![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e31302e302f32332d3234203d3e2037303138.roa
File: 32332e3135302e31302e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: evU4hLUqsQ23SxnRQIe2/QT5u2Gq1U5RD0Bb06eJ5VU=
Subject key identifier: AC:57:D0:A4:6B:58:4D:A4:8F:C2:77:87:7B:AA:92:81:FA:01:9A:62
Certificate issuer: /CN=a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7
Certificate serial: 15B9D84064B2B093D4F8BF3D28DAF04D4B4D6805
Authority key identifier: 5F:6A:78:7C:1D:0A:9C:15:86:23:4E:60:78:A0:CD:6F:00:B1:DA:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer
Subject info access: rsync://oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e31302e302f32332d3234203d3e2037303138.roa
Signing time: Mon 21 Oct 2024 17:08:52 +0000
ROA not before: Mon 21 Oct 2024 17:03:52 +0000
ROA not after: Mon 20 Oct 2025 17:08:52 +0000
asID: 7018
IP address blocks: 23.150.10.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 05:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b9:d8:40:64:b2:b0:93:d4:f8:bf:3d:28:da:f0:4d:4b:4d:68:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7
Validity
Not Before: Oct 21 17:03:52 2024 GMT
Not After : Oct 20 17:08:52 2025 GMT
Subject: CN=AC57D0A46B584DA48FC277877BAA9281FA019A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:b8:6a:42:9f:3f:fe:a6:7a:aa:c8:ff:a1:
a3:36:56:bb:6a:75:fd:6e:6a:aa:31:8e:92:fb:7d:
2f:51:73:b4:9b:6c:60:36:c8:c1:e7:b2:4d:58:8e:
63:6c:d6:78:c4:89:1a:d2:fc:59:4c:9d:1c:90:35:
ed:a0:44:a2:11:36:ae:54:15:f0:a2:04:ec:80:f4:
ed:f7:30:23:68:6c:10:48:6e:15:db:56:11:18:f7:
86:93:ec:b0:52:25:05:06:89:fc:31:d0:98:c7:f2:
f4:dc:9d:fa:68:34:18:39:a0:1b:46:7c:35:01:40:
4d:f6:3d:d9:ca:e8:51:62:7f:f7:23:0b:bb:76:62:
f7:f8:b9:ac:a9:e9:ba:c3:59:e6:2a:55:5d:02:76:
0d:48:e5:06:c6:68:c5:9e:9d:26:d9:7c:a7:b9:2c:
cb:e9:40:a1:f9:cc:8a:1b:17:33:dc:b6:5c:36:18:
45:44:e0:9a:ed:ad:e7:47:66:15:1a:36:9d:80:46:
06:56:f4:53:8f:32:bc:48:a3:8b:71:b8:d5:e2:f7:
f3:39:90:99:4c:33:b7:44:dc:16:32:c5:99:af:7a:
41:91:b2:c6:8e:1c:50:2d:45:4e:e3:65:58:dd:f8:
f2:c5:7f:24:2f:62:e5:b1:36:c9:c8:f0:fc:92:4c:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:57:D0:A4:6B:58:4D:A4:8F:C2:77:87:7B:AA:92:81:FA:01:9A:62
X509v3 Authority Key Identifier:
keyid:5F:6A:78:7C:1D:0A:9C:15:86:23:4E:60:78:A0:CD:6F:00:B1:DA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://oto.wakuwaku.ne.jp/pki/ha/1/5F6A787C1D0A9C1586234E6078A0CD6F00B1DA62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer
Subject Information Access:
Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e31302e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.10.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:4e:58:92:ce:9b:a9:d3:c8:c9:35:25:72:7e:b8:da:11:9d:
2b:52:8a:80:bc:9a:d7:37:84:98:c3:2d:9d:f6:be:47:fa:d6:
14:eb:73:69:90:28:ac:34:1b:2b:92:de:6c:0b:c9:d2:a1:80:
e3:56:ab:a4:b7:41:76:be:30:9a:d8:9d:4c:21:2e:4e:19:12:
86:21:e9:e3:19:7f:ff:ce:7a:14:8c:80:46:cc:b0:3e:8b:28:
99:54:78:70:50:b2:d7:73:db:d0:48:04:47:48:c6:0b:dd:75:
4e:33:ae:18:27:9d:00:44:f3:c2:5e:0e:0a:ab:25:c6:3b:b3:
05:68:0a:3b:60:06:e1:02:a3:3f:67:5d:53:b6:6c:20:29:48:
88:4a:22:14:1c:55:6f:df:8e:a3:8e:79:fc:2c:31:a1:db:4d:
44:93:57:ba:ae:e5:84:d0:dd:ed:5c:ea:54:ee:d0:c1:06:4c:
ed:75:42:b1:49:2a:4f:36:4a:1d:0e:c5:73:57:45:c9:26:aa:
ae:b3:f7:04:d4:1d:8b:aa:43:cf:52:e6:83:a9:cb:dc:57:74:
da:a9:95:4b:a3:d0:e9:83:05:6c:ad:59:22:40:30:01:ca:6c:
9d:d0:b3:0d:19:8d:15:8c:73:08:78:23:30:e6:23:3d:c5:2f:
76:22:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:37 2025 by rpki-client