![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/aNa5-_eNomqDN_tfvKuw6wRNvLA.roa
File: aNa5-_eNomqDN_tfvKuw6wRNvLA.roa (raw, json)
Hash identifier: FKXn40J9BgZNgkD2JOwwaYcNuYqwFftOIPo0sR6LFVk=
Subject key identifier: 68:D6:B9:FB:F7:8D:A2:6A:83:37:FB:5F:BC:AB:B0:EB:04:4D:BC:B0
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 58
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/aNa5-_eNomqDN_tfvKuw6wRNvLA.roa
Signing time: Thu 29 Feb 2024 01:31:11 +0000
ROA not before: Thu 29 Feb 2024 01:31:11 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 37892
IP address blocks: 202.220.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: Feb 29 01:31:11 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=68D6B9FBF78DA26A8337FB5FBCABB0EB044DBCB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:0c:9a:c1:54:39:b7:a1:f0:cd:de:34:d5:
c7:f9:b2:ea:e6:e3:0a:b2:01:67:92:63:b4:47:f4:
39:18:02:04:51:05:15:7a:71:db:de:9a:fd:d5:6f:
8e:d6:f5:6c:80:86:32:74:e3:5d:23:57:82:38:ac:
48:f8:3d:b5:9b:ed:f2:6b:9f:30:4e:ac:bf:b1:f3:
7a:69:dc:db:a5:a5:9b:ff:84:84:93:fc:da:c3:0f:
1c:45:f5:16:82:84:44:7e:d1:78:ba:62:a2:42:f2:
c5:38:07:8e:cf:e6:79:0e:0f:cf:81:21:84:3c:b9:
c1:35:00:cb:d3:28:81:f5:b7:97:5f:e9:f0:d2:91:
fd:1e:41:c9:c6:b8:7d:ef:57:44:43:e8:a9:9b:0a:
ac:2c:a6:82:99:33:b4:20:36:45:e5:29:fe:7e:c9:
6f:16:6e:b7:82:c9:32:3e:bf:6e:de:fa:be:78:9c:
71:83:cc:a8:da:a5:ab:4b:eb:1e:78:ec:f1:ab:eb:
87:d0:c4:93:35:e1:bc:4e:2f:b1:8e:84:16:c9:f1:
36:43:b9:da:4c:bb:be:8f:46:73:bd:52:a3:b4:71:
42:9d:13:b2:b3:44:dc:d1:2f:3f:9d:15:d0:da:5b:
1b:68:a9:61:ac:09:f3:01:4c:a6:13:0b:88:38:cc:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D6:B9:FB:F7:8D:A2:6A:83:37:FB:5F:BC:AB:B0:EB:04:4D:BC:B0
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/aNa5-_eNomqDN_tfvKuw6wRNvLA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.220.6.0/23
Signature Algorithm: sha256WithRSAEncryption
13:b1:83:73:86:d4:33:83:68:79:e1:a9:af:a5:6e:a8:49:4e:
6c:a0:d7:e1:8c:55:b2:84:a5:ed:e1:08:4a:aa:e3:ec:90:65:
4a:83:c9:37:0b:35:dc:61:fe:a9:7a:ea:f8:08:45:ba:6a:20:
c0:f9:6d:3c:e5:5b:c9:7a:e1:8a:f5:5f:b3:cb:35:c6:13:39:
e9:36:3a:74:94:a0:7a:9e:67:5e:0f:64:f0:25:55:5a:6a:25:
66:fc:02:46:5f:89:f6:37:c1:92:ac:cb:ad:ec:11:2c:4c:03:
96:87:6b:cd:b6:d8:8d:52:db:f9:86:14:1d:d0:ab:90:4a:4e:
05:e5:1c:2c:51:fe:4e:49:04:98:a4:65:8a:05:a1:d4:bf:98:
69:ad:5d:d8:e3:50:c0:3a:43:7f:8a:ac:9e:7b:3e:8f:f2:02:
31:10:96:d0:73:7d:45:c4:c0:51:58:12:77:11:45:3a:6d:75:
d2:8c:72:cd:a9:de:d3:59:53:b3:54:7b:a6:95:dd:c8:08:98:
1c:b9:b2:59:39:1a:2c:65:cb:5c:6d:f5:55:2c:1c:67:74:85:
b7:46:11:4a:ea:42:27:f1:a0:1c:6d:ec:1b:25:f1:6d:af:54:
8e:90:a7:95:9a:22:fe:9d:ba:c0:e6:8f:4e:09:a9:32:48:01:
63:58:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:59 2025 by rpki-client