Route Origin Authorization
$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/3/323630323a3233343a3a2f33322d3438203d3e2031303132.roa
File: 323630323a3233343a3a2f33322d3438203d3e2031303132.roa (raw, json)
Hash identifier: mz4Xoc7jj8cMOOKGWIqU6G2LLWRDddbCFyawLiCE8ks=
Subject key identifier: 67:F4:1C:CF:2C:75:88:AF:FF:50:BB:E3:FC:15:C5:C7:76:46:F7:0A
Certificate issuer: /CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
Certificate serial: 09D5C496FC16EC077869A4140139BC87CDEA300A
Authority key identifier: 9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer
Subject info access: rsync://oto.wakuwaku.ne.jp/pki/ha/3/323630323a3233343a3a2f33322d3438203d3e2031303132.roa
Signing time: Tue 22 Oct 2024 22:41:06 +0000
ROA not before: Tue 22 Oct 2024 22:36:06 +0000
ROA not after: Tue 21 Oct 2025 22:41:06 +0000
asID: 1012
IP address blocks: 2602:234::/32 maxlen: 48
Validation: Failed, certificate revoked on Sat 09 Nov 2024 14:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d5:c4:96:fc:16:ec:07:78:69:a4:14:01:39:bc:87:cd:ea:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
Validity
Not Before: Oct 22 22:36:06 2024 GMT
Not After : Oct 21 22:41:06 2025 GMT
Subject: CN=67F41CCF2C7588AFFF50BBE3FC15C5C77646F70A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:2e:65:c7:26:e4:21:57:41:81:75:31:b6:
87:1e:3a:a9:eb:12:6f:46:7a:61:16:d6:c4:06:ed:
87:57:b3:e3:9b:41:b4:25:37:e4:fd:1f:62:a3:c8:
b3:18:00:54:66:7e:08:6b:95:fc:bd:5b:d1:26:22:
59:46:bb:47:19:91:bc:a5:51:d3:3f:8a:75:ff:f8:
2d:3c:53:c4:0b:4b:e6:2e:e2:51:f4:c9:e8:c7:68:
ab:2e:b2:92:45:2b:7c:10:a6:c1:b7:0e:55:78:8d:
63:f0:35:a2:e2:36:49:60:79:48:b2:72:ea:1a:2f:
a2:ad:94:6a:af:59:27:b4:6d:8b:87:13:cf:0c:ee:
01:e2:07:80:c2:ca:91:41:18:b3:1d:00:a1:5d:b1:
4d:8d:ed:62:86:bf:fd:92:d8:e0:85:d3:eb:bc:29:
76:56:9b:ac:4a:78:2a:31:92:d2:e4:ae:73:65:d5:
0e:0f:3d:de:97:80:8b:25:b5:75:a7:36:d2:01:96:
d3:98:a7:b0:75:59:72:17:75:3a:c7:e8:ac:52:e7:
2e:6b:01:6b:42:25:0e:b6:53:d5:72:5b:25:22:2d:
7d:46:d8:ce:e1:26:89:9e:08:49:08:17:0e:75:cc:
1f:e6:10:89:70:e7:7d:ee:8e:ca:84:f2:e8:fc:d5:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F4:1C:CF:2C:75:88:AF:FF:50:BB:E3:FC:15:C5:C7:76:46:F7:0A
X509v3 Authority Key Identifier:
keyid:9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer
Subject Information Access:
Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/323630323a3233343a3a2f33322d3438203d3e2031303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:234::/32
Signature Algorithm: sha256WithRSAEncryption
81:98:bb:4f:7d:5c:aa:5f:26:9d:27:01:0f:2d:3a:45:19:db:
38:6c:90:7e:a6:39:00:bc:08:a4:c8:92:7c:ad:53:d0:fc:84:
71:db:40:18:f0:a3:fc:87:3b:ac:1c:bb:5d:08:7c:d6:68:3e:
70:49:fe:68:9c:3d:03:d9:66:72:14:9d:ca:51:11:79:cf:39:
b5:15:26:68:86:9a:6d:ae:6d:d3:a6:5f:4a:fd:e2:1a:69:89:
28:07:2d:c0:84:ac:c1:d5:f6:57:18:58:57:06:fe:d5:ac:5c:
b4:4c:dd:50:53:8d:c4:cb:57:f5:99:07:7e:99:8a:fd:27:77:
e3:a0:07:d4:ff:30:ea:a3:cf:47:36:04:92:53:38:5e:10:50:
a3:40:7f:b0:1a:4c:55:15:ef:17:a9:3b:5f:29:a8:27:3e:2f:
d1:40:b0:00:3e:92:6b:c2:69:7a:c7:62:76:14:52:4d:b0:8b:
48:3e:4a:a8:fc:4e:67:fe:6b:a5:05:a6:94:80:c2:f4:37:ff:
a5:be:e6:3b:b1:60:45:17:e6:43:b7:33:be:9a:bf:5e:d5:48:
57:99:c2:53:63:9c:6c:b3:53:02:33:f1:ef:23:44:4d:d1:36:
69:72:7f:ea:9a:1c:88:5e:1d:92:61:85:3a:b4:23:3c:9c:4e:
ae:78:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 18:07:18 2024 by rpki-client on console-ams.rpki-client.org