Route Origin Authorization
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e36342e302f31392d3139203d3e203138373437.roa
File: 3136382e3137362e36342e302f31392d3139203d3e203138373437.roa (raw, json)
Hash identifier: srFLFT70IIPKxnl4tk5WRjobyj3vgivGdtZSPKIK8Ac=
Subject key identifier: 7A:ED:AD:9D:7E:D3:CF:A2:56:E7:B8:2E:63:12:C8:93:63:89:6F:51
Certificate issuer: /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial: 786EC89707FA098A9EE89E8D189F6033D35FDD5C
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e36342e302f31392d3139203d3e203138373437.roa
Signing time: Mon 21 Sep 2026 13:05:04 +0000
ROA not before: Mon 21 Sep 2026 13:00:04 +0000
ROA not after: Mon 20 Sep 2027 13:05:04 +0000
asID: 18747
IP address blocks: 168.176.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 24 Sep 2026 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6e:c8:97:07:fa:09:8a:9e:e8:9e:8d:18:9f:60:33:d3:5f:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Validity
Not Before: Sep 21 13:00:04 2026 GMT
Not After : Sep 20 13:05:04 2027 GMT
Subject: CN=7AEDAD9D7ED3CFA256E7B82E6312C89363896F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:aa:6b:dc:8f:03:5f:b1:ad:cf:0a:5b:aa:
0d:4b:04:90:9c:ac:da:ce:81:9c:0f:bc:ba:c1:8a:
c0:44:71:ce:97:e4:ae:24:e5:c5:77:68:7e:c0:a8:
17:bd:eb:03:81:4f:f4:9b:f4:d6:b9:3b:42:1e:af:
fe:a0:c6:f7:1d:6a:ab:0c:e6:6d:42:6d:dd:8e:ba:
05:19:92:53:55:f7:ae:af:dd:03:ae:1d:3b:2e:53:
ca:c5:38:18:ee:43:3c:b5:f6:a0:e6:61:ae:47:47:
93:48:66:57:2e:ea:e1:c8:0f:f4:c8:cd:eb:bc:c2:
54:d6:1b:cf:1a:30:14:f3:eb:b2:2a:82:c1:fa:4f:
db:8e:2c:ef:8b:1c:9e:27:13:26:64:f3:f9:1c:ad:
25:f5:59:ed:fa:1e:50:9a:4a:e2:db:71:8e:83:e5:
1b:72:b0:77:b2:64:d1:18:7b:7b:33:7e:0c:3e:ea:
7f:b5:b3:f7:06:4c:9a:3e:0c:3e:80:d1:c8:32:22:
73:5f:8a:79:c4:f1:20:3b:fa:18:d4:c9:e6:5e:29:
c5:2b:ae:54:34:96:cf:b5:60:0f:64:67:9b:36:2a:
ed:f8:dd:9e:c3:2d:3c:16:54:83:e1:a9:5f:4b:07:
8c:c9:ee:07:f7:3e:ce:a9:2d:6e:75:dc:e1:d1:fd:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:ED:AD:9D:7E:D3:CF:A2:56:E7:B8:2E:63:12:C8:93:63:89:6F:51
X509v3 Authority Key Identifier:
keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e36342e302f31392d3139203d3e203138373437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.176.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:ae:2c:ab:1d:01:f2:11:b8:8a:8d:95:5c:0b:b5:56:12:80:
54:fe:ad:d1:07:d9:af:da:87:84:db:9c:02:b8:9e:d0:52:33:
b5:1f:7b:6c:75:f8:d2:9b:16:18:1e:41:22:94:bc:78:36:03:
1e:bd:1a:a5:f5:6a:8b:2a:ed:c6:e0:41:37:ad:4f:11:24:ea:
49:a6:92:65:50:04:bd:86:19:29:36:23:86:b7:06:77:95:39:
1d:eb:37:98:1d:d9:a2:2e:23:62:7a:f6:95:48:09:eb:e2:17:
3a:8b:60:9b:95:f5:93:55:4f:98:c6:92:fd:11:c5:05:8b:07:
66:2c:20:29:86:81:c6:c0:49:9d:82:6e:10:23:3e:21:ea:44:
4e:39:12:98:bb:10:e8:36:b1:c5:a0:7b:bd:cc:41:86:e4:7c:
c2:b9:31:ba:14:c8:88:ce:8e:13:15:fd:c6:db:7f:88:b3:ae:
dc:2d:c7:12:06:3c:ac:af:b9:b2:c5:20:c7:b5:55:86:be:19:
eb:d4:ab:a4:6e:75:75:23:5d:9b:2a:0e:d0:37:e7:03:d6:ef:
1d:26:7f:d2:ae:6e:28:97:cf:51:e7:08:67:b0:32:08:e4:98:
c8:2e:a8:1e:4c:35:19:1d:f3:b1:9c:9a:33:4c:68:37:38:c3:
80:c9:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:48:34 2026 by rpki-client