Route Origin Authorization
$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/2/323630363a623063303a3a2f33322d3438203d3e20393435.roa
File: 323630363a623063303a3a2f33322d3438203d3e20393435.roa (raw, json)
Hash identifier: ZOThXiUjv2FPR5xN6OSECR1QWfcUr8dMyArmagfibXw=
Subject key identifier: 4B:5D:67:A2:81:BC:F3:BB:ED:AB:F0:0E:32:C9:EB:C2:17:63:1A:08
Certificate issuer: /CN=62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff
Certificate serial: 6F58AA0AE7FB99A66C67CAAF7114CFBE816A4E3A
Authority key identifier: 3A:50:25:3B:A3:B3:EF:71:13:81:A9:0C:B5:6A:6B:4B:4E:E5:DF:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff.cer
Subject info access: rsync://oto.wakuwaku.ne.jp/pki/ha/2/323630363a623063303a3a2f33322d3438203d3e20393435.roa
Signing time: Mon 07 Oct 2024 06:45:24 +0000
ROA not before: Mon 07 Oct 2024 06:40:24 +0000
ROA not after: Mon 06 Oct 2025 06:45:24 +0000
asID: 945
IP address blocks: 2606:b0c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Oct 2024 10:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:58:aa:0a:e7:fb:99:a6:6c:67:ca:af:71:14:cf:be:81:6a:4e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff
Validity
Not Before: Oct 7 06:40:24 2024 GMT
Not After : Oct 6 06:45:24 2025 GMT
Subject: CN=4B5D67A281BCF3BBEDABF00E32C9EBC217631A08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:a1:c8:b4:aa:40:9c:39:fa:19:14:de:34:
d1:79:db:cf:f3:b3:da:5f:56:77:0e:a3:c8:ee:44:
68:2c:9c:15:5b:3e:c5:13:db:f1:d0:41:49:7e:da:
21:6f:85:fb:6c:e1:26:bd:9d:2b:6f:d1:7d:a1:09:
90:76:db:2f:5d:2a:df:62:3a:0c:cd:bb:32:f0:98:
2a:92:5d:db:10:9c:d3:c5:4a:2d:02:0b:3e:da:1d:
51:a3:9e:78:de:0f:f3:5b:e1:03:8b:94:31:65:2c:
31:d9:28:7b:82:28:4a:3e:de:c1:a0:c8:ee:32:3c:
e2:e3:3e:89:1c:86:24:55:f4:00:1d:5e:d2:f8:29:
9f:40:ea:57:5f:3a:02:58:5b:55:03:8c:d5:86:b9:
80:a0:fe:a0:31:f0:a2:2a:46:8d:b3:9c:0c:c7:61:
6f:ab:6e:1d:03:47:ed:c4:c2:3c:81:c3:6d:ba:7d:
65:29:88:96:3c:c6:24:15:c6:2b:07:2b:17:9a:c4:
97:37:c4:8c:c7:18:2b:f4:15:7c:9d:30:35:94:3f:
22:1a:d5:9f:33:16:d6:8c:49:39:8d:8e:79:08:eb:
cc:dc:1c:cf:0e:69:53:92:c1:66:21:2e:5f:fe:f1:
82:45:b7:32:04:15:7e:e3:3c:aa:95:3a:39:52:5d:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5D:67:A2:81:BC:F3:BB:ED:AB:F0:0E:32:C9:EB:C2:17:63:1A:08
X509v3 Authority Key Identifier:
keyid:3A:50:25:3B:A3:B3:EF:71:13:81:A9:0C:B5:6A:6B:4B:4E:E5:DF:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://oto.wakuwaku.ne.jp/pki/ha/2/3A50253BA3B3EF711381A90CB56A6B4B4EE5DF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff.cer
Subject Information Access:
Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/2/323630363a623063303a3a2f33322d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:b0c0::/32
Signature Algorithm: sha256WithRSAEncryption
bb:57:37:ea:17:a4:a2:a2:da:d4:a8:a1:9b:9e:b7:05:85:85:
b0:ab:a1:93:66:0b:31:48:21:b1:5e:b7:6b:a7:42:f6:f1:27:
a2:80:df:0c:db:72:b7:4b:5c:03:30:1a:f0:f8:66:47:29:cc:
51:dd:9c:0f:37:ce:24:d9:22:30:85:ec:d1:02:b0:4e:09:95:
e3:a4:87:d9:74:56:33:c3:5f:64:3c:15:43:11:d7:45:dd:a7:
e9:91:c3:de:2a:9d:90:69:86:67:d4:bd:fa:73:80:0a:0e:69:
40:e7:ea:fe:6f:e1:09:16:34:f5:61:cc:22:ae:fb:bc:02:76:
08:00:9e:52:3d:69:e9:bb:f9:bb:e9:7c:da:15:24:b2:e3:19:
73:ae:b8:b2:f7:c5:dd:89:6b:d4:9f:1d:8a:78:c7:54:a5:3c:
5e:08:d2:97:6d:88:31:2f:9e:65:b9:1a:fe:ce:ab:d2:cb:bb:
5e:3c:84:f2:ac:65:be:f7:9d:85:08:00:ea:6e:f7:45:2c:25:
84:3a:44:86:71:53:b9:e9:20:9c:50:14:02:71:d1:ba:9a:21:
55:a3:85:6e:d3:ec:65:2e:1a:f2:34:85:8c:d5:20:5a:c0:74:
d8:a5:a9:c2:0b:28:06:75:97:88:47:83:42:5d:d7:4b:84:d8:
e2:50:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 13:27:54 2024 by rpki-client on console-ams.rpki-client.org