Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XRBdA-jF0TQr1_bjs3Zhp3wX2vs.roa
File: XRBdA-jF0TQr1_bjs3Zhp3wX2vs.roa (raw, json)
Hash identifier: IvoGH//RMqKXxIkMQ5Md2dZeg7QTP+/URoaX5TqWc1M=
Subject key identifier: 5D:10:5D:03:E8:C5:D1:34:2B:D7:F6:E3:B3:76:61:A7:7C:17:DA:FB
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 035C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XRBdA-jF0TQr1_bjs3Zhp3wX2vs.roa
Signing time: Tue 30 Apr 2024 01:56:54 +0000
ROA not before: Tue 30 Apr 2024 01:56:54 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:3a00::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 860 (0x35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:56:54 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=5D105D03E8C5D1342BD7F6E3B37661A77C17DAFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:26:a3:f6:cd:f0:ed:e7:7d:e2:98:32:c6:
38:66:77:f2:6b:c7:d7:02:34:78:6a:6d:cc:0c:89:
cd:ba:0a:ff:9c:76:52:6d:96:df:1c:73:66:94:60:
a6:89:1b:70:bc:dd:09:e4:d6:2d:51:0f:e2:9f:d6:
ae:9e:d5:0c:87:29:0a:21:20:54:a5:20:da:fb:b7:
69:3f:42:ce:9f:4a:0f:a4:d6:47:03:4c:46:98:2f:
38:55:d9:32:0b:0d:e2:86:fc:22:05:60:b1:43:0e:
0d:7c:b7:ca:a6:9c:0c:31:23:6b:95:15:59:3e:e9:
53:83:fd:f0:e3:99:d0:a5:d2:15:2c:a1:48:6b:d2:
e8:50:9d:0e:10:56:86:3b:f9:40:79:a4:78:51:52:
e6:cd:5e:3c:06:76:74:75:4e:f9:14:c7:ab:48:cb:
c5:27:b9:4d:3a:56:fa:34:17:7b:d3:29:ed:ca:37:
82:72:f8:47:cb:f6:58:5b:e4:94:ea:51:82:be:c3:
78:62:00:57:2f:d4:be:67:9c:f3:aa:4b:9f:33:81:
87:9c:52:c9:43:ba:a3:5c:08:20:53:29:90:24:74:
d6:22:e9:f7:8e:5a:1a:00:3e:9e:4b:e3:70:bd:3d:
79:60:b4:bb:ca:76:b1:7a:cd:d3:aa:52:9c:c3:77:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:10:5D:03:E8:C5:D1:34:2B:D7:F6:E3:B3:76:61:A7:7C:17:DA:FB
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XRBdA-jF0TQr1_bjs3Zhp3wX2vs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:3a00::/40
Signature Algorithm: sha256WithRSAEncryption
b6:88:b7:03:6f:4e:ce:1e:70:0d:a6:cb:e0:26:fb:67:46:d2:
24:68:50:26:62:4a:2c:67:95:0e:2a:d7:88:b6:2c:64:7e:80:
dc:c7:58:80:74:9f:6d:3f:54:b0:17:91:05:e0:f3:90:c5:53:
e4:5d:34:8a:a6:b0:0e:3a:67:7b:09:0b:a9:f3:b2:90:a7:82:
54:8e:06:ca:9c:fd:69:19:56:5b:56:19:f9:08:78:e2:9e:27:
09:97:14:d0:f9:16:f5:c9:a5:7d:d8:30:01:7d:4b:3b:94:5e:
14:13:e2:2f:02:5c:46:97:57:6d:ee:dc:a0:10:b1:72:c6:cb:
0f:e6:cf:a8:ee:b3:db:01:b6:4b:9e:e2:36:d8:2c:9b:01:f6:
46:29:da:65:41:bd:dd:29:9d:15:56:b4:2a:e7:6a:1c:a9:91:
8b:03:47:9d:ad:9b:52:b4:00:92:cb:2d:38:0b:3e:ff:f8:06:
2c:91:e4:0e:13:d9:c8:d4:ae:89:09:72:62:0e:45:d2:3d:b8:
a4:a5:3c:c0:b9:55:d5:46:2a:00:29:23:da:be:98:15:9a:1b:
6f:6e:58:01:a1:6d:0b:d0:43:1b:9f:5a:f7:74:97:62:3d:19:
8d:29:09:3e:f0:3d:c3:67:b1:69:e9:d6:22:0e:8b:1c:ea:5d:
e0:1b:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:14 2025 by rpki-client