Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/yf6cE3qy1w9QCDovH_S-hfeEvlg.roa
File: yf6cE3qy1w9QCDovH_S-hfeEvlg.roa (raw, json)
Hash identifier: uVmwIcLI/+WG1M/hbj7Qegorvul2m14jeU/2xpysSZY=
Subject key identifier: C9:FE:9C:13:7A:B2:D7:0F:50:08:3A:2F:1F:F4:BE:85:F7:84:BE:58
Certificate issuer: /CN=381CEBD5718139418E2BA504374D52816234E9EB
Certificate serial: 03
Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/yf6cE3qy1w9QCDovH_S-hfeEvlg.roa
Signing time: Thu 11 Apr 2024 05:35:32 +0000
ROA not before: Thu 11 Apr 2024 05:35:32 +0000
ROA not after: Fri 11 Apr 2025 05:20:24 +0000
asID: 131943
IP address blocks: 133.226.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 28 Mar 2025 05:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB
Validity
Not Before: Apr 11 05:35:32 2024 GMT
Not After : Apr 11 05:20:24 2025 GMT
Subject: CN=C9FE9C137AB2D70F50083A2F1FF4BE85F784BE58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:5a:d6:2c:39:de:e7:7e:1e:37:4b:7f:e5:
74:5c:70:df:95:19:91:bc:ad:f6:4f:7c:62:c6:c2:
66:08:d1:aa:a3:23:63:a7:25:e5:ff:a8:fd:ea:f0:
a9:ba:34:79:5b:c9:20:c0:47:59:25:aa:94:31:a2:
02:bd:1b:92:12:92:75:03:9b:fe:64:aa:2d:ab:d7:
37:75:4b:14:67:7c:ec:20:50:64:23:3d:7f:e1:80:
ee:e7:6a:c8:16:96:f1:c1:9f:05:6e:9a:51:7a:fa:
81:a0:b0:16:91:1f:ac:70:b3:53:17:f3:28:d3:e3:
72:50:59:b8:2c:85:62:4c:f2:0e:4e:41:f8:5c:76:
e2:76:ca:2f:f7:02:ed:c2:6d:fe:c8:5e:33:5e:e6:
cf:ae:d3:d5:5c:cb:86:f0:b0:af:30:03:b8:fe:fc:
22:ed:e5:b9:01:3f:5b:1f:25:3d:8d:ac:b1:89:be:
89:82:e3:3d:6c:34:7f:d6:c3:d0:c7:fe:b1:58:4e:
cc:31:77:a5:0e:86:9b:91:cc:7b:d3:11:8d:00:78:
e0:c0:5c:af:2f:b2:a5:21:c2:0a:56:97:c8:dc:43:
17:9f:73:04:62:64:2c:9f:2c:16:b1:81:eb:05:b8:
55:72:20:39:09:1b:d7:f8:f4:30:56:86:4f:fe:0b:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FE:9C:13:7A:B2:D7:0F:50:08:3A:2F:1F:F4:BE:85:F7:84:BE:58
X509v3 Authority Key Identifier:
keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/yf6cE3qy1w9QCDovH_S-hfeEvlg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.226.132.0/22
Signature Algorithm: sha256WithRSAEncryption
62:ff:da:3a:08:48:0e:f1:ab:7e:56:e6:63:18:a5:33:8e:f5:
fa:d1:c1:4f:81:4e:9a:82:8c:07:5e:e8:cc:f5:32:26:3a:2f:
8f:5a:62:b0:6f:1e:2f:b9:44:53:bd:42:c9:02:71:fe:9a:40:
3d:90:7d:c3:e5:39:78:17:26:84:b5:6d:8c:9d:95:6f:d0:0e:
8a:7b:2e:bf:32:85:49:b3:b0:3a:c1:07:c4:b9:17:1c:c5:39:
a0:c2:82:6e:89:01:ec:ca:03:03:01:71:d6:74:dd:77:85:91:
65:b3:68:83:7e:8f:7b:3f:09:91:5f:b0:77:48:7e:15:38:0b:
79:56:93:64:46:fb:52:e4:b1:04:f0:5a:0f:90:f3:22:43:f0:
30:7f:f1:5c:8b:77:4f:25:3a:2a:6a:53:b9:8e:04:aa:e1:c1:
cd:70:ef:12:b0:86:f1:99:6c:1d:5a:9a:85:73:e6:cd:b4:f8:
ea:63:55:16:da:10:8e:ca:79:c0:ec:7b:30:72:a6:41:e6:44:
16:7b:9a:e9:c9:7d:ff:bf:6a:1a:2a:9f:18:98:22:fc:97:5f:
92:ea:63:98:93:f7:65:51:11:1c:79:4b:b4:b4:64:56:25:86:
8d:11:c7:64:ff:2a:98:91:13:e5:2d:66:f7:d5:89:39:97:3a:
8a:e4:70:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:53 2025 by rpki-client