This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323038303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323038303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          28+n7IDxMa2I+1nydQTAxQSm++u2HoNB4gi5CzYKxks=
Subject key identifier:   4F:2F:84:BD:EC:AA:10:61:45:D9:0F:6F:C6:1C:54:A8:25:B0:65:F7
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       3E7D7D498C20F7C9CF2841236B11B6E4D690E381
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323038303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:15:00 +0000
ROA not before:           Thu 22 May 2025 04:10:00 +0000
ROA not after:            Thu 21 May 2026 04:15:00 +0000
asID:                     28403
IP address blocks:        2806:370:2080::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7d:7d:49:8c:20:f7:c9:cf:28:41:23:6b:11:b6:e4:d6:90:e3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:10:00 2025 GMT
            Not After : May 21 04:15:00 2026 GMT
        Subject: CN=4F2F84BDECAA106145D90F6FC61C54A825B065F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:03:93:b8:11:3b:98:c9:62:3b:66:3f:db:
                    23:27:40:d7:81:a9:78:39:ae:7d:07:ad:4d:2a:6a:
                    b1:16:1e:4f:b2:3d:39:5b:e5:4f:b7:40:a8:75:f3:
                    17:7a:cb:79:52:2a:81:8f:34:1b:6e:50:4d:5d:d4:
                    94:d0:39:8a:42:a0:3b:5d:82:67:b8:49:51:96:fb:
                    ab:7b:b6:0a:34:be:30:8f:4d:0d:1c:fc:c3:9f:af:
                    1c:c3:13:c1:b2:49:9f:94:89:34:a9:e1:6f:74:53:
                    32:f1:4f:08:70:56:bc:6e:80:a8:fa:8a:ba:8c:cf:
                    66:32:97:70:aa:ce:c1:6d:83:92:23:e4:17:64:58:
                    38:20:72:5a:eb:53:8f:d7:cb:2d:15:de:f4:f0:d5:
                    6e:50:bd:cd:27:42:4a:98:4d:eb:81:2b:8d:78:74:
                    39:d6:01:5f:be:11:90:f4:82:48:da:65:c8:73:5c:
                    6b:67:60:73:96:9c:07:ab:4f:03:1a:cb:70:e0:c6:
                    ad:98:af:a8:16:87:66:22:6a:c4:3e:64:45:4d:6a:
                    f3:18:1d:84:c7:24:d6:5a:d5:81:e6:b6:d6:37:4e:
                    b0:59:6e:12:c8:42:65:5b:cc:ff:6f:3a:9d:39:bd:
                    b0:2d:3f:ea:47:5f:1d:0b:6f:6e:e8:69:4b:08:73:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2F:84:BD:EC:AA:10:61:45:D9:0F:6F:C6:1C:54:A8:25:B0:65:F7
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323038303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2080::/44

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:c9:5b:6c:30:54:8e:3f:db:5d:06:3c:9f:3d:9b:df:45:
         92:a9:01:50:0c:70:d5:cd:4b:1d:0b:78:de:e5:e4:72:2c:38:
         ab:1c:8d:c1:04:de:30:ec:ed:48:1f:10:3b:eb:d8:ca:c3:03:
         ef:01:b8:7d:03:3b:fa:66:90:b6:61:fc:3b:32:e8:40:b0:3b:
         bd:5f:94:1b:6c:68:d3:29:00:3e:8a:7b:5f:71:ae:fd:2e:96:
         2a:f7:ac:4d:a3:4c:d2:d4:76:a5:4b:a8:b2:58:2c:57:33:71:
         03:33:7e:ac:98:a9:de:1e:9b:36:4d:e8:e4:ed:b9:1c:6d:1a:
         01:e7:32:ea:58:f3:24:42:14:73:e5:de:be:5d:c6:57:2b:5f:
         d0:e2:76:7a:f0:9f:de:00:a6:b0:f9:d1:e0:97:45:cf:d7:60:
         ca:db:61:16:9b:8c:be:da:05:c3:72:29:7d:78:39:37:92:be:
         75:3c:87:89:4f:70:c0:bf:7f:4b:3f:c9:07:3a:4a:d6:19:1c:
         55:a4:9b:49:57:68:8d:6e:57:35:a7:cd:70:9e:67:66:d1:2f:
         fd:5f:68:e6:68:f3:33:4f:eb:2f:cc:c4:da:dd:5f:66:a6:82:
         3a:68:9b:52:63:2f:fd:09:98:0a:66:33:e6:5f:17:4b:73:9a:
         ed:ee:4f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----