Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vMkDjSGIvjwfgsGlK4NK4X9Y2Ec.roa
File: vMkDjSGIvjwfgsGlK4NK4X9Y2Ec.roa (raw, json)
Hash identifier: f4JzVG+fVY4s+/5i5gYwXcDljrpEXRqsLynMo1hhpLY=
Subject key identifier: BC:C9:03:8D:21:88:BE:3C:1F:82:C1:A5:2B:83:4A:E1:7F:58:D8:47
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 036A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vMkDjSGIvjwfgsGlK4NK4X9Y2Ec.roa
Signing time: Tue 30 Apr 2024 01:56:59 +0000
ROA not before: Tue 30 Apr 2024 01:56:59 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:e00::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874 (0x36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:56:59 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=BCC9038D2188BE3C1F82C1A52B834AE17F58D847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:16:d5:6d:b9:fd:ec:78:48:da:d4:24:3c:
b9:a4:03:dd:b4:4a:95:10:cb:52:8f:1c:35:a5:cf:
bd:ce:7c:89:e6:45:c0:84:f6:b9:71:3b:41:ea:5e:
ad:fc:42:f3:91:68:76:34:27:27:f4:b1:99:15:4f:
da:e4:e4:96:bb:26:50:1a:cf:e9:44:4d:0e:84:ad:
fb:ac:8a:39:41:1d:71:4a:f1:73:ff:34:17:53:61:
ee:75:3a:de:a5:9b:64:f8:1b:0c:95:f6:f0:b8:75:
83:b8:cb:55:57:e0:3f:74:4e:1a:99:92:ae:40:a1:
31:83:5e:0c:7b:94:39:68:1f:58:2e:08:99:75:9f:
3d:0b:a2:cd:48:cc:7f:f5:bc:2f:96:72:69:5a:12:
59:e9:0e:d7:dd:5d:ba:20:5b:2f:5a:76:42:fd:14:
03:c9:fb:4a:24:9c:e6:0f:5d:a5:9b:0f:a7:e0:55:
77:c9:02:3a:43:6e:22:ad:2b:0c:43:bc:c1:3a:31:
ae:5f:35:33:84:7e:e0:6c:34:1a:2d:9c:35:0f:e7:
57:b4:c6:45:a0:2e:a2:d4:77:2a:c7:b1:89:13:c6:
20:32:d6:14:14:dd:44:64:b1:85:4a:dc:dc:6a:a5:
99:5a:95:f7:e3:51:2f:8f:bc:7a:01:84:c7:ed:cc:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C9:03:8D:21:88:BE:3C:1F:82:C1:A5:2B:83:4A:E1:7F:58:D8:47
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vMkDjSGIvjwfgsGlK4NK4X9Y2Ec.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:e00::/40
Signature Algorithm: sha256WithRSAEncryption
82:fb:25:f0:6f:f8:9f:0c:a3:5f:ac:00:97:d0:4c:07:57:ef:
a0:97:c7:65:67:83:86:e7:43:2c:44:71:6c:75:35:e9:77:71:
9e:30:8c:c2:30:00:67:29:81:90:2f:4d:c4:36:20:58:c6:e1:
ac:d5:9c:b9:c2:09:84:17:b1:63:66:3a:3f:37:74:5a:5e:98:
78:38:51:4a:f7:de:61:26:84:1e:81:24:7a:b6:88:c2:29:4e:
1c:1d:e4:3d:13:2b:6b:94:f0:46:14:fc:a5:0b:d2:26:b9:5e:
dc:dc:1d:52:b6:dd:bd:90:db:cd:7a:11:84:3b:52:85:89:9f:
d4:98:f9:49:c9:c1:fb:b2:e9:50:dc:d6:d1:6e:9f:de:58:dd:
9a:eb:f5:bc:02:75:cd:18:c3:a0:31:e4:f0:32:44:cf:d8:14:
c6:ff:d1:95:95:82:c9:e2:0d:d5:58:e5:48:c3:40:81:6d:83:
09:a2:f2:3f:7d:0e:6f:ce:e8:5a:20:13:26:56:7b:b7:8a:23:
c1:bb:da:04:ab:df:3e:8a:b3:40:b1:9c:d5:c7:93:7c:59:85:
7f:22:c3:65:e3:33:47:6b:4a:30:06:db:8a:a3:cf:4a:21:c5:
63:de:97:fa:63:0c:e1:9a:b2:d1:14:4f:94:b7:ad:34:53:f0:
ae:bd:1e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:33 2025 by rpki-client