Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rWpyLNDGop39YFA7jBxaKA-HmGQ.roa
File: rWpyLNDGop39YFA7jBxaKA-HmGQ.roa (raw, json)
Hash identifier: 1YYWnHvwECRzDCLLoybSYjkVxkh2zgVokDSjvjjH5xM=
Subject key identifier: AD:6A:72:2C:D0:C6:A2:9D:FD:60:50:3B:8C:1C:5A:28:0F:87:98:64
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 027B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rWpyLNDGop39YFA7jBxaKA-HmGQ.roa
Signing time: Tue 30 Apr 2024 01:32:16 +0000
ROA not before: Tue 30 Apr 2024 01:32:16 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:ea00::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:32:16 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=AD6A722CD0C6A29DFD60503B8C1C5A280F879864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:f0:e0:be:8b:54:b3:05:94:d0:43:5b:b4:
da:9b:aa:76:1b:16:4e:59:36:48:5e:c8:b1:b3:3d:
7f:fc:3a:1f:1f:d2:c7:c9:e5:98:6a:c3:b8:e6:4c:
e5:10:98:98:60:98:9d:69:c2:72:a8:1b:c2:ee:0d:
c0:e8:e5:4b:54:d8:f3:38:f1:3c:3a:ca:38:d8:e4:
5c:22:02:f9:20:43:f3:98:2b:8b:a3:c5:a2:b6:4c:
fa:0d:f9:04:67:59:c5:cb:4a:4f:b6:c9:a6:ad:58:
fe:fa:96:1d:24:74:49:38:7d:cc:a6:4b:fb:e1:3a:
70:14:f8:67:05:e2:94:bd:40:28:29:b4:5e:66:57:
d5:9d:c6:01:46:71:bb:7b:fd:a5:33:d7:ed:b3:68:
82:ab:6f:f7:d3:40:e9:6b:7b:fe:9a:ce:e7:de:96:
40:11:c5:c7:b5:ef:c1:c6:7b:c8:e9:c7:3e:1c:0a:
4d:02:8b:59:23:be:d8:09:30:b7:cd:f8:67:fa:35:
0c:7c:d3:02:9a:06:18:86:90:15:f1:ab:b4:42:1b:
d9:ea:c1:f2:4b:b0:e1:aa:39:33:9d:89:67:e8:c0:
79:fc:09:d7:2c:d6:4b:56:f0:95:87:c7:af:f9:a7:
99:ce:bb:cd:ad:0d:be:82:57:30:4c:70:39:c5:75:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6A:72:2C:D0:C6:A2:9D:FD:60:50:3B:8C:1C:5A:28:0F:87:98:64
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rWpyLNDGop39YFA7jBxaKA-HmGQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
05:8b:28:61:3f:b2:70:3a:3d:03:27:96:40:9d:dd:0e:1b:21:
ad:0e:47:01:9b:e3:db:de:36:82:85:f8:9e:b5:ce:2a:71:22:
2c:c6:c3:18:21:c0:cd:00:9a:ca:e0:1a:44:45:d8:7c:5c:37:
a9:39:a4:03:70:dc:cc:eb:90:d2:89:f9:f6:9f:7d:c7:fa:c4:
97:00:fd:d4:25:3d:a6:46:a9:51:94:c4:ff:06:12:02:25:ac:
15:c9:75:a8:d5:93:78:5b:0b:c1:c6:6d:90:2f:8c:8b:02:2a:
95:21:f6:7a:71:08:13:fd:80:76:17:f0:db:85:07:65:09:90:
b9:f8:f9:ab:a5:92:f7:c6:87:65:05:d7:3c:23:4a:28:86:b6:
1e:27:72:dd:4f:df:a7:51:bc:bf:d1:ff:e1:95:d6:4d:4b:d3:
52:4f:d9:c5:6b:12:29:f7:e2:b0:92:4c:89:4f:31:1d:2d:de:
ae:81:11:c7:df:63:54:da:4d:2d:b5:85:91:0d:b1:71:06:34:
a8:bd:77:a7:d8:2e:3a:ce:f8:35:c6:ce:bb:fe:9c:ba:f3:47:
68:a9:21:be:bc:51:fd:15:52:e1:bb:82:13:b4:80:9c:76:a4:
74:6c:81:f1:1e:cb:3f:65:ca:71:64:d6:53:ac:87:27:7b:5d:
f7:83:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:29 2025 by rpki-client