![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/lW64uEUO0QgDUXKL6lP5WIzuJb4.roa
File: lW64uEUO0QgDUXKL6lP5WIzuJb4.roa (raw, json)
Hash identifier: bIEAP8guYF+hRrrEiqaLPhvCxozG8jM5Qv/mJnWRr5I=
Subject key identifier: 95:6E:B8:B8:45:0E:D1:08:03:51:72:8B:EA:53:F9:58:8C:EE:25:BE
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: 5A
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/lW64uEUO0QgDUXKL6lP5WIzuJb4.roa
Signing time: Thu 29 Feb 2024 01:31:38 +0000
ROA not before: Thu 29 Feb 2024 01:31:38 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9622
IP address blocks: 124.47.64.0/18 maxlen: 32
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Feb 29 01:31:38 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=956EB8B8450ED1080351728BEA53F9588CEE25BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:4d:21:bd:2d:e2:79:da:ea:bb:49:98:67:
ed:60:4d:df:5c:49:59:35:8a:4c:a1:e8:ef:8e:38:
4f:80:c9:8e:ef:c9:3d:5f:61:fb:f0:a0:9e:f5:c8:
65:62:fe:18:43:d0:b6:83:3b:07:98:08:73:ed:1b:
6d:f0:a0:40:7b:86:7c:70:f5:dd:5f:89:e9:55:22:
27:29:0a:28:85:d0:93:63:a5:67:da:69:ce:3e:5a:
fa:1e:7a:33:c2:2e:8e:76:8d:c0:c7:09:20:e8:ed:
85:2d:58:c4:a7:97:44:5c:d1:4b:2f:a8:2b:d8:1f:
c6:fc:0a:62:73:c4:8d:a3:96:80:cf:97:64:0b:20:
0e:90:70:69:fd:fd:45:9f:60:6a:21:45:b8:b3:fd:
04:de:a6:cf:9f:17:cb:fa:10:37:f9:7a:90:dc:a5:
5d:6b:bf:de:bc:8f:4a:13:29:6f:54:b7:02:5f:62:
f5:1d:c5:c6:15:24:f0:13:96:90:17:67:d8:8f:f1:
14:82:0e:84:12:d8:60:05:69:b5:e5:91:36:b4:30:
b9:b4:43:52:8b:86:e0:79:10:34:b1:b8:87:ce:55:
42:ca:c6:60:e1:5b:e8:06:2c:3b:4c:6b:d2:f2:e6:
58:e8:0b:00:ff:ac:a3:ac:95:ea:94:f3:22:12:0e:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:B8:B8:45:0E:D1:08:03:51:72:8B:EA:53:F9:58:8C:EE:25:BE
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/lW64uEUO0QgDUXKL6lP5WIzuJb4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.47.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:6e:da:37:6e:a2:d2:6f:f5:5e:1e:8f:8a:c7:7e:77:20:5f:
c5:31:90:a5:a7:92:47:dc:12:4f:52:e5:a4:86:d6:ba:c9:ec:
81:3a:d5:6e:12:71:d8:5a:5c:a2:f8:bf:e6:07:24:18:a2:9c:
8c:70:cf:fa:e4:f4:12:97:da:7c:4d:b8:3e:97:5e:86:54:6c:
cb:51:d3:90:86:3b:5a:79:01:e0:12:9e:8b:53:04:79:e2:c1:
0b:2c:ea:a7:05:72:c9:b3:e7:2f:2e:2b:d3:0f:d4:33:07:38:
bc:b3:43:74:da:1a:2f:f6:3e:76:23:40:00:f2:c6:6d:d5:64:
d0:4e:0f:71:5d:94:82:f6:94:5a:63:39:06:cd:dd:2b:e9:43:
44:1d:bf:ef:22:c6:3a:a4:a5:49:df:5c:54:ac:ce:52:7f:db:
64:fd:e2:dd:3f:cb:3c:35:31:a4:ae:e7:d0:66:a2:7f:9d:5c:
35:27:e1:fb:f0:f5:aa:d8:61:2d:13:cd:4b:94:d7:1e:b3:f3:
92:e5:81:e2:c3:31:63:31:31:ed:c8:9a:ac:7e:f4:03:4f:6b:
cf:ba:4b:af:80:3d:9c:5e:a4:b1:5d:95:89:c7:82:7b:2c:49:
6d:88:94:5c:58:2d:ee:e1:7c:5d:37:a7:41:13:83:f3:56:b8:
47:34:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:43 2025 by rpki-client