Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LyhuKsmhEOFX6iwLcHKW8cZuIpM.roa
File: LyhuKsmhEOFX6iwLcHKW8cZuIpM.roa (raw, json)
Hash identifier: 9dn+r1mPs13Sh4cDhaoS+KirgU8Pyi7HH1hGGHgiuDE=
Subject key identifier: 2F:28:6E:2A:C9:A1:10:E1:57:EA:2C:0B:70:72:96:F1:C6:6E:22:93
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: A3
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LyhuKsmhEOFX6iwLcHKW8cZuIpM.roa
Signing time: Wed 04 Dec 2024 19:31:02 +0000
ROA not before: Wed 04 Dec 2024 19:31:02 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.172.48/28 maxlen: 28
Validation: Failed, certificate revoked on Fri 04 Apr 2025 17:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:31:02 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=2F286E2AC9A110E157EA2C0B707296F1C66E2293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:b7:ff:72:0d:fc:78:64:b0:e9:0d:8b:89:
e0:91:9a:bf:da:b9:ad:62:30:81:fd:1f:7b:df:02:
db:c4:a1:cc:55:bd:02:24:04:6f:46:93:c0:76:7f:
ca:ed:99:97:a0:83:a5:8e:72:b0:d7:85:f5:6c:f5:
67:cb:63:12:94:4e:09:ed:3f:96:38:e0:0c:e9:35:
02:a5:a5:06:2d:6a:a3:e3:9e:5a:a9:0c:43:17:00:
be:dd:65:4b:6d:9b:75:e0:01:e2:dd:3b:89:57:ea:
1e:3f:9e:26:d8:8f:f2:22:fc:73:6c:b2:fb:4b:8b:
02:12:9d:b5:42:f7:4c:ce:54:b7:d1:95:bf:fd:5e:
92:df:df:8a:f2:80:14:14:9f:fd:20:c7:d4:67:d6:
25:82:31:91:c0:2c:0c:3f:49:cb:4f:5d:1e:67:01:
79:b3:b3:ce:4e:00:c8:5e:90:b6:9f:08:80:19:64:
fe:53:eb:15:aa:64:b7:34:a4:32:14:ad:d9:c5:7b:
5d:bb:82:6d:02:14:7b:5e:5a:0a:f1:c1:1d:88:2e:
06:3e:a4:24:f0:16:b5:83:99:25:cd:5a:ff:56:30:
fe:82:72:a9:c9:1f:10:62:8a:f4:2c:bc:13:54:6f:
ab:b9:95:e7:c0:eb:d6:62:f3:9c:ac:d3:9d:f7:5a:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:28:6E:2A:C9:A1:10:E1:57:EA:2C:0B:70:72:96:F1:C6:6E:22:93
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LyhuKsmhEOFX6iwLcHKW8cZuIpM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.172.48/28
Signature Algorithm: sha256WithRSAEncryption
1d:d5:25:51:c2:fe:ec:95:ec:2d:8c:3e:1b:0e:1b:c4:6e:28:
a7:06:53:e4:77:cb:04:ca:6e:58:a9:6a:22:d2:09:af:a6:7e:
a4:18:2e:72:49:3e:a6:3f:a5:36:e8:4f:00:bf:67:12:24:49:
ce:f7:13:85:05:f5:f4:47:18:17:97:c7:a6:01:2e:cb:80:64:
7b:be:5b:ee:74:09:2f:d7:14:4c:dc:5f:35:a0:56:38:6a:c5:
a6:e0:c9:89:ee:5b:32:e4:11:9e:cb:a6:6d:3c:21:79:bf:a4:
a2:c0:c8:0d:a7:d7:98:5a:30:da:6b:e4:5f:7f:94:bf:27:6f:
de:e1:f6:66:6f:2b:55:4e:ca:fb:df:4d:de:58:c6:c6:2d:4a:
1c:32:80:87:59:fe:f3:6c:97:df:48:19:25:ce:5a:1a:e1:db:
ba:bc:99:10:e6:d7:b3:32:26:ff:d3:fe:71:8f:d3:e7:72:93:
95:de:3b:1b:c6:ae:37:2c:c0:c0:84:52:48:45:31:0b:12:56:
b8:de:d5:df:21:b8:47:a4:f7:27:47:a9:16:68:e9:07:18:1d:
c1:24:ee:46:2a:3b:a8:15:48:45:71:64:32:d5:1c:0e:7f:a8:
aa:05:75:73:ea:3a:e2:ab:c1:67:57:bd:40:84:eb:67:55:cd:
15:4a:78:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:15 2025 by rpki-client