Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/HEHKfoP_JlD3UaREsfZu8pjoEM0.roa
File: HEHKfoP_JlD3UaREsfZu8pjoEM0.roa (raw, json)
Hash identifier: PuLBidn+Yx0rdtyySSmFbEIFvHaS8BPxK1Gnaz2piLg=
Subject key identifier: 1C:41:CA:7E:83:FF:26:50:F7:51:A4:44:B1:F6:6E:F2:98:E8:10:CD
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 97
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/HEHKfoP_JlD3UaREsfZu8pjoEM0.roa
Signing time: Tue 28 Jan 2025 00:14:38 +0000
ROA not before: Tue 28 Jan 2025 00:14:38 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 2514
IP address blocks: 160.248.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 06:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 28 00:14:38 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=1C41CA7E83FF2650F751A444B1F66EF298E810CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:09:9b:64:22:d7:fb:bd:23:8e:b1:fb:9f:
e3:95:20:1d:c1:76:c0:01:78:e5:08:22:89:6f:45:
34:42:61:a6:db:8a:0b:ca:f8:94:d5:aa:42:60:22:
4c:b0:5e:38:93:8c:ec:d9:9b:f1:e5:c5:31:df:f9:
36:65:dd:a2:7c:17:33:ba:90:be:31:85:46:cc:a3:
83:9f:e8:0e:38:e1:43:32:cb:14:f8:aa:b8:9b:6a:
cb:b7:da:70:82:df:77:a9:db:98:5f:d8:9f:24:e8:
9a:7d:f5:b5:4b:2a:7c:20:49:47:cf:12:4b:d9:c4:
c8:ea:a7:5b:a4:31:be:a1:e6:95:7c:08:09:cc:f8:
a7:95:8c:fe:02:1d:5b:65:05:d8:3a:2b:b5:53:8e:
11:24:9a:91:1e:7a:b2:52:c9:de:b3:50:02:8f:48:
65:3d:34:6d:4a:5a:07:7d:49:d1:ca:a8:a1:40:de:
05:49:77:9b:83:bd:d3:89:c8:f9:ba:bb:68:60:9d:
09:b9:6a:0f:3c:94:49:37:18:77:f7:03:66:f4:58:
fc:6a:5b:78:dd:7c:53:b6:da:c1:11:2c:5d:95:43:
6d:d8:42:42:b5:c6:c6:68:9c:23:df:08:b3:a8:93:
7b:fa:c8:56:12:11:f3:63:cc:58:ae:b0:c4:a6:d8:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:41:CA:7E:83:FF:26:50:F7:51:A4:44:B1:F6:6E:F2:98:E8:10:CD
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/HEHKfoP_JlD3UaREsfZu8pjoEM0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e0:f7:a0:90:c8:41:cb:92:f4:ab:36:58:6b:92:35:f8:03:
7e:01:09:9c:ab:d1:ed:54:e0:db:cc:df:05:c7:8b:a8:38:13:
d4:82:64:45:6c:97:a8:43:3c:21:c0:26:9d:7d:5f:a1:1a:d5:
be:2e:0a:93:a3:2e:f8:75:69:c6:47:8e:b3:a7:be:3d:f8:68:
b7:29:a4:ca:1b:30:1a:0f:20:c0:54:d4:5c:41:ec:79:34:e4:
c2:9b:ab:11:d3:4c:70:72:d2:12:b6:25:02:5e:fc:41:91:8c:
43:bb:bb:62:13:db:b7:d9:0a:cc:d7:ce:9f:a9:6d:af:0f:82:
a2:ed:61:24:38:d9:95:fe:56:0c:ce:a8:6b:cc:1f:aa:a7:e8:
3a:ff:16:a5:f2:6a:5c:32:68:60:f9:66:5f:c7:ee:03:ce:94:
3e:ce:09:fe:6e:fa:e7:d6:35:41:cf:33:99:b2:3a:2e:3c:43:
51:0d:9d:08:df:3b:21:95:e1:aa:1a:31:f4:74:ae:8b:e9:30:
69:1d:2e:97:fc:26:b3:f8:7d:d9:79:b6:d3:83:f3:42:17:1a:
bb:c5:96:24:ba:df:58:df:da:67:8a:4a:13:13:74:e5:4a:cf:
d2:4e:0b:fc:46:7f:04:fd:f0:d6:88:e3:a4:be:a6:63:e4:80:
d7:df:7e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:38 2025 by rpki-client