Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bGD1TumKYhxUvWYTnvF-ojO6CWY.roa
File: bGD1TumKYhxUvWYTnvF-ojO6CWY.roa (raw, json)
Hash identifier: YKZT+uzkgXtMUNQ1nxmLEnErODtqvE9bt7Wv3SAtI6o=
Subject key identifier: 6C:60:F5:4E:E9:8A:62:1C:54:BD:66:13:9E:F1:7E:A2:33:BA:09:66
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 02AC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bGD1TumKYhxUvWYTnvF-ojO6CWY.roa
Signing time: Tue 30 Apr 2024 01:39:25 +0000
ROA not before: Tue 30 Apr 2024 01:39:25 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:2200::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:39:25 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=6C60F54EE98A621C54BD66139EF17EA233BA0966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:98:54:9c:4b:fd:e1:27:d0:56:37:a5:93:
66:66:3e:61:37:ff:bb:bd:03:75:40:d9:3f:23:e6:
c2:14:3a:3e:fc:eb:e9:e5:f2:c5:ef:01:38:3b:cf:
7a:35:d9:e4:08:70:96:4e:ed:b4:db:a5:e1:97:62:
9b:1d:ea:ab:96:e1:bf:83:be:76:4d:c7:17:33:f0:
b0:97:41:d9:85:25:cb:85:c6:5c:73:f2:8b:8f:4d:
07:4e:9c:e7:4a:b3:39:9d:bd:ca:16:18:a9:de:4a:
2a:00:92:53:3f:d0:f5:30:67:ff:96:00:89:3e:15:
6a:3f:7e:32:e7:66:d5:a1:16:81:13:5c:8f:c3:0d:
84:31:98:d1:f6:ba:ec:38:a4:f6:11:d0:63:8c:ee:
7b:5f:cd:82:7a:a8:e8:92:9c:39:ce:eb:71:cc:8f:
62:77:8a:75:6c:53:99:9a:4b:98:96:de:fc:95:8a:
f7:89:78:4e:63:9d:a0:ab:52:76:32:29:45:8a:d7:
b7:3b:32:4e:0a:88:4d:32:1c:83:71:62:e7:f2:a3:
63:13:43:4b:f6:74:12:94:d6:a9:9f:ca:50:de:65:
e0:6e:a0:38:b7:07:50:60:b5:21:43:01:30:50:e9:
5f:0f:a9:61:05:86:fd:1b:ed:66:19:2a:d2:be:1a:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:F5:4E:E9:8A:62:1C:54:BD:66:13:9E:F1:7E:A2:33:BA:09:66
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bGD1TumKYhxUvWYTnvF-ojO6CWY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:2200::/40
Signature Algorithm: sha256WithRSAEncryption
02:9f:60:a3:c0:97:a5:69:35:74:2d:5e:40:42:b5:19:bf:2a:
8c:5f:f5:69:7f:ca:db:38:d9:23:f7:d8:c0:ce:d2:bb:be:71:
47:88:87:f6:54:f7:41:db:18:55:aa:1a:bd:b5:7a:d2:2a:45:
1c:f3:c7:e2:7b:bb:76:e3:eb:cb:e2:92:b2:09:de:39:e0:24:
57:4a:cb:10:61:7d:bf:3c:4e:de:50:f5:8f:83:3e:5f:5b:7f:
36:36:ef:b4:a1:a6:1c:69:4b:c7:14:7d:94:3a:03:27:6b:bb:
59:1c:9e:da:a4:a4:bd:ec:bf:4c:fd:e6:aa:04:3a:dc:76:38:
4c:5e:1b:30:25:87:d6:69:42:c0:32:b5:eb:32:dc:bd:05:06:
cb:73:2c:03:43:ff:34:fe:94:d5:6d:56:54:c6:09:59:3d:7c:
25:b0:a5:2c:c9:5f:7c:cf:08:92:dd:a1:9a:d4:90:a9:7c:65:
3d:35:ab:22:25:95:af:0f:67:1d:e2:0b:35:d0:ab:ad:e1:2d:
58:fb:b6:16:2f:3f:59:7c:0f:62:e1:98:ba:18:6e:5c:f0:b0:
99:f7:43:89:be:3e:6a:98:3d:13:fb:0c:86:8f:c0:72:3e:df:
67:85:4f:4c:0e:1e:11:fd:3d:34:7f:9e:bd:05:f5:d3:f8:2d:
e8:96:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:23 2025 by rpki-client