This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430653a3a2f34372d3438203d3e203237383832.roa
File:                     323830303a3332303a383430653a3a2f34372d3438203d3e203237383832.roa (raw, json)
Hash identifier:          Z/4FwA/U8WM8q4VaI5mxojMBWq11mLfaYFXp8iYBV2Q=
Subject key identifier:   37:B6:AC:51:E4:29:67:4B:17:C8:C7:70:2B:8B:56:60:03:2C:C3:FF
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       5387C131436C495DDC4280275AE6CB0E9D6885A7
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430653a3a2f34372d3438203d3e203237383832.roa
Signing time:             Tue 04 Feb 2025 20:05:42 +0000
ROA not before:           Tue 04 Feb 2025 20:00:42 +0000
ROA not after:            Tue 03 Feb 2026 20:05:42 +0000
asID:                     27882
IP address blocks:        2800:320:840e::/47 maxlen: 48
Validation:               Failed, certificate revoked on Wed 18 Jun 2025 04:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:87:c1:31:43:6c:49:5d:dc:42:80:27:5a:e6:cb:0e:9d:68:85:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Feb  4 20:00:42 2025 GMT
            Not After : Feb  3 20:05:42 2026 GMT
        Subject: CN=37B6AC51E429674B17C8C7702B8B5660032CC3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:6e:19:f3:17:49:30:cc:8a:d2:a9:cc:46:
                    d6:74:54:66:73:ea:80:3e:a1:20:a6:4d:02:bf:c8:
                    b8:ae:95:64:ea:5d:48:fd:7b:2b:46:69:b8:35:c2:
                    8c:30:05:21:07:b8:65:2c:e2:93:7b:d6:09:c5:bb:
                    03:a7:0c:60:de:f1:19:8d:91:0e:fe:9d:c0:f2:6f:
                    76:fe:2f:4b:e8:65:cd:d3:e9:69:22:53:8b:82:58:
                    3a:9e:7c:bb:71:64:ac:52:39:d1:7c:04:b4:47:01:
                    de:6c:e3:2c:c5:62:c5:81:90:9f:b5:c3:e1:6b:e6:
                    d7:28:5c:d4:13:8d:77:a5:f3:17:5f:9f:c3:d9:ef:
                    0b:3d:f9:d8:44:e8:52:d5:0e:a4:25:61:08:5a:4c:
                    77:4d:3f:e3:4d:e8:86:0e:84:a8:ae:65:fa:a2:59:
                    16:63:b1:7d:7b:d2:78:6b:0f:0b:70:fd:a9:db:68:
                    be:f3:83:d7:f9:6a:bd:8e:ca:03:48:6c:9e:d7:03:
                    58:a0:cd:04:a2:40:23:74:8d:78:53:bb:ba:b8:bb:
                    18:b6:29:d0:ff:cd:ab:42:02:bc:87:79:63:1d:f0:
                    f8:1f:b6:c1:61:ea:ff:c7:f3:eb:08:51:83:bf:24:
                    20:0d:66:e1:83:b0:30:7a:4a:37:83:97:5c:e2:81:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:AC:51:E4:29:67:4B:17:C8:C7:70:2B:8B:56:60:03:2C:C3:FF
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430653a3a2f34372d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:840e::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:95:a2:d1:43:97:99:dd:3a:61:3f:e4:79:7d:93:83:f7:ec:
         ed:11:75:71:2c:51:de:d1:9f:d3:e4:4b:53:f6:ac:0e:cb:e7:
         92:38:b2:36:24:3d:04:c1:c4:e5:65:8e:42:97:ea:f4:04:d3:
         d5:b8:1e:ec:6f:60:20:8b:46:49:46:48:d8:78:90:33:d2:fd:
         16:ce:ed:be:98:70:00:d6:58:f6:db:83:5e:b7:54:d2:04:f9:
         ee:68:a5:d2:04:67:53:17:d1:3f:49:23:eb:f0:d2:6f:32:63:
         c3:8f:a3:be:96:c9:7a:62:2a:87:d7:de:15:09:b9:ed:42:4b:
         b9:52:c5:96:ea:ed:92:af:1c:44:1a:b8:bb:ca:f1:c5:8e:e2:
         ea:54:f6:c7:55:1b:0f:3b:40:a7:87:83:63:c0:c3:c7:cb:7f:
         92:0e:a1:51:ed:e0:c6:bd:b5:b4:c2:5d:7b:2d:78:f4:cd:6a:
         0a:d4:a1:aa:be:64:a5:80:70:5a:33:f5:db:8a:73:e7:41:b9:
         63:3a:d7:cd:70:d7:2e:11:73:c8:12:94:03:e7:a3:2f:27:e4:
         44:c6:4b:6f:6a:21:ca:1b:14:be:09:a3:3c:bf:77:9f:2b:eb:
         a6:27:7d:eb:96:dc:46:67:d7:b5:30:79:ab:5b:0f:09:90:30:
         2e:d2:39:2d
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUU4fBMUNsSV3cQoAnWubLDp1ohacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM4NjY4MTMxNzhGRjU1MEU2RkNBQkNENDkyMzg3REQx
RDBFMDhBNTAeFw0yNTAyMDQyMDAwNDJaFw0yNjAyMDMyMDA1NDJaMDMxMTAvBgNV
BAMTKDM3QjZBQzUxRTQyOTY3NEIxN0M4Qzc3MDJCOEI1NjYwMDMyQ0MzRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0U24Z8xdJMMyK0qnMRtZ0VGZz
6oA+oSCmTQK/yLiulWTqXUj9eytGabg1wowwBSEHuGUs4pN71gnFuwOnDGDe8RmN
kQ7+ncDyb3b+L0voZc3T6WkiU4uCWDqefLtxZKxSOdF8BLRHAd5s4yzFYsWBkJ+1
w+Fr5tcoXNQTjXel8xdfn8PZ7ws9+dhE6FLVDqQlYQhaTHdNP+NN6IYOhKiuZfqi
WRZjsX170nhrDwtw/anbaL7zg9f5ar2OygNIbJ7XA1igzQSiQCN0jXhTu7q4uxi2
KdD/zatCAryHeWMd8PgftsFh6v/H8+sIUYO/JCANZuGDsDB6SjeDl1zigQSXAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUN7asUeQpZ0sXyMdwK4tWYAMsw/8wHwYDVR0j
BBgwFoAUs4ZoExeP9VDm/KvNSSOH3R0OCKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMTU3QkQ1OURBQkNCNkQ5NjFBQzBGMkQwMEJBNTk2NzU5
RkFDODJBMEVBRURFN0QxMjlERjI0MUNCRUZCRjE5LzAvQjM4NjY4MTMxNzhGRjU1
MEU2RkNBQkNENDkyMzg3REQxRDBFMDhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzg2NjgxMzE3OEZGNTUwRTZG
Q0FCQ0Q0OTIzODdERDFEMEUwOEE1LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjE1N0JENTlEQUJDQjZEOTYxQUMwRjJEMDBCQTU5Njc1OUZBQzgyQTBF
QUVERTdEMTI5REYyNDFDQkVGQkYxOS8wLzMyMzgzMDMwM2EzMzMyMzAzYTM4MzQz
MDY1M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzNzM4MzgzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ASgAAyCEDjANBgkqhkiG9w0BAQsFAAOCAQEAYJWi0UOXmd06YT/keX2Tg/fs7RF1
cSxR3tGf0+RLU/asDsvnkjiyNiQ9BMHE5WWOQpfq9ATT1bge7G9gIItGSUZI2HiQ
M9L9Fs7tvphwANZY9tuDXrdU0gT57mil0gRnUxfRP0kj6/DSbzJjw4+jvpbJemIq
h9feFQm57UJLuVLFlurtkq8cRBq4u8rxxY7i6lT2x1UbDztAp4eDY8DDx8t/kg6h
Ue3gxr21tMJdey149M1qCtShqr5kpYBwWjP124pz50G5YzrXzXDXLhFzyBKUA+ej
LyfkRMZLb2ohyhsUvgmjPL93nyvrpid965bcRmfXtTB5q1sPCZAwLtI5LQ==
-----END CERTIFICATE-----