This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323637383530.roa
File:                     34352e3137352e3133382e302f32342d3234203d3e20323637383530.roa (raw, json)
Hash identifier:          f0ewwDlb6KijFjwlU1c5IF/FZEJoDjVfaGFdEJq9YQE=
Subject key identifier:   01:50:BB:50:B9:0C:56:F9:92:BA:FC:BE:53:90:D9:4A:03:93:92:2F
Certificate issuer:       /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial:       3C1D4A3FB06C4D7B1E610A923FE2D179CF48ADB9
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323637383530.roa
Signing time:             Mon 10 Mar 2025 16:11:34 +0000
ROA not before:           Mon 10 Mar 2025 16:06:34 +0000
ROA not after:            Mon 09 Mar 2026 16:11:34 +0000
asID:                     267850
IP address blocks:        45.175.138.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 09 Jun 2025 16:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1d:4a:3f:b0:6c:4d:7b:1e:61:0a:92:3f:e2:d1:79:cf:48:ad:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
        Validity
            Not Before: Mar 10 16:06:34 2025 GMT
            Not After : Mar  9 16:11:34 2026 GMT
        Subject: CN=0150BB50B90C56F992BAFCBE5390D94A0393922F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:56:b6:4d:a7:b7:4f:e3:ca:aa:25:63:1c:8e:
                    60:dc:85:0b:7d:61:e0:2d:22:4f:24:c2:c7:90:bd:
                    73:f1:8c:14:85:7d:1b:ce:e4:13:1f:0c:13:cd:e6:
                    c6:7b:2d:20:05:3d:c2:0b:a6:49:1a:92:7c:94:3c:
                    6f:90:46:68:d9:10:32:4e:54:7f:fc:31:26:10:dc:
                    81:ec:54:a2:2d:45:bf:62:a0:74:fc:1a:68:91:91:
                    85:d5:e4:13:ef:2e:d8:d0:1d:63:11:c7:3f:1b:19:
                    f9:bc:af:34:6f:3e:84:f1:89:29:d3:e7:c4:20:3f:
                    2b:6d:c3:1c:49:89:82:0e:df:b0:d6:ca:52:10:5c:
                    5b:00:bb:2a:e2:d3:0b:8c:ef:d6:2f:3b:e7:52:67:
                    8a:27:99:cd:20:a9:0d:9c:bb:e5:1c:d6:ca:c7:ec:
                    5e:24:36:27:28:55:88:47:b7:b7:a1:da:b4:ca:e7:
                    7e:88:d9:d6:6d:34:b1:59:5f:37:2d:a5:ed:6f:d8:
                    c7:d3:3c:c2:f1:0f:43:e9:6e:94:f6:88:29:e6:df:
                    0e:2e:01:1e:d1:4e:04:e8:23:50:1d:e4:29:86:e5:
                    d4:a3:55:78:5c:77:bf:b7:83:14:e4:25:fc:3b:43:
                    b7:90:81:e8:e6:a3:c2:de:bd:25:7a:1d:2d:b1:78:
                    31:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:50:BB:50:B9:0C:56:F9:92:BA:FC:BE:53:90:D9:4A:03:93:92:2F
            X509v3 Authority Key Identifier:
                keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323637383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:7d:79:8c:3b:a5:7b:c2:91:2d:ce:9e:a1:f4:f6:fd:fd:a7:
         16:73:1b:2f:78:6f:85:83:80:d9:72:b6:41:55:6a:0e:02:be:
         77:13:e9:d6:8b:ed:cd:70:3f:8f:cd:c1:b0:c8:d4:92:18:0a:
         74:66:43:8a:36:4b:86:14:99:8e:65:90:8c:14:c8:65:99:79:
         17:a7:d4:54:2d:91:46:9e:2e:e2:fc:47:58:9d:31:36:b0:0d:
         d2:7f:16:ca:6d:a0:de:89:02:38:b1:0f:9e:54:fb:84:b2:80:
         ab:0a:07:a5:33:b2:b2:71:3e:75:1c:c1:71:fe:a1:b6:5e:fe:
         dc:dc:fe:be:1e:70:7b:6c:e9:d1:81:fa:80:59:3a:54:0e:f8:
         a7:c4:7a:38:c8:be:cd:5b:2b:02:b8:0d:f0:04:1c:62:b5:ed:
         31:a4:06:59:c0:ee:85:d6:df:95:0d:32:cc:8c:4d:63:56:2c:
         f4:81:8a:07:7d:0f:b3:94:12:96:8d:8d:8a:5d:cb:26:a3:03:
         0e:c1:66:82:df:48:00:e5:d2:9b:ae:c0:1f:a5:9d:d8:20:f4:
         91:1e:2f:71:b0:9c:2a:7f:e2:c3:68:1a:ec:ab:d7:03:80:33:
         5d:f3:7b:43:80:aa:ee:33:10:60:2d:19:9e:e3:29:1f:bb:de:
         e0:20:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----