Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3Dk-0OJuzTroccHzUEocnqywllo.roa
File: 3Dk-0OJuzTroccHzUEocnqywllo.roa (raw, json)
Hash identifier: BqmARVMyLOKEPnyeF9xZMVjMuWxawvQNVCzPaxaqsBI=
Subject key identifier: DC:39:3E:D0:E2:6E:CD:3A:E8:71:C1:F3:50:4A:1C:9E:AC:B0:96:5A
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 029A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3Dk-0OJuzTroccHzUEocnqywllo.roa
Signing time: Tue 30 Apr 2024 01:35:13 +0000
ROA not before: Tue 30 Apr 2024 01:35:13 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:cc00::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:35:13 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=DC393ED0E26ECD3AE871C1F3504A1C9EACB0965A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9d:d0:a6:b4:f9:8f:28:fb:f2:98:9d:3b:a9:
1d:59:26:37:bd:72:06:de:0a:5e:e3:87:21:fc:06:
66:bf:fa:63:d2:71:67:0a:ee:46:7b:0b:bf:4f:ae:
5b:0e:3a:e8:2b:35:5a:c2:a8:da:1d:a5:f4:ca:2d:
0c:94:00:be:78:21:dc:be:c1:0f:7c:da:f3:bd:81:
19:0f:78:3a:41:10:6f:98:06:cd:e4:0b:6b:a1:0f:
3b:39:96:48:9b:b9:47:85:7d:2b:93:b3:b9:27:e8:
d7:32:d1:58:e0:fb:bb:c4:82:b7:02:d4:5b:c8:5e:
60:d2:05:e9:4f:e3:c6:33:86:5a:2a:4a:22:04:85:
89:3b:e4:d8:c3:c8:53:e1:7e:77:e5:79:5c:02:79:
e4:48:12:4b:e7:de:9c:d0:76:ae:59:9b:f3:d4:2b:
b9:fb:fd:fd:ed:8a:7c:ba:d9:f5:2a:ec:1e:a0:be:
1e:c2:a3:26:a3:ce:e1:f8:d2:18:ec:84:13:f6:0a:
b2:40:c5:ff:9c:66:27:3b:c7:d4:7b:ae:8a:e1:52:
0c:e3:b4:64:ee:6a:85:fc:6c:ee:0d:d4:70:f8:89:
7d:4d:bb:e5:2b:91:d8:56:28:61:34:77:14:b9:c3:
03:bf:83:cb:48:94:fe:7d:7e:03:ff:2b:c1:90:ce:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:3E:D0:E2:6E:CD:3A:E8:71:C1:F3:50:4A:1C:9E:AC:B0:96:5A
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3Dk-0OJuzTroccHzUEocnqywllo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:cc00::/40
Signature Algorithm: sha256WithRSAEncryption
a6:1d:6d:d5:c3:3f:b8:be:06:00:4e:2b:87:c0:c1:ba:7f:12:
ec:cd:6b:80:75:64:31:ef:30:4e:f6:51:30:17:49:3c:76:98:
88:14:e3:63:bf:13:d7:ab:f4:ac:1b:3c:97:b8:7e:da:c3:50:
c6:c7:c8:98:58:4b:6e:13:d7:e8:d9:fb:b4:77:67:17:f3:a1:
b0:0f:ac:61:a4:d0:e5:7a:8f:cb:a2:2d:4b:a7:a8:a6:1e:33:
c6:83:a9:b7:19:92:a8:fe:11:85:54:9a:eb:97:39:b9:21:4d:
38:c0:3d:f1:f3:65:05:12:87:92:0d:54:95:48:bd:8f:50:77:
92:25:2f:d4:35:1b:9b:6c:f9:7e:a1:78:fa:69:d5:a8:c0:d7:
44:5a:8f:01:ba:a3:22:bf:31:6b:a6:cb:a2:0c:08:f4:74:7c:
5b:db:c2:ae:83:46:67:4c:ef:ff:93:8f:46:30:55:8a:75:a7:
a9:0a:c4:5f:9c:90:57:72:47:1f:3d:37:a5:fa:0e:db:ed:56:
6f:20:c5:01:00:c6:71:c2:a6:79:ef:f4:a8:ed:b2:a5:85:0d:
c1:fd:58:55:08:5e:1a:d1:a3:5f:a0:da:be:b1:da:71:8e:19:
c6:4a:6e:ba:c7:ee:11:f3:3e:20:ee:47:52:52:0e:6c:3a:4a:
48:6a:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:56 2025 by rpki-client