Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/kWXpKfIsuolRWHr-IMBZTgeKd34.roa
File: kWXpKfIsuolRWHr-IMBZTgeKd34.roa (raw, json)
Hash identifier: NiPxv58KlyyiybGfdHigJIIRd315wE3VpW/gT7B700k=
Subject key identifier: 91:65:E9:29:F2:2C:BA:89:51:58:7A:FE:20:C0:59:4E:07:8A:77:7E
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: 49
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/kWXpKfIsuolRWHr-IMBZTgeKd34.roa
Signing time: Sat 31 Aug 2024 01:30:45 +0000
ROA not before: Sat 31 Aug 2024 01:30:45 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 17941
IP address blocks: 101.97.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 01 Oct 2024 07:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Aug 31 01:30:45 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=9165E929F22CBA8951587AFE20C0594E078A777E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:07:0c:35:ab:f7:83:d5:c5:59:ce:cf:09:
f5:24:c5:87:f4:61:42:59:28:ed:ae:f5:ab:d3:10:
db:ff:a8:3f:59:a3:ca:d6:00:2b:8c:0b:60:f6:01:
4a:e0:95:de:66:4e:36:4e:99:12:bc:4c:e5:9b:bf:
4b:84:35:0f:fa:c4:46:8c:43:df:a0:b7:87:83:36:
15:3f:ce:69:64:40:e4:4e:40:ee:ea:1f:74:3a:88:
55:40:e8:03:92:45:87:d9:db:c3:8c:b8:0f:51:5a:
85:bb:41:48:7c:71:ff:41:c5:de:94:24:e5:1e:96:
07:f5:d6:c8:39:88:93:f3:f9:54:71:63:97:5d:80:
8b:dd:ae:46:c6:e0:9e:36:76:51:8e:e6:5b:39:cd:
fd:93:35:b7:bb:9c:cd:5f:52:95:29:a2:19:e5:33:
0a:aa:15:9c:92:52:2e:f0:bc:f3:83:fa:a0:61:eb:
e6:c0:77:e9:19:bb:34:d8:56:2f:92:8e:0a:81:22:
5c:7b:81:38:53:3b:3a:b7:45:33:46:fd:cd:29:c2:
27:bd:a5:5b:f8:01:5f:80:f9:7e:0d:79:ed:8d:51:
74:d4:6d:b9:68:30:a8:b7:0b:c5:f2:e3:04:6f:db:
9c:b4:8d:67:b8:bf:4e:16:77:e7:4d:99:b7:97:59:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:65:E9:29:F2:2C:BA:89:51:58:7A:FE:20:C0:59:4E:07:8A:77:7E
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/kWXpKfIsuolRWHr-IMBZTgeKd34.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.97.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a5:07:76:78:8d:9b:5c:cb:8c:00:d5:d5:65:65:1d:71:17:13:
da:c9:6d:2b:06:b7:7a:6f:e4:2f:56:1f:e4:be:10:3c:3c:c4:
41:05:0d:6f:28:2d:42:00:6d:d8:22:c9:19:85:4f:36:de:cb:
a2:a2:1b:22:5e:7c:99:81:a3:17:23:a5:00:03:1f:2f:c2:8f:
a7:8d:5a:89:26:ae:a7:8c:76:7f:3c:67:fe:8d:08:e0:85:05:
0f:af:f8:8c:f1:59:3d:cb:05:76:b9:3e:36:bc:49:f8:4b:8a:
9a:0a:5f:2f:ba:cc:53:19:c8:f1:46:9c:4b:55:d3:9c:01:87:
d4:dc:19:73:11:c6:4f:fd:a5:e9:61:9e:f4:7b:37:3e:5b:91:
db:2c:60:69:ec:10:72:5f:97:c1:9b:54:0e:1f:34:00:13:3f:
a7:07:b1:f3:86:33:88:cf:37:4d:a1:f9:be:b5:61:01:51:6e:
93:3d:14:81:66:b1:2f:77:1d:c2:b8:53:96:55:51:07:c8:e2:
bb:35:f2:73:5a:65:0e:b3:4e:91:21:70:db:38:14:46:eb:50:
ac:b2:d3:a0:3e:46:1f:ec:6f:78:66:21:7c:61:59:e4:6c:9d:
59:b3:4b:05:f5:85:c2:d9:a0:aa:21:7d:8a:31:58:6d:58:59:
47:d0:7c:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:17:57 2025 by rpki-client