This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/323430363a353463303a3a2f33322d3333203d3e20313430343739.roa
File:                     323430363a353463303a3a2f33322d3333203d3e20313430343739.roa (raw, json)
Hash identifier:          O8Vfj8dnG0/EgAKNZl8FDWB33+a9yA5j4Na+a4eENZA=
Subject key identifier:   08:FD:2B:63:46:EF:CD:54:B8:50:FD:65:79:7E:2C:9D:E5:2D:D0:13
Certificate issuer:       /CN=7470038419B67CD1743CE4D96953077ECE6928FE
Certificate serial:       58E5FAB4384812DB9B7C1ABE045FB2617ED36B2D
Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/323430363a353463303a3a2f33322d3333203d3e20313430343739.roa
Signing time:             Tue 04 Feb 2025 09:45:42 +0000
ROA not before:           Tue 04 Feb 2025 09:40:42 +0000
ROA not after:            Tue 03 Feb 2026 09:45:42 +0000
asID:                     140479
IP address blocks:        2406:54c0::/32 maxlen: 33
Validation:               Failed, certificate revoked on Wed 17 Dec 2025 18:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e5:fa:b4:38:48:12:db:9b:7c:1a:be:04:5f:b2:61:7e:d3:6b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE
        Validity
            Not Before: Feb  4 09:40:42 2025 GMT
            Not After : Feb  3 09:45:42 2026 GMT
        Subject: CN=08FD2B6346EFCD54B850FD65797E2C9DE52DD013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:89:35:3e:1a:75:c6:97:14:1a:18:a5:52:
                    b4:1a:e3:91:49:82:6d:dc:d0:bb:93:fe:46:75:70:
                    3f:e3:a4:77:96:98:14:41:f1:ab:b2:f4:33:46:ff:
                    8e:48:91:5b:a9:ef:74:8a:c8:90:1d:26:7b:4a:3e:
                    1c:a9:43:28:26:bd:8e:1a:dc:41:95:b0:bc:8c:b2:
                    ae:21:81:d3:94:c3:01:96:54:aa:9e:b1:dc:c0:28:
                    52:8b:b6:87:e6:9d:57:be:7e:46:97:0c:23:d5:e5:
                    6b:35:c2:13:55:ec:da:f6:02:57:9a:5b:46:ba:d7:
                    27:fe:94:5e:d9:d5:40:26:41:53:12:65:bb:eb:a6:
                    a1:79:8a:fc:74:d0:13:73:6c:cb:d4:2c:c4:f1:3b:
                    ea:d8:9c:90:69:4b:a4:76:d8:c7:31:84:1a:db:4c:
                    54:44:32:ae:51:7c:a1:f6:65:31:9b:3f:4e:44:97:
                    a5:44:e3:d0:45:7c:6c:b4:9c:51:bf:74:8d:b1:8d:
                    fb:b8:56:35:b0:1b:dc:e8:72:6e:2e:ad:90:9c:f0:
                    5f:f1:f3:e8:23:fb:dc:56:b5:c0:41:bc:68:51:bb:
                    aa:92:23:27:6a:1f:26:24:64:b4:f5:2b:a6:2c:ab:
                    62:4d:55:1d:3b:c6:7b:a8:44:1f:06:4c:7b:0b:0d:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:2B:63:46:EF:CD:54:B8:50:FD:65:79:7E:2C:9D:E5:2D:D0:13
            X509v3 Authority Key Identifier:
                keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/323430363a353463303a3a2f33322d3333203d3e20313430343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:54c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:e7:56:e2:48:8f:a9:2c:0f:3e:c4:c0:8a:90:72:54:20:d2:
         40:21:b4:cf:43:3e:de:36:4d:5f:83:b1:8b:4b:57:58:b7:c8:
         43:48:f6:33:40:a0:19:67:79:89:ec:7b:27:0a:d8:bc:17:ea:
         44:1c:09:97:17:1c:a8:33:45:51:ce:eb:c9:24:0b:c4:89:1a:
         c3:f7:18:16:ef:e9:2f:84:59:e5:6f:81:b9:53:b1:15:45:74:
         06:83:ed:35:38:21:d9:d8:5d:b5:48:99:9b:80:1f:f5:20:63:
         e2:38:43:c1:48:ee:74:86:d8:9b:8e:27:44:1b:50:16:0e:fd:
         72:92:56:f4:91:48:2a:bd:9e:4b:ca:8b:86:b6:21:97:bd:b0:
         02:a6:7b:ea:ad:b6:56:61:52:a3:d4:af:e3:4b:6c:c7:98:28:
         1d:5f:3b:a9:f9:7f:a0:fe:d0:6c:cb:f0:18:69:c4:27:0c:6c:
         f2:39:fe:9e:be:a9:e9:76:3c:ab:97:a8:21:27:76:e6:a5:85:
         7b:0e:c3:40:40:b3:94:cf:06:9b:23:7b:c1:5a:8d:06:f9:82:
         32:71:77:b5:b6:84:9f:5b:e8:c2:04:0f:a9:40:8f:a4:cf:45:
         6f:0a:3b:ac:75:a6:42:72:2e:59:90:96:1e:2a:8e:df:72:ee:
         ce:3f:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:47:57 2025 by rpki-client