Route Origin Authorization
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3137362e302f32312d3231203d3e203138373437.roa
File: 3136382e3137362e3137362e302f32312d3231203d3e203138373437.roa (raw, json)
Hash identifier: 7JY05Mhq1rbfkEF+FfJxhrrdPeTJ8NVwPRX9EmqJNKI=
Subject key identifier: AD:6F:A8:53:64:82:E5:AA:D8:A7:DA:8F:44:25:67:C3:05:F8:41:4A
Certificate issuer: /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial: 401C3F0F74E3A1F7D8FC95A230D149E27F267B54
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3137362e302f32312d3231203d3e203138373437.roa
Signing time: Mon 21 Sep 2026 13:05:04 +0000
ROA not before: Mon 21 Sep 2026 13:00:04 +0000
ROA not after: Mon 20 Sep 2027 13:05:04 +0000
asID: 18747
IP address blocks: 168.176.176.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 23 Sep 2026 21:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1c:3f:0f:74:e3:a1:f7:d8:fc:95:a2:30:d1:49:e2:7f:26:7b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Validity
Not Before: Sep 21 13:00:04 2026 GMT
Not After : Sep 20 13:05:04 2027 GMT
Subject: CN=AD6FA8536482E5AAD8A7DA8F442567C305F8414A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:d8:08:e9:f4:1e:1b:a0:d9:01:53:22:37:
ac:29:c3:1c:12:80:2a:3f:a8:8d:80:7b:1d:b3:e9:
12:6d:90:23:2f:55:46:7a:86:a9:26:af:06:a9:b5:
2b:3a:c1:31:d1:95:89:36:30:bf:7d:95:6e:c2:46:
bc:ba:fb:22:20:2e:ea:49:c6:c8:f1:07:02:ed:ef:
63:82:d9:05:34:1c:2b:32:cf:00:b1:0e:f8:20:a4:
1a:cb:c2:55:c9:f1:a9:06:84:80:06:d2:7e:eb:89:
c1:62:4d:87:4e:e3:07:9f:d2:2a:3c:41:32:28:4e:
73:00:69:55:91:96:3f:5e:c3:6d:b7:8a:24:96:7d:
fa:ad:4b:03:97:1f:ea:01:f9:69:d7:d3:20:22:c5:
a1:95:21:d0:ca:ce:9f:7f:9c:28:4a:73:aa:f9:2d:
e2:5a:cb:95:08:44:30:50:04:f5:fc:d7:1e:33:58:
0a:cc:c1:9a:ea:9d:8b:a5:5c:25:b8:fc:81:a7:7c:
43:cd:39:52:b1:54:52:88:2c:2d:b6:d2:c9:52:82:
96:71:15:e2:02:a2:3a:37:2c:c3:8e:e5:9d:72:1c:
7b:f5:86:91:a7:c6:58:2b:72:bb:fc:04:c5:88:64:
8b:c2:0d:72:63:9d:f3:93:ad:e3:8b:48:ba:72:31:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6F:A8:53:64:82:E5:AA:D8:A7:DA:8F:44:25:67:C3:05:F8:41:4A
X509v3 Authority Key Identifier:
keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3137362e302f32312d3231203d3e203138373437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.176.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:80:ac:f4:35:30:21:df:5f:05:c0:8d:d2:7a:87:5a:3a:07:
1d:b0:32:28:6e:94:a5:c3:ca:4a:4d:85:f8:a0:01:42:2e:b4:
30:04:e2:4a:6c:8c:45:71:aa:78:66:76:6d:12:f4:e3:a1:43:
e5:41:55:b4:78:70:13:61:69:2c:de:cb:a3:63:6e:32:3a:5a:
8f:e1:20:58:ca:d6:88:35:aa:b1:15:8c:e7:6a:67:1a:84:67:
63:20:68:25:53:11:90:ca:96:69:0c:cf:e0:b0:3c:b5:82:e5:
c8:1b:81:b4:f5:f2:cd:8b:8f:de:8c:5d:4c:49:bc:1c:a9:ae:
5d:92:98:47:67:eb:82:4f:e8:af:e4:5d:ca:c6:c0:06:d1:ba:
70:bf:7c:eb:6c:14:7e:fd:d9:6d:fc:9b:86:81:96:a4:a2:c3:
e3:09:33:a5:38:af:91:85:7c:72:97:9d:e6:38:e8:ab:41:8a:
c8:96:c1:69:52:d3:37:20:ca:a0:91:2d:ac:1c:66:c1:f5:2f:
62:c3:35:b1:26:5f:43:a1:5f:e8:98:91:c7:f3:17:a9:37:fa:
ac:23:33:51:01:db:d3:a2:09:9f:0b:96:9b:20:71:48:5f:3b:
e9:ec:ff:78:ff:fb:ed:00:fd:fa:5a:10:1d:96:56:74:0b:a0:
51:0b:c1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:21:44 2026 by rpki-client