Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CBdgyvisrH53RVcVpZjwbu1q5kg.roa
File: CBdgyvisrH53RVcVpZjwbu1q5kg.roa (raw, json)
Hash identifier: lK0xt5JWzttIT4ThJXXJ4qoxjjRP5jRH6yuXWKhdXtc=
Subject key identifier: 08:17:60:CA:F8:AC:AC:7E:77:45:57:15:A5:98:F0:6E:ED:6A:E6:48
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0317
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CBdgyvisrH53RVcVpZjwbu1q5kg.roa
Signing time: Tue 30 Apr 2024 01:50:49 +0000
ROA not before: Tue 30 Apr 2024 01:50:49 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:3e00::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:50:49 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=081760CAF8ACAC7E77455715A598F06EED6AE648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:ac:c3:ab:9d:3d:1a:8a:96:b0:44:22:dd:
20:55:5c:41:00:df:43:85:df:b7:5c:71:4d:9b:b7:
be:3b:eb:e0:04:20:1a:d3:1b:7e:41:05:c0:56:ac:
fa:46:2c:ba:19:4f:0e:de:29:9c:57:61:2c:49:09:
be:a9:7b:8a:bb:48:4b:9e:e4:9e:53:9c:a8:6b:2f:
19:79:c0:2e:95:f6:7a:3e:19:51:da:c4:ec:ff:95:
28:ce:88:14:f3:3d:9f:98:da:cb:ed:41:dc:c4:73:
51:62:88:fa:d1:af:25:74:04:7f:c6:b3:3c:27:ca:
30:15:3d:ea:11:3a:e1:89:74:49:91:85:d3:04:e9:
f2:0c:db:8a:8c:19:65:57:9d:58:f5:c6:a4:8c:02:
ab:3d:1e:9c:49:6c:30:de:fb:7f:6b:e7:89:a2:25:
0b:86:7a:10:32:8d:04:51:d6:08:93:c6:33:a7:1e:
68:16:76:f3:20:b7:5e:ce:35:07:be:62:ff:0c:ae:
b8:2c:1d:da:63:f6:7d:3c:f6:96:29:83:e4:f6:bc:
10:19:47:6d:24:5e:56:2c:87:99:6e:51:00:22:d9:
7c:dc:87:30:ec:ce:71:b4:21:f0:2a:97:b0:f7:c8:
b1:eb:31:4f:68:85:b9:92:70:03:c2:17:91:2b:57:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:60:CA:F8:AC:AC:7E:77:45:57:15:A5:98:F0:6E:ED:6A:E6:48
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CBdgyvisrH53RVcVpZjwbu1q5kg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:3e00::/40
Signature Algorithm: sha256WithRSAEncryption
9a:c3:61:9d:94:44:a9:60:6f:c2:f9:d9:a7:b6:2e:44:b3:98:
73:cb:87:1b:9e:e4:09:b1:bc:51:1a:72:aa:58:6f:75:3c:3c:
06:79:1a:bc:df:7d:7a:5a:57:90:bf:09:05:38:71:94:d6:8c:
c2:c5:74:40:e1:30:e5:a2:d3:aa:84:13:18:d5:d4:8d:5e:f2:
9a:3f:16:39:75:b8:45:d6:2a:28:50:75:3f:38:5a:58:16:97:
79:02:0e:cf:b5:c7:a1:f0:0f:48:30:dc:6a:02:af:d4:8e:d9:
c4:86:73:83:e4:c9:be:71:36:11:25:c2:43:ef:59:35:4b:30:
22:5d:65:6b:c3:0f:31:75:44:81:07:cb:42:dd:20:03:0b:17:
0f:93:8d:39:5e:9f:ca:e3:95:0a:15:c5:04:fd:b6:8d:56:8d:
7d:52:de:cb:c6:46:f4:b0:62:b0:33:54:0c:d9:eb:8a:58:ad:
54:7f:7c:5c:da:f7:c0:22:31:09:df:9d:ba:fa:3d:9d:19:9f:
80:ae:bd:26:11:a9:6e:3c:00:45:88:62:a1:85:f1:cc:fc:66:
a3:cd:61:ee:d1:e1:fc:99:2f:20:bb:49:01:07:2f:03:00:8f:
62:ae:42:74:58:48:ef:33:46:63:23:29:51:4b:db:93:75:5d:
49:6d:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:42 2025 by rpki-client