![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng0ssjvHROAnTetURD7v8KRCuOM.roa
File: ng0ssjvHROAnTetURD7v8KRCuOM.roa (raw, json)
Hash identifier: HXC60Qpx5zmspsq9/GB5Q+aTWSEDuabChNLZFJBalJk=
Subject key identifier: 9E:0D:2C:B2:3B:C7:44:E0:27:4D:EB:54:44:3E:EF:F0:A4:42:B8:E3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 060F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng0ssjvHROAnTetURD7v8KRCuOM.roa
Signing time: Thu 29 Feb 2024 01:38:28 +0000
ROA not before: Thu 29 Feb 2024 01:38:28 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 49.102.168.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 18 Sep 2024 03:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:38:28 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=9E0D2CB23BC744E0274DEB54443EEFF0A442B8E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:8d:24:df:ea:ab:89:d7:1b:0e:ff:ad:74:
cc:3d:4f:d0:eb:2a:bd:58:c4:7a:be:52:81:4a:bd:
23:c9:f6:85:f5:95:b1:39:8b:1d:c3:7e:d7:f2:81:
4c:ee:cb:a6:5e:e5:43:63:78:be:9a:b4:43:59:9b:
87:4a:f5:61:58:f2:f7:48:a3:b3:05:36:8a:36:8d:
34:9b:10:17:ac:89:53:c6:f3:63:78:4d:70:c6:81:
51:0a:7f:90:a3:45:06:36:0d:30:d3:fe:56:c5:71:
b9:60:22:86:6b:ee:38:b2:a8:1e:59:db:a0:9f:e4:
ef:79:34:df:0f:04:a7:89:76:ee:b6:ad:c5:c0:1b:
5f:cd:aa:9f:20:12:d8:25:ab:83:69:56:6b:64:fc:
bc:d9:b7:a1:94:26:e0:46:4f:ed:67:18:f9:85:a4:
59:33:ce:a0:e6:1a:c0:3e:86:95:dc:6b:57:30:50:
93:5f:49:8e:94:0b:b7:45:e8:70:14:e4:a8:86:15:
aa:45:d9:c9:65:23:5e:3b:c2:97:bd:73:48:c4:4b:
1e:3e:80:1d:af:68:c8:cc:41:8d:24:3a:a8:f1:c7:
65:ed:15:e1:01:68:cf:25:b2:66:11:7c:be:d0:d4:
eb:c1:8e:c5:b7:3a:7c:e3:5b:f7:6f:bc:a6:cf:6d:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0D:2C:B2:3B:C7:44:E0:27:4D:EB:54:44:3E:EF:F0:A4:42:B8:E3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng0ssjvHROAnTetURD7v8KRCuOM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.168.0/21
Signature Algorithm: sha256WithRSAEncryption
47:72:16:d4:33:c7:b8:27:9b:fc:6d:3e:3a:49:7a:7d:ee:f2:
87:34:2f:18:55:78:1b:e1:13:62:49:6e:eb:e6:29:fd:ce:43:
a1:ad:3b:70:54:48:84:b7:4f:c9:f8:b5:f7:dd:29:42:a5:fe:
b4:f9:cc:77:6a:33:a8:eb:18:a7:ae:ee:4f:15:1b:3c:02:17:
3b:03:22:81:dd:a3:41:c7:4b:27:59:07:d7:e9:19:74:2f:9e:
52:58:32:eb:38:d1:cc:9b:85:61:98:74:58:e8:b2:cd:05:ae:
86:ec:83:64:7f:da:ae:e6:03:8f:e2:56:39:20:a6:7d:5b:d2:
a2:70:6e:a6:f7:bf:5a:78:6d:2c:29:03:1e:20:ac:3f:a5:22:
46:cf:f4:aa:21:a0:77:38:0c:d1:60:73:24:a5:81:18:8a:15:
66:a3:f3:79:55:b5:2b:c4:22:ca:38:65:13:4e:78:55:bd:05:
6d:24:48:d3:63:09:7e:92:45:69:26:35:17:96:9f:87:64:bd:
84:38:4c:f3:59:33:19:df:32:0e:33:96:f6:34:48:ae:ab:26:
a3:0b:0b:91:05:04:b1:e6:c2:82:f7:66:7b:7a:90:03:9c:ed:
c9:dd:33:90:dc:1d:06:b6:1e:ba:b9:52:50:2f:10:a2:20:42:
a8:e2:a7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:54 2025 by rpki-client