Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p6Qh98UNOg0hNnbGkDiB1B-Hhpg.roa
File: p6Qh98UNOg0hNnbGkDiB1B-Hhpg.roa (raw, json)
Hash identifier: kyxLXJRXNV5pNI9R32V61NMj3uXOC3pjslkJry1fM4U=
Subject key identifier: A7:A4:21:F7:C5:0D:3A:0D:21:36:76:C6:90:38:81:D4:1F:87:86:98
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0306
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p6Qh98UNOg0hNnbGkDiB1B-Hhpg.roa
Signing time: Tue 30 Apr 2024 01:48:12 +0000
ROA not before: Tue 30 Apr 2024 01:48:12 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:8700::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:48:12 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=A7A421F7C50D3A0D213676C6903881D41F878698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:fb:f9:63:18:a1:aa:53:a6:fa:10:b3:d2:
e7:b3:b9:6f:74:ed:bd:51:5a:02:a2:35:b1:93:dc:
b9:d4:32:b0:28:cc:d4:7d:6d:95:9b:ba:4a:e8:05:
f0:db:ed:8a:08:9b:ca:f1:85:fb:89:a4:87:25:8b:
57:0f:27:97:a4:48:de:9d:dd:c1:da:5f:a3:2a:b8:
1a:e8:5e:1c:6e:5d:47:69:a9:cb:03:ea:99:0c:5e:
97:7b:54:dc:6f:9b:45:48:f9:b1:ed:0d:a3:58:44:
f2:fd:16:df:da:27:4f:20:b2:39:4c:da:83:a1:e7:
9d:c7:b4:02:fc:8d:cd:29:41:35:ca:1c:61:dd:b6:
14:34:12:42:54:78:16:66:ff:0c:76:83:fc:fa:69:
af:53:2e:41:fb:7a:6b:76:61:5c:e4:44:d8:86:6d:
77:06:f0:9b:a4:1d:42:93:f0:1e:f7:7f:81:da:52:
af:37:9b:f6:d8:92:2e:8f:04:3a:f8:1c:bd:d9:4f:
47:67:36:94:6b:6d:82:35:ed:ca:55:ce:90:4b:39:
a2:c2:3a:f0:b2:b5:4d:56:ec:66:f0:c8:73:11:14:
fe:f4:35:f4:d0:85:e0:d8:f6:c5:c7:99:c6:fe:4c:
02:cc:63:a3:da:70:15:0c:fc:33:ac:09:d3:75:99:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A4:21:F7:C5:0D:3A:0D:21:36:76:C6:90:38:81:D4:1F:87:86:98
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p6Qh98UNOg0hNnbGkDiB1B-Hhpg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:8700::/40
Signature Algorithm: sha256WithRSAEncryption
61:f5:6a:f5:7b:7e:e1:03:2b:83:cf:bd:ef:2e:89:54:c8:e6:
f3:21:5c:54:a9:5c:4f:73:5b:26:7d:f8:92:3c:77:78:8a:13:
45:1e:94:f5:d4:67:ee:60:3c:98:d4:1e:21:28:13:e5:19:50:
31:bf:5d:d3:44:b3:70:df:57:5c:6f:92:68:b3:b5:4b:44:e2:
99:1c:bc:c1:18:01:3f:84:44:1b:00:77:1f:2c:d4:85:f2:44:
37:30:c9:ba:75:a5:80:e9:8e:ac:cf:b9:6c:58:e5:9f:e7:33:
dd:85:54:dd:db:c6:89:3b:39:4b:c5:1a:59:3c:d0:5e:86:b2:
7a:30:de:1e:fe:9b:f2:09:37:29:0b:0b:8a:98:74:2c:46:5a:
21:b9:22:27:6a:d6:d9:c1:07:ac:bc:31:0d:d4:e3:78:98:18:
11:73:de:1b:0f:e1:b9:ed:3b:36:6f:ef:5a:c5:e8:3e:0a:0f:
9d:aa:00:4a:b0:1c:20:37:ff:78:a3:b8:aa:7c:00:2b:fe:d6:
6e:84:09:09:c6:10:7c:c2:0f:f4:7a:66:0f:30:51:ed:e2:ec:
bc:26:ff:69:6d:11:bc:fd:31:11:28:c0:dd:1c:a6:93:a7:c0:
8d:06:5a:62:85:09:7c:3a:e9:f0:19:81:1f:16:07:88:13:05:
c6:6e:93:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:11:29 2025 by rpki-client