Route Origin Authorization
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa
File: 3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa (raw, json)
Hash identifier: mGcONHfprCkvUOyOieGGB0vhlPtkUEPOAMDrWmCkTuc=
Subject key identifier: D2:8C:DE:49:E0:9C:1A:26:2D:C3:F1:2B:27:B1:BF:DA:33:6B:78:39
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 0DF1269462B02FC0E7D78361D62141610895CE49
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa
Signing time: Mon 15 Jul 2024 08:50:15 +0000
ROA not before: Mon 15 Jul 2024 08:45:15 +0000
ROA not after: Mon 14 Jul 2025 08:50:15 +0000
asID: 205058
IP address blocks: 141.193.21.128/26 maxlen: 26
Validation: Failed, certificate revoked on Wed 17 Jul 2024 21:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f1:26:94:62:b0:2f:c0:e7:d7:83:61:d6:21:41:61:08:95:ce:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: Jul 15 08:45:15 2024 GMT
Not After : Jul 14 08:50:15 2025 GMT
Subject: CN=D28CDE49E09C1A262DC3F12B27B1BFDA336B7839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:6d:23:0f:23:b3:10:6d:9b:df:da:ce:2f:
8a:f0:a6:64:27:fd:1e:68:53:72:e8:05:56:90:ed:
74:45:54:c0:bb:b1:e6:b9:0a:94:2e:90:d2:6c:45:
a1:bb:be:36:28:35:16:8e:e5:eb:85:2a:51:35:e2:
e9:25:17:fb:0f:b1:d1:5a:83:d9:8c:b5:93:b5:94:
0c:a1:99:c7:01:d0:b5:6d:b3:f9:d3:ed:1e:73:a0:
12:6e:ec:65:a8:21:f4:1b:be:08:9e:86:ec:15:e5:
0d:99:7a:fe:5e:5c:e9:3d:50:90:86:35:8b:d4:09:
6f:2b:5f:d8:26:21:39:37:3d:f6:6b:a3:73:c8:f7:
5e:da:db:fc:34:9e:b3:78:40:d2:23:6f:e0:bf:38:
bd:74:79:02:4f:b7:fa:f4:03:97:4e:2c:4d:35:00:
d2:36:85:31:de:8e:d4:93:03:4d:06:f7:7e:e5:0a:
49:25:56:b0:77:8d:d5:cc:f2:21:cb:93:f4:d3:51:
62:10:02:89:ff:0e:c1:44:5b:eb:43:64:f6:b4:e9:
a5:89:ff:5d:9c:15:21:a2:c6:f5:27:51:03:8b:13:
3d:ea:70:11:dd:bf:0e:71:e1:cd:f0:b2:22:42:f6:
75:ef:08:98:56:35:c3:f9:89:e7:67:c6:a1:ee:23:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8C:DE:49:E0:9C:1A:26:2D:C3:F1:2B:27:B1:BF:DA:33:6B:78:39
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.193.21.128/26
Signature Algorithm: sha256WithRSAEncryption
c7:e8:ce:85:8c:af:62:cc:c9:5b:2e:14:2e:5e:33:35:0d:6f:
65:16:38:b6:2a:f5:58:c3:fe:0e:c8:a2:38:ad:a2:52:83:46:
30:91:a9:58:0b:9d:85:6a:e1:0c:8f:06:ac:f5:92:c1:d4:89:
69:a9:60:d8:48:f3:19:e8:a0:b5:76:4b:c3:51:0b:b1:87:75:
05:a1:fd:b3:59:97:02:03:70:4b:5c:21:6b:11:c3:a0:b3:0e:
b2:84:17:ce:6b:5f:4b:3c:16:8b:45:c3:b9:7c:11:e9:00:cc:
a0:1b:6f:15:2d:ad:a9:72:34:20:95:43:0e:e0:ef:c5:53:d8:
40:50:ff:43:3f:bb:86:6f:5d:b9:e8:fb:77:c9:c1:9a:84:a5:
fa:cd:8b:f9:03:d0:77:da:00:8f:a7:40:93:70:ed:1d:b8:c9:
ed:e6:40:34:96:c4:ce:f6:3e:1a:3d:0d:3d:05:0c:44:8d:44:
27:dc:fa:76:e0:46:17:b4:5f:58:b4:7f:d4:6d:91:4c:e5:14:
0c:7b:3f:10:eb:39:f2:2b:35:09:68:54:89:d5:d0:e2:a2:d8:
e0:44:4f:4e:c3:e1:c1:78:d2:b6:84:f3:1f:08:8e:a3:b5:95:
bc:fa:db:6e:33:83:45:32:c1:83:c5:88:be:57:85:a3:e7:1c:
6d:fa:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:18:36 2025 by rpki-client