:5e:7f:07:39:4c:79:ba:9a:
                    ee:3a:ff:ba:59:50:72:8b:cd:1b:c4:e7:98:9c:d1:
                    aa:97:3d:5a:9b:2e:2c:73:12:3d:1d:a6:bc:1a:4d:
                    f1:3c:fa:2c:3a:3f:86:e8:e6:10:84:30:38:68:35:
                    5c:ff:a8:2b:81:83:0b:26:05:14:cb:ef:10:87:62:
                    36:6b:56:2c:5e:fc:7c:59:37:5a:db:47:13:de:c6:
                    8e:de:4f:f7:f3:18:d3:90:32:3b:24:ee:d2:3d:71:
                    b3:b8:53:b6:72:30:85:6c:59:fe:52:e0:9c:46:89:
                    eb:ed:24:4a:36:b0:54:5e:99:7a:aa:95:73:10:93:
                    15:0a:07:b6:cf:68:b1:da:cd:91:f3:08:51:ed:dc:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:36:4F:13:69:5B:9B:45:36:FB:A1:D2:F3:B5:B9:5F:FC:F8:C2:6C
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313039303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:1090::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:65:e3:d6:44:c3:4b:95:3b:41:93:93:58:25:24:76:0e:
         1e:63:82:b6:7f:f9:7f:8d:b2:f3:68:44:ba:2b:62:a4:f4:22:
         17:b8:35:e1:9a:10:b1:eb:65:59:65:b2:83:5d:1f:ab:17:1b:
         d2:d4:af:15:cc:3d:2a:3e:6a:5c:2a:58:07:95:1b:06:70:af:
         fc:6c:f5:88:cb:69:df:48:c5:0d:72:cd:32:91:56:0d:c9:bd:
         be:18:0f:08:a1:6f:13:1d:50:8d:d3:31:ec:65:42:b4:d1:e8:
         92:e4:c1:ac:69:77:f7:ba:dd:fe:ac:df:66:18:8c:c6:6f:65:
         55:c2:9d:f1:8b:0c:b0:fa:40:c9:27:90:2e:34:fd:59:e2:82:
         a0:b6:3c:85:8c:3b:65:a0:22:b2:f4:c3:83:cb:55:c5:71:e6:
         25:cb:01:f2:db:53:ad:cb:4c:3c:d9:d3:b9:c1:15:36:0e:e8:
         e1:9e:2d:be:97:a5:ee:40:11:ab:ab:70:b7:2c:28:2c:bd:58:
         91:fa:9d:ae:2e:e7:c1:ab:6d:6c:b8:eb:bd:ff:be:fe:56:1b:
         89:3e:5f:e2:53:b5:6b:65:c7:7e:ea:f4:e3:99:88:50:9f:02:
         39:16:6c:78:19:5c:80:80:d4:60:6c:79:3e:dd:5e:70:e8:4b:
         aa:33:2c:27
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUFWdoffeQwOw94rWwdl+x0QRw3+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBBNkM4NzhDNEZGOTJFODdDMjE3QjJDRkFBMDJEMEE5
OTVEMDQ5NjAeFw0yNTA1MjAwNDIwMDFaFw0yNjA1MTkwNDI1MDFaMDMxMTAvBgNV
BAMTKEQ0MzY0RjEzNjk1QjlCNDUzNkZCQTFEMkYzQjVCOTVGRkNGOEMyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUgWkO35hFfLsoYhFkZo0L/qs
ThzNHaLOZvLtz025fh1OtnXvalCdGEP5+FW4xx8ZL7oGEa6zzTy3zH9AzcQMA2wQ
AHNuBHCtHSkfOLm3VmPh+byahTou07+MWklWq3w+HRkQC56B0SkjD9D1V0lefwc5
THm6mu46/7pZUHKLzRvE55ic0aqXPVqbLixzEj0dprwaTfE8+iw6P4bo5hCEMDho
NVz/qCuBgwsmBRTL7xCHYjZrVixe/HxZN1rbRxPexo7eT/fzGNOQMjsk7tI9cbO4
U7ZyMIVsWf5S4JxGievtJEo2sFRemXqqlXMQkxUKB7bPaLHazZHzCFHt3LKDAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU1DZPE2lbm0U2+6HS87W5X/z4wmwwHwYDVR0j
BBgwFoAUoKbIeMT/kuh8IXss+qAtCpldBJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NEYwOTgyQzZGOTUwQjlEREIxOTcxQ0E3QzU4RDRDNjkw
MTVDRTEyMDUyMEE5N0M5MDg1MTNBRTVDMzRDQUVGLzAvQTBBNkM4NzhDNEZGOTJF
ODdDMjE3QjJDRkFBMDJEMEE5OTVEMDQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMEE2Qzg3OEM0RkY5MkU4N0My
MTdCMkNGQUEwMkQwQTk5NUQwNDk2LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDRGMDk4MkM2Rjk1MEI5RERCMTk3MUNBN0M1OEQ0QzY5MDE1Q0UxMjA1
MjBBOTdDOTA4NTEzQUU1QzM0Q0FFRi8wLzMyMzgzMDM2M2EzMzM3MzAzYTMxMzAz
OTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzODM0MzAzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BCgGA3AQkDANBgkqhkiG9w0BAQsFAAOCAQEAc21l49ZEw0uVO0GTk1glJHYOHmOC
tn/5f42y82hEuitipPQiF7g14ZoQsetlWWWyg10fqxcb0tSvFcw9Kj5qXCpYB5Ub
BnCv/Gz1iMtp30jFDXLNMpFWDcm9vhgPCKFvEx1QjdMx7GVCtNHokuTBrGl397rd
/qzfZhiMxm9lVcKd8YsMsPpAySeQLjT9WeKCoLY8hYw7ZaAisvTDg8tVxXHmJcsB
8ttTrctMPNnTucEVNg7o4Z4tvpel7kARq6twtywoLL1Ykfqdri7nwattbLjrvf++
/lYbiT5f4lO1a2XHfur045mIUJ8CORZseBlcgIDUYGx5Pt1ecOhLqjMsJw==
-----END CERTIFICATE-----