![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3818/k8MmNgqZq37kgmud__Qo4KIOF60.roa
File: k8MmNgqZq37kgmud__Qo4KIOF60.roa (raw, json)
Hash identifier: FXNNm/2A63MWwTgojZaml9OoUDucb1DLGbxk65A9q/w=
Subject key identifier: 93:C3:26:36:0A:99:AB:7E:E4:82:6B:9D:FF:F4:28:E0:A2:0E:17:AD
Certificate issuer: /CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
Certificate serial: 2E
Authority key identifier: 18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/k8MmNgqZq37kgmud__Qo4KIOF60.roa
Signing time: Thu 29 Feb 2024 01:34:02 +0000
ROA not before: Thu 29 Feb 2024 01:34:02 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 14618
IP address blocks: 202.244.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
Validity
Not Before: Feb 29 01:34:02 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=93C326360A99AB7EE4826B9DFFF428E0A20E17AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:7f:bc:00:3f:ae:0c:5d:af:b5:69:c2:f5:
93:53:7d:3d:d6:6e:fb:82:92:c8:bd:a6:75:3e:fe:
46:7f:b7:b4:b0:ad:f3:de:a6:81:17:6f:26:92:3e:
69:2f:26:3f:ae:75:92:60:45:68:d2:1a:cf:6e:10:
fc:d5:1b:c3:d0:43:da:1d:ef:81:de:76:16:4a:4e:
52:bf:42:5f:55:a9:df:7d:96:88:27:ff:ff:0b:ea:
02:91:e3:e2:4b:d7:b9:f5:e4:03:4e:f6:98:77:43:
55:5c:b1:78:ab:ab:1c:4a:75:dc:a1:51:a1:c2:29:
59:ca:78:6c:3d:44:b7:3e:5d:14:ea:12:fc:2e:c7:
fc:db:54:40:35:e4:c0:44:cd:35:27:27:44:9c:29:
b6:4d:16:a5:a0:de:d3:1b:62:1c:90:1a:ee:87:ea:
15:ee:0c:65:65:40:a5:02:30:28:56:b8:24:96:d3:
e5:18:51:1d:b7:5b:27:e9:37:39:cb:08:5e:62:c6:
9c:47:ac:b7:b7:b1:12:52:d7:a7:24:21:9a:7d:3c:
98:21:1e:91:e0:f3:9d:70:66:76:cc:90:21:e4:dd:
ce:28:2c:37:48:39:1d:70:38:1c:34:4b:71:92:e4:
9b:1c:72:58:6e:8e:ae:ca:20:9e:20:b4:96:fc:ba:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C3:26:36:0A:99:AB:7E:E4:82:6B:9D:FF:F4:28:E0:A2:0E:17:AD
X509v3 Authority Key Identifier:
keyid:18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/k8MmNgqZq37kgmud__Qo4KIOF60.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.244.140.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:59:93:df:f9:b7:3e:b6:9b:a1:89:be:a5:4f:cf:03:5d:97:
2e:20:33:e9:44:12:36:c0:78:9b:30:74:a9:4d:67:df:d1:8c:
f2:37:65:0d:f2:50:74:cd:8a:6b:b5:91:b6:0b:fe:f9:1f:bd:
da:b0:15:b3:c1:a6:5e:64:c5:de:c1:c6:b8:da:3c:88:77:7e:
34:52:e0:b7:37:5a:94:47:37:b9:0a:f4:e5:ed:da:4e:b0:ce:
a1:c1:4e:14:53:69:4d:cd:d7:eb:93:56:e7:37:ea:67:cb:33:
c3:d9:66:50:ed:ab:79:bd:55:8d:0f:0e:55:5f:81:9b:14:1e:
8d:2d:ce:54:f9:19:36:e8:eb:c7:07:6f:7b:84:2b:65:42:90:
18:f8:d5:78:b6:8e:48:de:b4:e5:df:34:28:d3:65:83:3b:5d:
44:4c:99:dd:fa:2d:08:9c:d1:7a:9b:29:54:26:f2:2d:de:bc:
6c:35:c7:65:28:29:b7:84:25:be:af:8a:5c:3e:d6:23:ab:47:
0a:a3:a0:ae:bd:55:86:65:02:bf:a6:0d:b7:1f:24:bb:ea:e3:
a7:6f:17:3d:1f:ef:5f:3c:eb:4c:79:18:73:75:3b:5b:cb:6c:
e1:e4:bb:b2:c5:38:db:ac:6c:ef:2c:84:51:8c:5e:15:c4:60:
b5:71:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:07 2025 by rpki-client