This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323532303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323532303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          GCmvOJvAeB6vRkMVHCpwyMzpOHCQ+H9NZOorFNTnqAQ=
Subject key identifier:   AD:50:54:34:70:06:E0:37:2F:80:8D:A1:A6:DE:49:FC:AE:6B:1A:DA
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       30826F25134B6BAA0D7BCCC3F3F57007839F1F69
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323532303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:20:00 +0000
ROA not before:           Thu 22 May 2025 04:15:00 +0000
ROA not after:            Thu 21 May 2026 04:20:00 +0000
asID:                     28403
IP address blocks:        2806:370:2520::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:82:6f:25:13:4b:6b:aa:0d:7b:cc:c3:f3:f5:70:07:83:9f:1f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:15:00 2025 GMT
            Not After : May 21 04:20:00 2026 GMT
        Subject: CN=AD5054347006E0372F808DA1A6DE49FCAE6B1ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:9c:e8:02:58:b4:8c:dd:92:44:54:21:ac:
                    4b:59:ec:65:13:6d:90:7c:ff:31:9f:dd:1d:15:bd:
                    4e:96:02:13:5a:38:ec:f4:07:c7:30:83:66:92:9c:
                    d8:ba:b4:0a:8a:01:05:01:16:9a:a9:a6:c5:98:0a:
                    6b:b9:d0:d9:a3:65:bb:91:f0:aa:85:e0:4e:71:e9:
                    52:86:ad:26:0e:29:ae:f9:ee:52:f9:b9:90:44:f7:
                    55:d4:9b:37:d0:1f:e9:27:1d:2f:a0:16:78:f8:ba:
                    f3:fb:49:fe:b4:84:31:95:5e:95:f4:b2:50:f8:6c:
                    9b:84:ef:4c:2f:df:c6:d1:ed:d6:df:2c:f3:7d:3c:
                    ad:23:bb:62:f0:1f:2c:ce:f9:36:24:39:fd:a5:68:
                    d6:53:e3:e1:8d:03:18:2d:69:2f:1a:ea:1f:68:9c:
                    70:a8:fc:da:35:a3:69:21:7d:61:35:82:9f:11:a4:
                    d1:57:7b:03:42:f1:4f:c3:81:b0:e3:71:7e:57:75:
                    db:e6:54:fb:11:5e:18:d5:66:f0:5e:27:59:8c:d2:
                    c5:ce:4b:20:c2:67:16:54:24:d2:b8:af:50:e6:f5:
                    6a:25:11:7d:a6:69:02:42:b2:38:56:c8:38:76:9b:
                    28:6e:72:02:cd:4d:23:d5:2b:cd:6d:0c:0a:fe:d1:
                    6f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:50:54:34:70:06:E0:37:2F:80:8D:A1:A6:DE:49:FC:AE:6B:1A:DA
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323532303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2520::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:b0:81:22:9c:9d:89:6a:b7:77:26:b0:78:9f:64:14:32:07:
         d6:05:d3:35:3e:5c:06:03:bb:81:24:e2:2f:7f:32:bc:76:7b:
         16:1c:26:18:62:75:e9:b1:f2:4b:76:ea:a1:f2:6e:57:8b:ac:
         d2:9e:61:d1:be:a1:ac:9e:4c:f2:98:6f:55:c5:3f:c3:33:8e:
         f0:9d:bc:31:9f:75:5c:13:7f:2b:d6:a4:9c:19:2e:24:fe:8e:
         af:7c:48:eb:ea:b2:08:d8:87:aa:19:a7:4d:e6:be:b4:04:c0:
         43:02:02:a0:59:25:17:68:f6:f7:96:ed:8d:05:a8:fc:4b:90:
         3f:70:1f:50:02:38:4c:29:f6:f7:f1:75:7e:6a:0e:90:4a:6b:
         ae:aa:e8:81:da:f9:d4:b6:5a:da:15:33:a3:c6:cd:45:c0:b5:
         5a:8d:04:70:8b:ec:b8:df:71:ea:dc:b3:c1:78:73:8d:c7:0f:
         84:ea:f9:8d:f1:d2:65:d6:05:ea:60:26:53:31:fc:b4:a2:c2:
         bb:69:05:27:68:8b:dc:ba:7d:bb:02:83:d2:a5:ad:82:63:73:
         01:b3:4b:2f:f5:cf:04:9e:33:82:ac:af:37:66:d1:2e:1c:d9:
         80:c3:28:5a:0c:f1:67:a2:c8:e6:36:c0:93:38:eb:3d:b3:78:
         f4:0f:f7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----