Route Origin Authorization
$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/5/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
File: 3136352e3134302e3134322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: iutwGUO8X+H1AClvrx963D8t3wO98SAcarOGYyG8ZGU=
Subject key identifier: 58:19:DA:97:39:C5:AC:30:88:3C:BA:31:71:0F:89:3C:A5:CF:2D:B6
Certificate issuer: /CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
Certificate serial: 611BBDA888774551509E6398F68A3942641FA5B5
Authority key identifier: E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
Subject info access: rsync://oto.wakuwaku.ne.jp/pki/ha/5/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
Signing time: Mon 06 Jan 2025 19:44:49 +0000
ROA not before: Mon 06 Jan 2025 19:39:49 +0000
ROA not after: Mon 05 Jan 2026 19:44:49 +0000
asID: 945
IP address blocks: 165.140.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 09:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:1b:bd:a8:88:77:45:51:50:9e:63:98:f6:8a:39:42:64:1f:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
Validity
Not Before: Jan 6 19:39:49 2025 GMT
Not After : Jan 5 19:44:49 2026 GMT
Subject: CN=5819DA9739C5AC30883CBA31710F893CA5CF2DB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:47:7e:56:22:91:24:15:ff:4a:03:0a:1a:
64:e9:ca:a2:45:2b:ab:85:24:88:42:90:2c:8b:d4:
45:35:39:a6:cb:39:26:4f:02:8a:49:eb:07:07:4b:
b3:40:09:e1:22:5b:84:4d:6e:78:43:5d:89:32:9c:
08:c7:e1:d5:83:7e:e5:73:0f:7c:59:78:73:9c:5d:
eb:1a:b4:20:fb:c9:6f:02:58:df:67:c2:2e:7a:ea:
21:fb:00:1c:2a:c7:8f:ac:3b:1d:e5:53:eb:6c:fc:
ce:14:8b:54:15:45:0b:69:31:a0:9e:5f:9d:c4:6d:
26:8b:0e:e8:35:35:a0:23:50:a2:31:7d:86:7b:84:
3c:21:78:13:c8:3d:94:03:8e:b4:a7:04:ce:5e:8d:
df:c1:21:fe:69:02:fd:cf:87:3e:14:15:da:e7:41:
fd:ac:f0:22:c4:7c:58:1a:2a:1a:df:69:8a:e2:25:
ca:46:30:c4:c5:1e:f2:99:b2:e4:20:5d:00:53:11:
40:a4:8d:ba:b3:99:50:cb:d3:58:a8:1e:ac:9e:37:
96:63:85:15:82:5c:09:2b:a7:5f:67:85:6e:64:30:
ee:e9:dd:90:98:06:34:e6:2d:64:e4:c8:30:b8:4b:
2b:ac:86:07:3f:e3:83:78:92:82:7f:d5:66:83:53:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:19:DA:97:39:C5:AC:30:88:3C:BA:31:71:0F:89:3C:A5:CF:2D:B6
X509v3 Authority Key Identifier:
keyid:E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
Subject Information Access:
Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.140.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b2:12:54:33:7f:40:63:6e:70:74:a8:74:44:4f:fc:4e:6e:
58:d2:a2:32:75:bf:b9:22:5e:bd:96:82:90:88:51:77:1a:ff:
e3:83:74:be:94:fb:f7:c6:6e:f1:21:0c:40:13:87:6d:a7:ae:
6b:e7:76:77:47:7b:93:6b:89:34:f1:84:f7:3a:3e:28:e7:e1:
16:58:f3:cc:7c:b6:f9:32:2e:70:08:7e:c7:e2:91:22:e7:9f:
13:65:a1:d2:ad:23:8c:17:d4:41:0a:cf:b5:d4:0d:2f:c9:12:
94:3d:d5:71:ee:e0:5f:b2:71:97:d0:97:d5:05:6b:ed:12:86:
a9:01:4c:6a:3d:b2:67:b6:c4:0f:c9:cd:60:36:1b:06:a7:51:
fa:55:d3:fa:51:4a:ae:a0:92:12:4d:6b:57:f3:49:b1:70:7a:
41:f0:09:c2:85:9a:91:a0:2b:0f:64:9a:4f:a6:5d:f1:2a:41:
3a:c6:60:5d:7b:db:6e:e4:ac:bf:8d:84:39:65:5a:9f:90:18:
b1:b7:3b:fc:7a:fa:a9:37:67:b7:e9:6d:10:50:dc:5e:f1:6c:
1e:7b:ad:bf:03:40:cb:a1:47:5a:6c:02:9a:e2:f0:b7:a1:e3:
af:2e:ab:75:b6:6b:7f:ef:90:c3:05:c4:bf:dc:06:2e:a4:44:
35:04:60:cc
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIUYRu9qIh3RVFQnmOY9oo5QmQfpbUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMDkzNDdlNGMzZTcxZGRjODIxMmFkYTNj
OGEzYzZkOTNhZDMzNmFmZDUwHhcNMjUwMTA2MTkzOTQ5WhcNMjYwMTA1MTk0NDQ5
WjAzMTEwLwYDVQQDEyg1ODE5REE5NzM5QzVBQzMwODgzQ0JBMzE3MTBGODkzQ0E1
Q0YyREI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNNHflYikSQV
/0oDChpk6cqiRSurhSSIQpAsi9RFNTmmyzkmTwKKSesHB0uzQAnhIluETW54Q12J
MpwIx+HVg37lcw98WXhznF3rGrQg+8lvAljfZ8Iueuoh+wAcKsePrDsd5VPrbPzO
FItUFUULaTGgnl+dxG0miw7oNTWgI1CiMX2Ge4Q8IXgTyD2UA460pwTOXo3fwSH+
aQL9z4c+FBXa50H9rPAixHxYGioa32mK4iXKRjDExR7ymbLkIF0AUxFApI26s5lQ
y9NYqB6snjeWY4UVglwJK6dfZ4VuZDDu6d2QmAY05i1k5MgwuEsrrIYHP+ODeJKC
f9Vmg1NM/QIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFFgZ2pc5xawwiDy6MXEPiTyl
zy22MB8GA1UdIwQYMBaAFONT12yiGsl9Z78skYN8TxeJJEJyMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL290by53YWt1d2FrdS5uZS5q
cC9wa2kvaGEvNS9FMzUzRDc2Q0EyMUFDOTdENjdCRjJDOTE4MzdDNEYxNzg5MjQ0
MjcyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDkt
YWNjZS0xMzcyMjdlOTcxYWMvZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRk
NjYzZjM3LzY1MDZhNjZlZDA5MzQ3ZTRjM2U3MWRkYzgyMTJhZGEzYzhhM2M2ZDkz
YWQzMzZhZmQ1LmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJzeW5j
Oi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9oYS81LzMxMzYzNTJlMzEzNDMwMmUz
MTM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACl
jI4wDQYJKoZIhvcNAQELBQADggEBAGyyElQzf0BjbnB0qHRET/xObljSojJ1v7ki
Xr2WgpCIUXca/+ODdL6U+/fGbvEhDEATh22nrmvndndHe5NriTTxhPc6Pijn4RZY
88x8tvkyLnAIfsfikSLnnxNlodKtI4wX1EEKz7XUDS/JEpQ91XHu4F+ycZfQl9UF
a+0ShqkBTGo9sme2xA/JzWA2GwanUfpV0/pRSq6gkhJNa1fzSbFwekHwCcKFmpGg
Kw9kmk+mXfEqQTrGYF17227krL+NhDllWp+QGLG3O/x6+qk3Z7fpbRBQ3F7xbB57
rb8DQMuhR1psApri8Leh468uq3W2a3/vkMMFxL/cBi6kRDUEYMw=
-----END CERTIFICATE-----
Generated at Wed Feb 5 04:44:14 2025 by rpki-client