This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34342e302f32342d3234203d3e2032363338.roa
File:                     3139322e3133362e34342e302f32342d3234203d3e2032363338.roa (raw, json)
Hash identifier:          BkmqP6iZCOWl54q9DlyFXX0UrhbmNbW+a/k2vjJ2d0w=
Subject key identifier:   9D:E1:E1:07:48:A5:B4:5B:5A:68:CE:05:90:F3:12:F4:4B:9F:52:9D
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       65084AB0DFC239E1116D06C29C67A84F88E046DF
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34342e302f32342d3234203d3e2032363338.roa
Signing time:             Tue 16 Dec 2025 22:20:01 +0000
ROA not before:           Tue 16 Dec 2025 22:15:01 +0000
ROA not after:            Tue 15 Dec 2026 22:20:01 +0000
asID:                     2638
IP address blocks:        192.136.44.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 17:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:08:4a:b0:df:c2:39:e1:11:6d:06:c2:9c:67:a8:4f:88:e0:46:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Dec 16 22:15:01 2025 GMT
            Not After : Dec 15 22:20:01 2026 GMT
        Subject: CN=9DE1E10748A5B45B5A68CE0590F312F44B9F529D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:26:24:83:5f:cb:6b:d0:aa:65:cb:ea:13:52:
                    57:17:b7:d1:ea:e3:a6:78:9c:ca:51:35:54:de:9d:
                    bb:1b:66:20:a0:2c:53:b7:b8:b9:14:16:57:4d:6b:
                    7d:76:24:af:2d:e8:a5:b4:95:34:1c:2d:a5:02:6f:
                    70:b5:30:d9:40:0d:10:9f:ee:d0:3b:b9:49:98:e2:
                    e8:a8:89:1a:d9:9f:0e:26:d2:e0:60:a9:1f:29:17:
                    67:78:91:2f:66:c6:f8:cd:5b:14:0f:36:dc:b9:1f:
                    4b:b9:e0:1e:02:e1:ec:a8:ee:c4:ea:ba:7a:a2:80:
                    91:e9:09:73:d3:71:ee:9b:77:4c:8b:54:5a:6b:d0:
                    e1:d9:46:b4:70:55:f4:e1:20:af:36:c3:13:b2:44:
                    af:be:68:ff:a7:76:50:cc:f6:9a:54:13:9b:c8:e2:
                    e2:14:2a:04:20:b1:09:af:aa:b7:90:3b:4d:fa:11:
                    ca:b5:cd:d4:59:86:83:8c:a1:d9:08:b9:b4:ff:01:
                    d6:bd:d5:54:72:31:6e:db:84:87:6e:c5:63:e0:46:
                    c1:1c:92:b4:c1:23:29:1d:24:d9:49:52:4a:28:2a:
                    1d:f3:a5:3f:aa:bd:9b:ee:d8:fa:cf:bc:76:de:ae:
                    e1:3d:56:d9:be:ef:24:c5:11:9c:5f:aa:c9:cf:76:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E1:E1:07:48:A5:B4:5B:5A:68:CE:05:90:F3:12:F4:4B:9F:52:9D
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34342e302f32342d3234203d3e2032363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:23:16:a3:88:c7:fb:5c:c9:14:81:bd:b3:b0:57:61:44:9e:
         38:4c:27:65:d4:10:f4:eb:5e:3e:dd:33:51:ea:5f:b8:cb:46:
         d4:60:b3:bd:73:c9:2d:d5:17:15:9f:2d:a2:5c:bf:ca:58:3c:
         ff:30:d3:98:4f:3f:29:5b:fb:d4:e6:02:0c:1c:2a:ca:e1:06:
         37:a4:8f:f4:06:2c:97:cf:ef:32:a4:75:c3:cc:0b:05:98:88:
         80:3c:cd:ad:e0:27:54:ec:97:4f:e5:e9:b7:cc:25:a7:02:f0:
         88:82:3d:26:57:ca:1a:d4:85:a8:a9:53:19:a3:80:dd:9a:a1:
         70:58:ba:99:81:35:4a:92:09:be:a1:7a:23:cd:4b:89:eb:76:
         34:90:71:c1:1e:95:eb:47:93:9d:0b:97:4b:24:dc:22:59:9e:
         dd:58:67:77:be:9e:58:62:02:40:4f:5e:b9:f9:6c:e4:3f:8b:
         30:ff:50:fd:df:fb:13:28:40:43:cc:a6:b2:25:6d:a0:a9:05:
         af:98:3e:a2:fd:dc:37:13:2f:0d:e5:7a:29:01:36:df:44:e4:
         53:37:84:6e:38:f9:7d:0a:d3:83:d7:ad:fc:d5:af:f2:0a:21:
         ca:c7:7e:02:a5:de:fd:98:23:b2:bb:23:35:93:36:b8:ff:18:
         7f:3f:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----