Route Origin Authorization
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3132382e302f32302d3230203d3e203138373437.roa
File: 3136382e3137362e3132382e302f32302d3230203d3e203138373437.roa (raw, json)
Hash identifier: 7EYiDdPlpnHNc45YNK/72PtOitQp7lp5NdgttzDYLuM=
Subject key identifier: 94:43:0B:F5:1F:40:55:4D:65:63:E4:EA:2F:28:45:9A:10:09:59:38
Certificate issuer: /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial: 64C4BE7D53CD37990C5BE66361DCD0C234FB9B55
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3132382e302f32302d3230203d3e203138373437.roa
Signing time: Mon 21 Sep 2026 13:05:00 +0000
ROA not before: Mon 21 Sep 2026 13:00:00 +0000
ROA not after: Mon 20 Sep 2027 13:05:00 +0000
asID: 18747
IP address blocks: 168.176.128.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 24 Sep 2026 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c4:be:7d:53:cd:37:99:0c:5b:e6:63:61:dc:d0:c2:34:fb:9b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Validity
Not Before: Sep 21 13:00:00 2026 GMT
Not After : Sep 20 13:05:00 2027 GMT
Subject: CN=94430BF51F40554D6563E4EA2F28459A10095938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:87:af:8f:2b:31:1b:c3:8e:51:a5:98:cb:
1a:da:dd:aa:4a:db:d8:dd:8c:8a:8d:17:a8:33:d1:
2f:7e:d6:b8:a7:c3:1a:3e:e9:16:e4:84:e9:3a:50:
cd:8b:d6:9e:05:07:11:c1:5e:5f:f5:52:4c:57:de:
b7:e5:0a:a5:3e:b6:5f:b6:66:bc:1b:45:d9:da:31:
4d:2f:57:5d:01:68:10:f9:c0:95:7c:e3:6f:c6:47:
47:13:e4:1f:de:22:45:40:db:01:f7:f6:4e:12:38:
4a:e5:75:f9:65:9c:df:68:ed:d6:48:68:94:c1:62:
8f:02:48:98:3e:d7:f0:94:a1:24:a0:6c:bc:0c:aa:
9d:8d:43:7d:02:20:ff:72:9e:9d:ab:7d:cd:97:28:
b1:f0:12:47:15:ec:b6:ff:15:08:be:a6:09:58:18:
11:40:b6:6a:e6:48:4a:63:78:68:0e:b7:8d:b6:5b:
dd:02:3d:ee:d5:ed:e0:95:69:09:a6:95:b1:50:a7:
68:91:9e:58:bc:17:f8:07:d9:cc:43:18:a4:64:a1:
93:51:52:57:c2:8c:3b:69:f4:73:b5:d3:08:c7:cd:
8e:ff:e3:cb:cf:d1:78:e3:16:49:17:2d:e3:23:d4:
46:40:0c:f0:7a:9e:5b:37:63:4f:de:f4:bd:61:98:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:43:0B:F5:1F:40:55:4D:65:63:E4:EA:2F:28:45:9A:10:09:59:38
X509v3 Authority Key Identifier:
keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3132382e302f32302d3230203d3e203138373437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.176.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:f9:c9:f2:88:55:a3:96:6d:29:a1:07:bf:c5:35:30:ff:c1:
db:06:4a:ba:41:9b:cd:96:61:6e:cb:28:f1:4f:ae:43:a8:7b:
1f:33:b4:99:22:08:a7:d6:68:03:71:22:ee:8c:1b:55:6a:fa:
f7:20:8a:d8:7b:36:cc:fe:ef:ec:06:21:fa:63:51:09:ad:4c:
86:6d:b7:41:b5:2b:ae:35:84:f1:6c:5b:dc:59:5a:e2:43:ab:
b1:7c:99:42:2c:18:23:48:7e:df:77:f4:5f:6f:ac:3d:65:4e:
89:b5:6d:9d:b3:77:26:55:97:24:7d:27:86:14:bb:f3:49:06:
91:ef:a4:d9:8a:04:19:4e:1d:75:8e:3f:3a:a8:87:e0:9e:30:
f0:e6:0a:fd:8f:f6:e2:78:64:ce:fb:44:01:6f:a2:b4:e0:aa:
79:e4:8a:94:6c:e0:84:e2:77:23:e5:4b:02:27:4f:53:e0:e1:
6c:39:11:77:98:d5:6c:49:9d:a7:61:b8:37:70:90:f2:ad:34:
a6:64:3f:f5:46:fa:17:36:41:e0:44:74:01:d1:76:45:d2:67:
ca:07:c3:1a:01:7b:72:9a:aa:59:d9:3f:0e:8f:57:d5:d3:83:
57:d3:40:45:08:e0:e2:ff:c1:e2:6b:97:c3:9a:42:89:5a:e0:
4b:cd:22:61
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZMS+fVPNN5kMW+ZjYdzQwjT7m1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgwRkRBNDBGOEJCNUNBMUE3QjE3NERBMEE3QjM3NkZC
REZEQ0IzQzAeFw0yNjA5MjExMzAwMDBaFw0yNzA5MjAxMzA1MDBaMDMxMTAvBgNV
BAMTKDk0NDMwQkY1MUY0MDU1NEQ2NTYzRTRFQTJGMjg0NTlBMTAwOTU5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18YevjysxG8OOUaWYyxra3apK
29jdjIqNF6gz0S9+1rinwxo+6RbkhOk6UM2L1p4FBxHBXl/1UkxX3rflCqU+tl+2
ZrwbRdnaMU0vV10BaBD5wJV842/GR0cT5B/eIkVA2wH39k4SOErldfllnN9o7dZI
aJTBYo8CSJg+1/CUoSSgbLwMqp2NQ30CIP9ynp2rfc2XKLHwEkcV7Lb/FQi+pglY
GBFAtmrmSEpjeGgOt422W90CPe7V7eCVaQmmlbFQp2iRnli8F/gH2cxDGKRkoZNR
UlfCjDtp9HO10wjHzY7/48vP0XjjFkkXLeMj1EZADPB6nls3Y0/e9L1hmEfrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlEML9R9AVU1lY+TqLyhFmhAJWTgwHwYDVR0j
BBgwFoAU2A/aQPi7XKGnsXTaCns3b739yzwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BN0ZFQjFEMzBEQ0MxRjdENDI2M0FGNEIzQzVDNjU5NEQ1
MDA1RDAyREU1QUE0QUMzNTJENTc1OUYxRkQzREY1LzAvRDgwRkRBNDBGOEJCNUNB
MUE3QjE3NERBMEE3QjM3NkZCREZEQ0IzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODBGREE0MEY4QkI1Q0ExQTdC
MTc0REEwQTdCMzc2RkJERkRDQjNDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTdGRUIxRDMwRENDMUY3RDQyNjNBRjRCM0M1QzY1OTRENTAwNUQwMkRF
NUFBNEFDMzUyRDU3NTlGMUZEM0RGNS8wLzMxMzYzODJlMzEzNzM2MmUzMTMyMzgy
ZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMTM4MzczNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqLCA
MA0GCSqGSIb3DQEBCwUAA4IBAQB9+cnyiFWjlm0poQe/xTUw/8HbBkq6QZvNlmFu
yyjxT65DqHsfM7SZIgin1mgDcSLujBtVavr3IIrYezbM/u/sBiH6Y1EJrUyGbbdB
tSuuNYTxbFvcWVriQ6uxfJlCLBgjSH7fd/Rfb6w9ZU6JtW2ds3cmVZckfSeGFLvz
SQaR76TZigQZTh11jj86qIfgnjDw5gr9j/bieGTO+0QBb6K04Kp55IqUbOCE4ncj
5UsCJ09T4OFsORF3mNVsSZ2nYbg3cJDyrTSmZD/1RvoXNkHgRHQB0XZF0mfKB8Ma
AXtymqpZ2T8Oj1fV04NX00BFCODi/8Hia5fDmkKJWuBLzSJh
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:46:19 2026 by rpki-client