Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/dN3ruVhCcY0X1ZOwkCzGVRaow0A.roa
File: dN3ruVhCcY0X1ZOwkCzGVRaow0A.roa (raw, json)
Hash identifier: jBOch6rnZLPHY32oUvE6jWnHfc0UHbs4caAC5wsGrro=
Subject key identifier: 74:DD:EB:B9:58:42:71:8D:17:D5:93:B0:90:2C:C6:55:16:A8:C3:40
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: A2
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/dN3ruVhCcY0X1ZOwkCzGVRaow0A.roa
Signing time: Wed 04 Dec 2024 19:31:02 +0000
ROA not before: Wed 04 Dec 2024 19:31:02 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.172.32/28 maxlen: 28
Validation: Failed, certificate revoked on Fri 04 Apr 2025 17:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:31:02 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=74DDEBB95842718D17D593B0902CC65516A8C340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9e:36:af:df:1a:19:d3:63:91:bf:77:b3:e4:
a9:cd:a6:c1:02:8a:72:b7:54:6d:a9:6d:db:c8:b1:
87:1c:06:da:63:b9:0a:ed:67:c2:07:99:07:c1:42:
61:9c:f9:c7:4e:9a:0c:b7:da:d7:af:5d:5f:54:1b:
54:be:25:9b:2b:bf:ac:b5:84:1d:83:3b:d5:dd:93:
65:ea:fa:58:ae:ff:97:c8:ff:2f:b1:2a:bd:30:10:
42:2e:d5:39:35:d4:43:dc:fd:d1:ec:5b:e0:f0:85:
c3:4c:b5:b9:66:10:91:7c:70:77:cf:cf:a6:25:02:
28:2b:96:3a:79:78:3c:3d:79:d4:18:c7:0d:34:ad:
f6:a7:9a:08:de:10:a1:98:21:1e:0c:bf:20:fd:3d:
0e:80:a3:14:92:4c:02:a4:36:f1:a1:49:2b:80:98:
8e:ff:c8:af:fc:97:08:5f:22:98:89:23:1b:40:93:
78:12:9c:ce:71:2b:55:c0:2b:01:27:5f:18:c2:37:
7d:f3:86:ec:13:33:be:04:a7:bf:90:1b:9f:75:84:
7b:56:b2:9b:43:f9:87:c7:75:2b:16:fc:ee:5e:9e:
2c:c5:2d:70:5a:2e:3c:d2:eb:49:75:3e:e6:64:ec:
fc:eb:51:fa:00:36:ff:5b:41:2d:0e:9e:6b:ea:69:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DD:EB:B9:58:42:71:8D:17:D5:93:B0:90:2C:C6:55:16:A8:C3:40
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/dN3ruVhCcY0X1ZOwkCzGVRaow0A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.172.32/28
Signature Algorithm: sha256WithRSAEncryption
19:68:eb:ee:10:35:a7:f9:c0:e4:37:03:88:6d:0d:27:e2:a4:
c5:12:41:c5:32:b1:c8:1b:3e:22:14:63:65:b7:ee:56:ca:cc:
bb:9a:41:0f:f4:da:92:44:3b:53:d8:9b:8f:b6:47:09:37:2d:
9a:32:81:1b:48:9d:96:eb:f3:e6:3f:31:66:09:ee:26:2c:1b:
6d:cf:4f:b8:f6:b2:67:c3:4d:41:2f:dd:6c:25:a4:26:7b:94:
86:37:aa:a0:52:8b:12:4d:18:16:a0:79:0a:f5:a8:46:7d:5b:
23:2b:2e:21:98:2f:4b:bb:a5:8c:39:bc:a7:03:10:c6:d8:9e:
42:9b:d6:ae:80:aa:ca:13:b4:a8:97:03:95:d8:7e:6f:72:5a:
28:22:cc:2e:5e:a2:63:0c:1b:a2:98:99:2a:0b:3a:fd:38:58:
9a:57:f6:c7:dd:23:8e:c3:68:5f:0c:0e:62:b0:52:c8:70:e0:
5f:4f:0f:ea:75:2f:57:81:a9:5e:b8:e1:8f:3a:f3:aa:9b:33:
c4:1d:d6:7e:e2:37:d0:3a:02:1b:4f:dd:ca:76:f5:b1:f9:93:
c3:ba:01:ac:67:d5:85:b5:3c:ce:ae:48:6c:2f:2f:90:37:70:
a9:8d:58:f8:e6:f1:ca:d5:af:45:32:a7:7e:ec:b9:01:46:67:
c0:1e:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:16 2025 by rpki-client