Route Origin Authorization
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3138342e302f32312d3231203d3e203138373437.roa
File: 3136382e3137362e3138342e302f32312d3231203d3e203138373437.roa (raw, json)
Hash identifier: ErvNP9NMWFj3/i3Mz11fAuC3/WRdlXbyw3PRExINJ9o=
Subject key identifier: 94:F7:89:0A:37:FF:CD:F7:BF:64:8F:AC:5D:7E:76:7D:F8:79:78:A9
Certificate issuer: /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial: 7E67F79BFA1E69482FF25F167AB45BFC7746E75E
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3138342e302f32312d3231203d3e203138373437.roa
Signing time: Mon 21 Sep 2026 13:05:01 +0000
ROA not before: Mon 21 Sep 2026 13:00:01 +0000
ROA not after: Mon 20 Sep 2027 13:05:01 +0000
asID: 18747
IP address blocks: 168.176.184.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 24 Sep 2026 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:67:f7:9b:fa:1e:69:48:2f:f2:5f:16:7a:b4:5b:fc:77:46:e7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Validity
Not Before: Sep 21 13:00:01 2026 GMT
Not After : Sep 20 13:05:01 2027 GMT
Subject: CN=94F7890A37FFCDF7BF648FAC5D7E767DF87978A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:a9:25:01:dd:b9:51:f5:35:6c:95:48:ec:
df:4c:3b:5b:85:9a:7c:06:c5:d4:12:bc:8b:78:b3:
31:4b:d4:e2:b5:63:3f:36:ce:1a:b7:30:a8:f3:76:
5d:d0:5a:67:23:58:df:9b:68:24:e9:47:9c:2e:39:
75:91:9f:7a:65:18:fe:ab:70:46:f3:74:d4:1a:c5:
37:13:55:8c:5b:90:55:ec:97:6b:07:4e:91:57:c3:
1d:dc:18:1e:95:e3:b7:59:34:c3:9b:60:57:65:ad:
f7:3f:10:df:c6:61:ab:33:40:d4:b6:d0:34:a8:9c:
9f:12:48:0a:14:fe:56:72:a1:22:16:b5:fc:ee:55:
57:f9:19:a0:e5:4f:a8:cf:7b:d5:70:4c:f6:bb:0d:
41:83:8c:bc:24:98:4f:85:de:1e:9a:44:18:d0:53:
ed:ec:16:85:a3:2b:92:4f:37:d3:81:10:04:e7:50:
24:cc:5d:b8:fd:56:f3:19:50:e6:08:f9:dd:29:69:
d2:e9:77:e4:cd:53:ad:89:60:f2:fa:a3:31:3c:96:
2c:f5:1f:75:34:73:d6:6d:df:ad:71:c1:ec:7f:4a:
f1:e9:38:b0:5c:d0:bf:39:27:42:ae:6e:3a:fa:af:
e9:ee:fd:d7:68:58:2c:14:17:81:f5:49:48:5d:0b:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:89:0A:37:FF:CD:F7:BF:64:8F:AC:5D:7E:76:7D:F8:79:78:A9
X509v3 Authority Key Identifier:
keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3138342e302f32312d3231203d3e203138373437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.176.184.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:3d:ed:26:82:16:53:62:d2:99:d6:10:c0:a3:94:b2:14:55:
a9:21:fc:5c:85:46:07:c1:c5:4f:15:f9:75:4d:09:87:24:2d:
3c:c7:a7:ae:44:e6:d3:76:b8:3c:ee:05:3e:64:53:86:e3:9e:
72:1a:66:f1:3d:29:2f:61:d8:c8:bf:16:95:36:3f:22:09:12:
02:93:7a:79:9e:90:f6:4b:1d:57:30:36:52:23:f0:e8:f3:54:
f1:df:53:6d:fd:a6:9d:a2:1b:aa:c6:ab:84:6d:bf:17:84:86:
ac:46:cf:5d:0e:7e:fc:8a:38:b0:2c:c4:f1:35:f4:aa:7a:15:
4b:fc:ab:6f:d7:e7:ca:8d:fe:cf:f3:3d:cf:37:d0:4a:df:2b:
c5:40:cd:b9:29:d0:fd:4e:f9:ca:44:4b:52:71:b9:61:58:1f:
52:df:a4:e7:75:f6:d4:9a:c1:8c:8f:46:da:1b:70:0f:21:b3:
52:13:8d:c6:cf:b2:65:d7:5b:be:ed:eb:c9:2d:a4:ca:8c:e3:
28:82:be:2a:f6:99:02:70:52:68:2b:25:30:63:b5:1c:d9:21:
5d:51:65:ae:d8:2b:c4:9b:f7:7c:c4:2e:48:43:1a:c4:ca:0e:
ea:19:06:a7:ce:05:6d:a6:af:4e:47:fc:77:a1:e3:3f:95:2e:
f6:16:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:40:32 2026 by rpki-client