![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/834/nE5Xt7pNPV3zIJvogh8dxcZSVKU.roa
File: nE5Xt7pNPV3zIJvogh8dxcZSVKU.roa (raw, json)
Hash identifier: HQkAhZ1Isl6NDolkR4nSXGMnXzQJlftmjNm4wKxPY0k=
Subject key identifier: 9C:4E:57:B7:BA:4D:3D:5D:F3:20:9B:E8:82:1F:1D:C5:C6:52:54:A5
Certificate issuer: /CN=DFBEE141DC34E893640343A7F312A702EF91A698
Certificate serial: 03
Authority key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/nE5Xt7pNPV3zIJvogh8dxcZSVKU.roa
Signing time: Wed 14 Feb 2024 08:14:57 +0000
ROA not before: Wed 14 Feb 2024 08:14:57 +0000
ROA not after: Thu 13 Feb 2025 03:32:11 +0000
asID: 23630
IP address blocks: 210.156.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 30 Jan 2025 03:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBEE141DC34E893640343A7F312A702EF91A698
Validity
Not Before: Feb 14 08:14:57 2024 GMT
Not After : Feb 13 03:32:11 2025 GMT
Subject: CN=9C4E57B7BA4D3D5DF3209BE8821F1DC5C65254A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:53:9a:06:2b:97:1a:6e:20:4b:d7:a5:0b:
32:9a:20:79:db:7b:13:be:74:49:bf:ba:38:b2:b3:
9f:b7:49:27:22:8a:48:02:c8:cb:27:55:02:53:a8:
d5:ad:21:87:95:75:9d:4c:60:d0:b0:77:59:a6:96:
44:b1:b6:92:eb:c8:53:28:8a:c6:56:70:a7:38:49:
9d:fb:1d:91:36:7c:8c:52:64:8c:5a:28:58:51:c2:
71:e3:7a:43:d4:05:02:d3:f4:e7:36:05:3c:0c:ae:
bd:33:e7:6c:60:4b:4f:d8:9e:3d:b1:cd:13:01:81:
42:4f:29:d8:15:9b:bb:21:41:11:c2:0c:6c:aa:22:
2f:7c:bc:73:49:6b:5c:9a:b2:c9:2f:fb:9f:c0:65:
6f:ea:2f:eb:82:a3:bf:f3:6c:14:42:45:59:26:07:
0a:b8:bb:2d:5d:28:f1:67:02:11:ad:3c:d6:bd:58:
c5:d8:ce:70:c5:f7:69:75:0b:2c:a0:8a:bb:a4:28:
1f:87:0e:e3:6f:e5:b5:b4:7e:41:1c:ae:31:3e:67:
88:82:f5:59:aa:57:c2:17:f9:f4:75:8e:b8:7e:91:
2a:19:f1:6a:e4:a4:8e:fc:3b:fc:2e:5b:65:41:55:
58:40:db:86:8c:aa:4c:62:a7:53:3c:4d:f0:0a:4a:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4E:57:B7:BA:4D:3D:5D:F3:20:9B:E8:82:1F:1D:C5:C6:52:54:A5
X509v3 Authority Key Identifier:
keyid:DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/nE5Xt7pNPV3zIJvogh8dxcZSVKU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.156.112.0/20
Signature Algorithm: sha256WithRSAEncryption
85:19:76:df:6f:46:1a:ed:51:17:ef:55:20:28:3e:aa:67:85:
77:4b:35:a4:9d:df:bc:27:15:bd:23:90:0d:a9:3f:72:92:ad:
e0:dc:4f:fd:4f:05:09:2d:e3:22:53:23:ea:0f:a3:0d:87:be:
b6:ac:9e:71:e8:aa:f9:d3:92:7f:80:19:7f:68:7c:74:41:fb:
d6:c2:ff:82:58:f9:bc:3b:01:f9:b5:1e:eb:26:39:24:74:d1:
26:23:9c:10:7d:19:37:5c:9b:0e:6b:7e:10:8b:76:87:44:b7:
12:4d:4d:94:04:74:3b:2b:64:d0:64:31:83:bb:25:d8:a9:14:
9e:ac:cd:a4:d9:07:cf:d6:00:7e:8a:ae:43:f9:db:da:b6:a7:
e8:04:5c:43:96:af:b5:46:d2:90:5f:c1:cb:99:7d:91:f8:1d:
43:c7:cd:50:20:6e:2a:24:af:79:31:fe:5c:0a:c5:8c:bf:f8:
bb:e6:5e:98:9f:e6:c5:9a:75:33:05:18:e9:5b:43:c4:bd:d8:
59:8b:d2:3f:3d:9a:c3:50:9a:84:a9:56:b9:06:98:98:b0:5b:
ba:fb:89:b7:1e:10:a1:ff:b8:1c:81:c1:32:33:8e:65:d2:cf:
42:e1:7c:be:53:e8:d5:12:b8:31:98:af:75:25:e6:84:63:a0:
9b:5e:a7:1f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJF
RTE0MURDMzRFODkzNjQwMzQzQTdGMzEyQTcwMkVGOTFBNjk4MB4XDTI0MDIxNDA4
MTQ1N1oXDTI1MDIxMzAzMzIxMVowMzExMC8GA1UEAxMoOUM0RTU3QjdCQTREM0Q1
REYzMjA5QkU4ODIxRjFEQzVDNjUyNTRBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALOSU5oGK5cabiBL16ULMpogedt7E750Sb+6OLKzn7dJJyKKSALI
yydVAlOo1a0hh5V1nUxg0LB3WaaWRLG2kuvIUyiKxlZwpzhJnfsdkTZ8jFJkjFoo
WFHCceN6Q9QFAtP05zYFPAyuvTPnbGBLT9iePbHNEwGBQk8p2BWbuyFBEcIMbKoi
L3y8c0lrXJqyyS/7n8Blb+ov64Kjv/NsFEJFWSYHCri7LV0o8WcCEa081r1YxdjO
cMX3aXULLKCKu6QoH4cO42/ltbR+QRyuMT5niIL1WapXwhf59HWOuH6RKhnxauSk
jvw7/C5bZUFVWEDbhoyqTGKnUzxN8ApKi2ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBScTle3uk09XfMgm+iCHx3FxlJUpTAfBgNVHSMEGDAWgBTfvuFB3DTok2QDQ6fz
EqcC75GmmDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODM0LzM3N2hRZHcwNkpOa0EwT244eEtuQXUtUnBwZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM3N2hRZHcwNkpOa0EwT244eEtuQXUt
UnBwZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MzQvbkU1WHQ3cE5QVjN6SUp2b2doOGR4Y1pTVktVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNKccDANBgkqhkiG9w0BAQsFAAOCAQEAhRl2329GGu1RF+9VICg+qmeFd0s1
pJ3fvCcVvSOQDak/cpKt4NxP/U8FCS3jIlMj6g+jDYe+tqyeceiq+dOSf4AZf2h8
dEH71sL/glj5vDsB+bUe6yY5JHTRJiOcEH0ZN1ybDmt+EIt2h0S3Ek1NlAR0Oytk
0GQxg7sl2KkUnqzNpNkHz9YAfoquQ/nb2ran6ARcQ5avtUbSkF/By5l9kfgdQ8fN
UCBuKiSveTH+XArFjL/4u+ZemJ/mxZp1MwUY6VtDxL3YWYvSPz2aw1CahKlWuQaY
mLBbuvuJtx4Qof+4HIHBMjOOZdLPQuF8vlPo1RK4MZivdSXmhGOgm16nHw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:48 2025 by rpki-client