Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/8okimE5ZLAkLSg-nJe9IoqXWYVo.roa
File: 8okimE5ZLAkLSg-nJe9IoqXWYVo.roa (raw, json)
Hash identifier: JadadPOyCibgn82vDAZLZTr5CXifkupP4l+rw9Z8el0=
Subject key identifier: F2:89:22:98:4E:59:2C:09:0B:4A:0F:A7:25:EF:48:A2:A5:D6:61:5A
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: A1
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/8okimE5ZLAkLSg-nJe9IoqXWYVo.roa
Signing time: Wed 04 Dec 2024 19:31:01 +0000
ROA not before: Wed 04 Dec 2024 19:31:01 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.172.0/27 maxlen: 27
Validation: Failed, certificate revoked on Fri 04 Apr 2025 17:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:31:01 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=F28922984E592C090B4A0FA725EF48A2A5D6615A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3c:ce:aa:cd:75:d4:03:a9:5d:9c:d4:f1:99:
f6:d3:10:c3:1d:f6:c2:94:6b:0f:a3:1d:75:df:16:
05:78:26:cc:1d:3b:1a:9c:e6:b5:23:e6:40:6b:15:
4f:e8:c5:ab:d2:86:13:8d:04:49:32:09:fc:b3:48:
46:e1:be:51:cd:f7:23:2d:f3:5c:a7:fb:d0:ea:77:
d3:18:23:f4:d8:9a:65:e2:18:d9:da:41:7e:f4:58:
4a:0c:45:66:e6:b5:8e:89:08:9d:f4:62:f1:18:be:
b1:c9:cb:bb:66:88:f9:76:d2:a3:b8:5e:0d:1d:7c:
47:2f:c0:89:ef:bc:59:c2:d8:d4:cb:98:c6:9f:f7:
11:71:1a:94:a7:ba:87:11:70:48:de:cc:80:03:ae:
d0:a6:22:9a:5f:e0:eb:99:8b:89:35:8d:2f:8e:95:
3a:69:41:af:22:41:70:55:cc:6b:47:9d:85:dd:f9:
5c:1a:ae:39:f2:a0:3b:21:49:dd:92:83:56:60:c2:
d7:d5:b3:d8:2f:73:61:40:98:db:30:95:6d:3b:ba:
1f:a3:46:05:db:7b:f5:f2:29:78:12:56:fc:be:04:
50:17:32:6a:be:0f:bf:d8:b4:eb:60:0d:f2:e0:d7:
2a:ec:1c:09:41:b9:33:3f:f8:89:98:0c:6a:e7:f5:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:89:22:98:4E:59:2C:09:0B:4A:0F:A7:25:EF:48:A2:A5:D6:61:5A
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/8okimE5ZLAkLSg-nJe9IoqXWYVo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.172.0/27
Signature Algorithm: sha256WithRSAEncryption
4d:35:37:07:3a:97:1c:03:28:1d:81:95:b7:1c:09:fa:27:dc:
e1:ac:c9:96:1e:52:a2:55:e5:c7:6e:33:30:da:ed:91:03:80:
b7:d1:c3:97:2d:46:d7:bf:e3:89:6d:eb:ed:b4:52:fa:07:b2:
36:d0:ab:ec:a6:92:63:52:7d:16:a0:db:81:2b:80:e2:49:b7:
d3:e9:cd:88:9b:5c:19:c4:96:eb:b8:4b:67:62:96:64:ee:aa:
a1:cf:b7:16:ce:d4:ec:bc:71:77:b5:fa:93:27:cd:74:75:9c:
ac:75:53:7c:c6:b8:ee:7a:47:18:43:9c:5c:94:00:aa:bc:c9:
0f:b7:07:24:5e:20:55:53:c7:84:16:64:bf:35:c9:6c:11:2c:
b8:1a:da:71:c5:31:76:84:d8:08:3c:d9:ac:fa:34:97:d7:bd:
a3:59:8d:1e:15:e9:56:7f:6b:69:43:76:57:58:ae:41:d3:75:
2b:cd:9e:7e:27:54:2e:75:b1:0e:b5:1e:75:e6:c4:83:90:9c:
9e:e9:f0:40:6c:e9:b4:0c:19:83:81:8a:6e:cd:f2:ce:96:e5:
95:da:42:65:78:17:77:29:ea:30:84:64:d4:95:c2:29:0d:1a:
27:2d:32:43:65:23:84:66:58:1b:fc:a8:36:4d:16:98:3b:6b:
1c:f3:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:37 2025 by rpki-client