Route Origin Authorization
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e302e302f31382d3138203d3e203138373437.roa
File: 3136382e3137362e302e302f31382d3138203d3e203138373437.roa (raw, json)
Hash identifier: 9THEgGfjuBgzjvW+Sj4FmoRjibyZM3AZFhhvkoUiPTQ=
Subject key identifier: AF:0B:93:11:E4:35:6A:E9:38:53:C8:AC:7A:66:96:C9:35:93:F1:06
Certificate issuer: /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial: 4ECA915295FAA424D559186FE8A0B2E905F9A027
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e302e302f31382d3138203d3e203138373437.roa
Signing time: Mon 21 Sep 2026 13:05:02 +0000
ROA not before: Mon 21 Sep 2026 13:00:02 +0000
ROA not after: Mon 20 Sep 2027 13:05:02 +0000
asID: 18747
IP address blocks: 168.176.0.0/18 maxlen: 18
Validation: Failed, certificate revoked on Thu 24 Sep 2026 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ca:91:52:95:fa:a4:24:d5:59:18:6f:e8:a0:b2:e9:05:f9:a0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Validity
Not Before: Sep 21 13:00:02 2026 GMT
Not After : Sep 20 13:05:02 2027 GMT
Subject: CN=AF0B9311E4356AE93853C8AC7A6696C93593F106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:97:42:e3:52:a2:a4:29:cc:56:ff:11:2f:
43:77:5f:6c:af:3d:47:3b:0f:3e:7f:a8:7f:9f:f7:
b6:89:5c:4e:b2:22:62:90:fb:ec:79:3a:55:7b:7b:
d7:6b:c8:a5:03:a0:73:9c:56:d5:7a:c6:3c:9f:4a:
a2:5e:09:07:28:be:43:e8:bf:2d:9b:c1:6d:13:11:
75:22:aa:a3:3f:8d:8c:f3:7b:cf:21:1e:86:27:d4:
fa:cf:ae:58:a2:76:45:9d:87:ba:9a:6d:46:d5:d0:
aa:bd:9f:ef:4c:78:f6:b9:73:82:75:61:5d:8c:f4:
c3:e9:65:71:1f:1e:d0:82:7c:34:7c:80:0f:b5:07:
11:34:68:2c:e7:40:a6:65:d1:dd:1a:77:4c:05:f2:
b6:f0:6d:2b:d8:c7:c5:52:9f:49:3e:24:1a:03:cc:
54:a5:a6:93:c9:bb:f1:af:45:f5:2d:05:6b:ce:8e:
5d:a6:87:03:da:40:1c:78:b6:b4:76:ca:77:a3:25:
98:b2:15:b7:8c:92:7d:39:63:75:12:7a:5d:1d:4f:
06:91:15:65:20:3b:76:16:dd:26:c3:d6:bc:3d:f2:
08:30:46:93:52:25:60:ce:4b:69:11:e8:bf:99:cf:
5e:c6:60:65:1d:68:ba:79:d1:5c:06:7f:ea:83:03:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:93:11:E4:35:6A:E9:38:53:C8:AC:7A:66:96:C9:35:93:F1:06
X509v3 Authority Key Identifier:
keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e302e302f31382d3138203d3e203138373437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.176.0.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:61:84:48:b8:8e:10:f8:92:dc:12:76:9b:60:7b:22:c1:5a:
d0:28:0d:2e:a7:9a:8d:e7:bb:2a:bb:f8:cb:17:83:d6:b7:a5:
98:4c:e4:32:a6:a7:22:03:dd:b0:39:a5:42:db:a3:4f:59:5c:
be:8f:1b:dc:3f:fb:52:e3:6d:e5:67:ab:0b:70:20:04:c5:06:
45:46:6c:df:ed:bb:42:e3:14:93:3d:b0:88:a7:42:10:d8:17:
ae:27:44:ef:8d:a8:95:2c:82:08:b8:df:a6:0e:98:4e:16:fd:
be:de:64:f4:8b:d0:da:56:dc:ba:f7:65:28:0f:6d:40:9d:73:
31:22:1f:68:8d:91:df:26:4e:b1:54:62:4e:4c:60:c7:43:3e:
a9:2d:40:b1:73:5a:00:e7:cb:77:c8:7e:77:be:62:6d:7c:36:
e7:7a:ce:41:a1:f0:dd:05:c6:42:33:3d:9c:e3:c3:ac:de:0a:
5f:3c:77:5f:46:aa:c5:0c:9a:a1:7c:cb:f4:d3:95:a6:bd:08:
47:bd:ce:53:93:b8:cd:c8:d8:3c:04:af:b9:5f:10:3b:87:ac:
04:cd:8b:6e:d2:5c:ef:ec:cd:1e:f7:a8:27:2f:58:0f:70:34:
b9:de:6b:ba:04:c1:ab:64:bd:d5:37:4f:7e:3a:75:5e:07:29:
bc:db:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:13:36 2026 by rpki-client