This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS22227.roa
File:                     AS22227.roa (raw, json)
Hash identifier:          g8n1MO4oMsNhqT5MedpJKG9KycTX7wylzLpy77E4ERU=
Subject key identifier:   E8:4E:70:78:73:23:7E:59:CF:C8:A4:E5:F1:C3:45:E4:DB:58:01:92
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       4B13049694C5A804297C8B3C2394F225558178AC
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS22227.roa
Signing time:             Tue 04 Feb 2025 18:02:43 +0000
ROA not before:           Tue 04 Feb 2025 17:57:43 +0000
ROA not after:            Tue 03 Feb 2026 18:02:43 +0000
asID:                     22227
IP address blocks:        200.46.158.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 24 Oct 2025 14:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:13:04:96:94:c5:a8:04:29:7c:8b:3c:23:94:f2:25:55:81:78:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Feb  4 17:57:43 2025 GMT
            Not After : Feb  3 18:02:43 2026 GMT
        Subject: CN=E84E707873237E59CFC8A4E5F1C345E4DB580192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:0f:e2:40:1d:18:73:ef:6f:b8:4d:7c:45:
                    52:db:aa:4b:53:97:82:90:75:45:61:3a:9b:c5:b5:
                    e3:81:5b:f1:1d:bb:43:68:89:bc:cb:cd:c6:e8:cc:
                    05:75:d4:13:55:8c:1f:ae:74:1a:c4:8d:cf:03:fc:
                    cb:10:53:9f:26:15:0a:d4:1b:e3:9e:24:c4:d8:30:
                    de:2b:b0:85:8e:8a:42:f2:73:b3:28:f2:8e:8b:80:
                    c6:b3:10:33:53:44:f4:01:87:0c:b6:d6:cf:68:cc:
                    41:f7:c9:d3:00:da:2f:75:b5:00:d1:97:b1:95:92:
                    21:11:4d:63:ba:b2:66:91:b7:a0:6c:ca:6a:6e:17:
                    3b:71:28:ac:2f:eb:6f:ef:3e:47:e2:6b:f0:d9:31:
                    28:ca:7a:fc:32:66:67:28:8b:0a:7c:99:59:62:42:
                    c6:fa:f2:55:47:b7:0f:ff:0c:c2:29:66:33:15:be:
                    7c:70:98:43:58:3c:bf:42:0d:b3:63:50:00:d7:e0:
                    00:72:19:f9:37:95:02:80:1d:ea:d4:25:35:ec:c2:
                    51:16:1c:c1:86:fc:31:eb:c2:a7:9a:e2:b2:a1:67:
                    02:32:3e:c4:1c:b4:e0:de:4b:fc:a5:0d:39:eb:fe:
                    32:0e:a8:40:0b:2a:fa:74:76:e0:be:05:9b:86:5a:
                    7a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:70:78:73:23:7E:59:CF:C8:A4:E5:F1:C3:45:E4:DB:58:01:92
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS22227.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:21:05:3c:f2:55:32:23:35:33:ad:86:8a:c0:78:f2:af:4c:
         19:42:05:9e:ca:8e:8c:2c:47:f3:d8:c5:2f:1c:6f:cd:00:e8:
         93:01:83:99:1d:96:58:89:71:14:d8:a4:50:a0:3f:e5:73:17:
         f7:0b:ad:62:99:72:45:f7:a4:89:d5:c3:5c:f7:36:4c:41:98:
         ea:c2:75:4c:42:28:32:2a:84:27:76:0e:30:ee:e4:51:f6:5e:
         97:db:10:07:33:63:6c:2f:ed:bc:17:37:1a:af:b4:57:da:37:
         38:59:f0:1c:20:c7:6d:06:ad:99:46:ae:9a:85:af:1f:2a:0f:
         03:9c:0a:0d:78:55:05:9d:32:3c:81:60:b1:b8:e4:8a:7a:25:
         c4:d8:ea:77:1e:ee:2e:14:1e:36:22:4c:e9:63:06:73:cf:68:
         d2:ce:50:ff:6d:e7:65:eb:5c:f5:7a:5b:b8:ff:52:94:db:13:
         33:da:d0:21:f8:1c:87:f0:79:ab:63:43:b5:4a:36:a0:4c:f8:
         43:71:46:71:a3:a0:d3:87:97:12:e8:d6:18:8e:be:48:7a:93:
         d1:32:fd:ec:dd:f1:39:62:9c:ac:08:b7:37:7d:bd:5c:97:ad:
         7c:02:e3:e6:a4:a0:11:52:9b:dd:5f:30:b8:35:e2:30:c7:13:
         0d:4c:e9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----