This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323131303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323131303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          hr5e9TGI7eHEWQxyKa53Ex2k9+VbKz+kziRgfMqFpgQ=
Subject key identifier:   31:71:0F:13:1F:CD:E1:0A:86:83:14:8D:D5:78:C5:AA:3B:8F:EE:69
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       2ED1B647413C064BAE97B190725DF09AAB1C4591
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323131303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:15:00 +0000
ROA not before:           Thu 22 May 2025 04:10:00 +0000
ROA not after:            Thu 21 May 2026 04:15:00 +0000
asID:                     28403
IP address blocks:        2806:370:2110::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d1:b6:47:41:3c:06:4b:ae:97:b1:90:72:5d:f0:9a:ab:1c:45:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:10:00 2025 GMT
            Not After : May 21 04:15:00 2026 GMT
        Subject: CN=31710F131FCDE10A8683148DD578C5AA3B8FEE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:23:87:f4:c3:e3:88:14:15:f6:35:fc:7a:
                    3f:3c:93:d1:53:c7:7d:25:0e:dd:d9:34:d8:d7:df:
                    ba:8b:c8:61:36:53:b6:51:03:7b:89:e6:e5:95:10:
                    87:0c:51:57:61:f8:bf:cc:f5:f9:ce:96:99:c6:3f:
                    da:64:76:bb:6c:ed:c8:c4:2d:72:65:14:10:95:03:
                    7c:4e:2d:4d:c6:40:10:7d:d3:04:43:dc:b7:83:65:
                    f5:8c:61:45:ef:e8:c2:bc:de:1e:4f:7d:10:b4:54:
                    9d:d6:7d:e0:5b:49:de:99:ab:92:15:42:96:03:25:
                    a8:ca:ae:e5:1a:1e:8b:a4:43:a2:69:1a:12:0f:bf:
                    80:1a:e4:37:67:15:54:6b:c9:d7:c8:78:dd:d1:17:
                    5b:03:7e:c4:67:09:5c:ea:5c:e5:61:c8:9a:0f:71:
                    aa:0a:a8:3d:bc:f3:ab:70:6b:37:db:df:ee:4e:d4:
                    01:4b:ac:78:6d:cd:37:f5:ea:80:10:66:ea:62:3e:
                    0a:1a:c3:41:f0:cc:e4:2f:84:3f:14:28:5c:62:b6:
                    cd:b1:ea:12:97:2d:52:7b:3e:19:87:f4:6b:4c:82:
                    67:7d:9f:87:b8:8c:aa:11:8f:37:e7:34:4f:d3:cd:
                    90:7f:e8:ae:b6:aa:1f:c1:84:c1:35:17:6e:49:d1:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:71:0F:13:1F:CD:E1:0A:86:83:14:8D:D5:78:C5:AA:3B:8F:EE:69
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323131303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2110::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:eb:7e:82:6d:cd:ac:1d:de:fd:37:68:46:d8:e2:d4:fa:
         f0:8b:85:95:6d:25:01:b7:ea:f3:8c:0a:ca:9f:84:fb:99:c7:
         39:1e:29:68:b1:a4:64:8d:d1:de:9c:34:8f:02:ff:98:45:86:
         f0:61:f3:ca:98:47:f8:a0:2b:f1:8b:e4:f3:2d:90:7a:46:47:
         66:a7:0f:cf:92:fe:fd:b3:ec:05:d5:34:cd:65:ea:5a:18:27:
         b6:2d:2e:9b:d8:2e:0c:cb:48:6a:19:9b:f6:ce:12:5e:b8:8b:
         46:24:69:db:15:d6:42:29:87:f2:2a:6a:b7:c8:a1:19:1f:72:
         29:1f:a8:a1:9b:aa:43:54:9f:cb:2f:5d:de:09:26:9c:aa:2e:
         69:38:31:26:cd:b6:41:af:60:09:0f:8c:07:c0:88:af:6c:70:
         15:b1:31:be:ec:02:81:42:48:17:09:17:98:32:ad:50:d7:15:
         1c:7f:e2:cb:5c:40:b7:53:ef:9f:ae:0c:1c:80:0a:20:8f:8c:
         c6:ed:ac:c1:d3:23:06:35:5b:07:a3:b6:3c:da:f8:b1:76:ef:
         f0:86:35:5f:80:06:f2:f1:05:a8:d5:25:5d:80:17:8e:f1:e0:
         e8:62:4d:8a:74:47:9b:06:ba:bb:0b:c6:fd:fb:fe:2a:f5:dd:
         4a:f1:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----