![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Vnks0X54fgwSdih_Eb9ybgQ1mtM.roa
File: Vnks0X54fgwSdih_Eb9ybgQ1mtM.roa (raw, json)
Hash identifier: WeyAjoeFKB7Kh3wyfZ23/pbrroBhV1oO1LvYeZNKln4=
Subject key identifier: 56:79:2C:D1:7E:78:7E:0C:12:76:28:7F:11:BF:72:6E:04:35:9A:D3
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 04D8
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Vnks0X54fgwSdih_Eb9ybgQ1mtM.roa
Signing time: Thu 29 Feb 2024 01:33:19 +0000
ROA not before: Thu 29 Feb 2024 01:33:19 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 10010
IP address blocks: 111.67.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Feb 29 01:33:19 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=56792CD17E787E0C1276287F11BF726E04359AD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:11:d7:b7:7a:22:91:c2:5f:67:57:eb:4f:
9e:6b:c4:64:54:bb:3c:e5:91:5e:c5:90:d4:a5:41:
e7:ea:94:51:ed:06:02:47:20:07:87:4e:49:46:1e:
5c:07:f7:21:9a:d6:8d:55:d3:a8:90:ed:94:9e:a5:
87:92:99:a7:01:ba:cc:29:ab:00:f7:ff:f5:e3:a1:
3b:96:48:b5:54:88:a1:f0:d0:6e:1a:ea:fd:a6:4d:
6a:b5:8d:25:a7:d6:8d:c1:46:af:dd:1d:23:14:f2:
18:28:c6:76:2a:71:58:63:ea:ea:8f:d2:b6:4e:02:
58:48:ed:cf:1c:f7:b4:0b:c4:ca:e3:91:3b:89:db:
a3:82:c3:b5:22:4e:4a:61:df:76:6e:98:e7:ed:b0:
6b:38:92:be:0b:79:33:eb:13:bc:a8:3f:74:a7:b8:
be:4a:19:95:14:7e:b2:40:d7:c2:c8:a6:61:1d:f1:
7a:79:3d:8c:8a:ad:c6:30:80:34:0c:fd:e1:ec:39:
90:63:0d:73:0b:91:1c:a3:c3:59:37:a5:6f:72:5f:
dd:bf:bd:d3:53:f5:19:5c:4c:96:17:89:8a:42:2e:
6f:12:3a:6e:fb:1f:29:e2:bd:12:7a:7d:85:64:2d:
d6:2e:f9:96:d9:04:e3:af:7e:3e:06:06:49:74:5a:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:79:2C:D1:7E:78:7E:0C:12:76:28:7F:11:BF:72:6E:04:35:9A:D3
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Vnks0X54fgwSdih_Eb9ybgQ1mtM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.67.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:41:b7:7b:70:8e:0c:84:bc:4d:f3:d4:fa:b8:97:23:2b:d4:
1b:a3:d5:30:fd:bb:c5:b6:d9:fe:ea:b8:5d:f8:86:36:3b:39:
0a:12:87:45:93:4e:92:7a:04:06:1f:5b:ea:0c:49:9e:c4:9a:
6a:74:b4:8b:8d:ed:0b:55:a6:ea:aa:0b:6f:25:7f:46:cb:09:
10:5d:fd:7f:ff:eb:45:e9:a0:ca:93:a3:5d:c5:64:63:12:fe:
c1:5e:7a:af:ca:bd:ab:3b:9b:9f:0d:07:62:a0:a4:9c:ff:2d:
9c:f3:28:25:5c:19:90:1e:48:3f:23:b4:05:34:a8:10:5e:6a:
86:76:06:50:31:0a:51:c5:e1:31:3d:1e:1e:76:28:fe:cf:1e:
78:3e:8b:37:c6:3d:84:b6:78:28:13:63:2e:60:b8:08:c0:04:
46:7a:ae:69:dd:3e:e3:10:f2:35:28:f3:5a:c7:06:e9:5d:27:
ec:b0:34:38:8f:a5:82:d6:99:25:33:98:ae:ab:5e:51:93:5b:
cc:e7:f4:01:05:ba:3d:66:98:e7:7b:9f:77:5a:fc:c7:0c:f9:
a1:79:6f:2a:fd:10:6f:25:89:1c:34:7d:28:7d:ba:ce:b4:d8:
4e:06:af:42:e1:43:b5:6e:7c:b6:33:3f:d3:f5:8b:34:ac:8f:
73:bc:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:32 2025 by rpki-client