This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313063303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a313063303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          Q5XFMqEtXfsQZ0gmNV1f+NAQknwY8/YF82IIImkuLIc=
Subject key identifier:   F1:8B:DD:77:61:4E:FB:55:35:D0:A1:58:4B:23:86:FA:5F:61:AC:BF
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       4BDA60637BA13EE716680BB1F9911E3A6154ECEC
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313063303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Tue 20 May 2025 04:25:00 +0000
ROA not before:           Tue 20 May 2025 04:20:00 +0000
ROA not after:            Tue 19 May 2026 04:25:00 +0000
asID:                     28403
IP address blocks:        2806:370:10c0::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:da:60:63:7b:a1:3e:e7:16:68:0b:b1:f9:91:1e:3a:61:54:ec:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 20 04:20:00 2025 GMT
            Not After : May 19 04:25:00 2026 GMT
        Subject: CN=F18BDD77614EFB5535D0A1584B2386FA5F61ACBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:75:db:3a:eb:56:82:e8:9e:95:a6:07:b2:
                    88:13:0c:ed:96:dd:f1:8c:08:e9:01:c6:b1:13:62:
                    48:cc:be:ec:1f:f1:42:6e:58:bf:e7:40:27:a4:c7:
                    7a:52:4b:73:27:d3:a2:6f:af:da:75:aa:10:ac:23:
                    b3:4c:c8:c1:96:5e:8c:9b:90:85:23:41:5c:bd:48:
                    a5:14:79:7c:80:a7:fa:60:35:9f:ea:f8:99:b6:46:
                    4c:35:e9:c4:ee:2e:27:d1:60:10:80:e4:31:5d:b1:
                    3b:1a:af:63:2a:65:0b:ed:c9:89:59:48:a9:72:70:
                    b8:89:ab:4d:65:b9:6e:cd:12:0d:48:0a:7d:20:08:
                    3d:c3:e7:aa:dc:38:9e:fa:d7:b0:85:13:61:2d:37:
                    f9:fa:d9:1b:29:69:d2:53:94:d0:ac:a4:a7:fe:96:
                    6d:3f:05:3f:fe:a3:cb:82:68:55:cf:f6:4c:5e:fc:
                    19:ba:5a:95:65:be:ce:87:0a:c4:96:8f:4b:12:6c:
                    e1:73:6c:3c:87:07:08:02:0f:d2:c6:da:3e:da:f3:
                    37:85:31:a6:a1:dc:61:f0:80:1f:f8:41:5a:8d:c3:
                    7e:8d:71:a9:12:fb:84:7c:b0:7d:61:3e:7d:1d:8d:
                    a6:b8:79:11:b3:90:02:7c:7f:88:3a:56:fa:39:03:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8B:DD:77:61:4E:FB:55:35:D0:A1:58:4B:23:86:FA:5F:61:AC:BF
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313063303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:10c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:b6:76:f3:c5:e3:ff:34:62:5c:2a:8e:67:b6:19:86:ef:28:
         b0:54:b3:72:e1:35:40:8e:e8:4e:57:bd:e0:72:81:8f:8a:e6:
         67:1b:6f:f1:db:8d:0a:c2:d6:89:23:a3:de:db:33:e8:ab:e8:
         9a:ca:f4:e8:d6:37:26:d4:16:51:bf:37:4d:8e:10:88:76:e4:
         c5:54:5a:f1:37:cc:d7:86:01:bf:d9:5a:a9:98:0a:ad:a7:60:
         2b:18:22:48:c7:4a:c9:9e:8c:d0:fe:9f:ee:7c:de:7a:32:c3:
         18:4f:a6:7f:06:23:1a:22:a5:3b:7e:5b:3a:38:97:ba:b9:a3:
         0e:9c:49:68:b0:91:d6:be:05:15:9a:38:21:d6:46:c7:a3:96:
         60:f1:d3:1d:5d:41:86:f6:2b:80:61:d3:d3:fa:d3:62:cf:3e:
         cd:76:24:3d:dd:67:30:d6:dc:cc:8e:44:f3:a8:bc:85:3c:08:
         d8:a6:8b:90:5c:fd:cb:65:24:5e:2d:46:03:8a:2d:bb:3b:63:
         f4:8a:4b:10:57:31:b2:8f:0a:06:4b:5f:ad:fa:84:43:26:52:
         21:e2:84:45:60:a4:5b:3d:e2:93:9f:4d:89:6a:84:26:7c:2f:
         dc:93:65:4f:6d:67:f8:df:8e:2c:c6:90:5b:20:61:46:a4:61:
         b1:19:cb:f2
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUS9pgY3uhPucWaAux+ZEeOmFU7OwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBBNkM4NzhDNEZGOTJFODdDMjE3QjJDRkFBMDJEMEE5
OTVEMDQ5NjAeFw0yNTA1MjAwNDIwMDBaFw0yNjA1MTkwNDI1MDBaMDMxMTAvBgNV
BAMTKEYxOEJERDc3NjE0RUZCNTUzNUQwQTE1ODRCMjM4NkZBNUY2MUFDQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CHXbOutWguielaYHsogTDO2W
3fGMCOkBxrETYkjMvuwf8UJuWL/nQCekx3pSS3Mn06Jvr9p1qhCsI7NMyMGWXoyb
kIUjQVy9SKUUeXyAp/pgNZ/q+Jm2Rkw16cTuLifRYBCA5DFdsTsar2MqZQvtyYlZ
SKlycLiJq01luW7NEg1ICn0gCD3D56rcOJ7617CFE2EtN/n62RspadJTlNCspKf+
lm0/BT/+o8uCaFXP9kxe/Bm6WpVlvs6HCsSWj0sSbOFzbDyHBwgCD9LG2j7a8zeF
Maah3GHwgB/4QVqNw36NcakS+4R8sH1hPn0djaa4eRGzkAJ8f4g6Vvo5A5P5AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU8Yvdd2FO+1U10KFYSyOG+l9hrL8wHwYDVR0j
BBgwFoAUoKbIeMT/kuh8IXss+qAtCpldBJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NEYwOTgyQzZGOTUwQjlEREIxOTcxQ0E3QzU4RDRDNjkw
MTVDRTEyMDUyMEE5N0M5MDg1MTNBRTVDMzRDQUVGLzAvQTBBNkM4NzhDNEZGOTJF
ODdDMjE3QjJDRkFBMDJEMEE5OTVEMDQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMEE2Qzg3OEM0RkY5MkU4N0My
MTdCMkNGQUEwMkQwQTk5NUQwNDk2LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDRGMDk4MkM2Rjk1MEI5RERCMTk3MUNBN0M1OEQ0QzY5MDE1Q0UxMjA1
MjBBOTdDOTA4NTEzQUU1QzM0Q0FFRi8wLzMyMzgzMDM2M2EzMzM3MzAzYTMxMzA2
MzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzODM0MzAzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BCgGA3AQwDANBgkqhkiG9w0BAQsFAAOCAQEAMLZ288Xj/zRiXCqOZ7YZhu8osFSz
cuE1QI7oTle94HKBj4rmZxtv8duNCsLWiSOj3tsz6Kvomsr06NY3JtQWUb83TY4Q
iHbkxVRa8TfM14YBv9laqZgKradgKxgiSMdKyZ6M0P6f7nzeejLDGE+mfwYjGiKl
O35bOjiXurmjDpxJaLCR1r4FFZo4IdZGx6OWYPHTHV1BhvYrgGHT0/rTYs8+zXYk
Pd1nMNbczI5E86i8hTwI2KaLkFz9y2UkXi1GA4otuztj9IpLEFcxso8KBktfrfqE
QyZSIeKERWCkWz3ik59NiWqEJnwv3JNlT21n+N+OLMaQWyBhRqRhsRnL8g==
-----END CERTIFICATE-----