Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/O7SdNPx7V7Eg7MqUu4AHD8KXiuQ.roa
File: O7SdNPx7V7Eg7MqUu4AHD8KXiuQ.roa (raw, json)
Hash identifier: O7kxuhFykYDz2d8JinpJM0CMS3utzVPm9NPMWzQyYAk=
Subject key identifier: 3B:B4:9D:34:FC:7B:57:B1:20:EC:CA:94:BB:80:07:0F:C2:97:8A:E4
Certificate issuer: /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial: 28
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/O7SdNPx7V7Eg7MqUu4AHD8KXiuQ.roa
Signing time: Fri 26 Apr 2024 08:17:51 +0000
ROA not before: Fri 26 Apr 2024 08:17:51 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 59127
IP address blocks: 2401:7ec0:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Validity
Not Before: Apr 26 08:17:51 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=3BB49D34FC7B57B120ECCA94BB80070FC2978AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:55:ff:63:53:1e:5f:18:15:77:c8:41:0b:89:
61:6d:0d:41:26:5b:9d:f6:30:7a:48:da:f4:f5:bc:
b9:6e:1d:61:0c:3a:3c:2f:07:0f:d5:ed:86:69:c1:
44:d5:e0:4c:a5:7b:11:15:48:1c:16:8f:69:ac:a6:
63:2e:e4:be:49:85:4d:ab:55:84:83:2e:96:2e:de:
d2:cc:d5:69:1b:66:04:05:d8:cf:32:4f:1d:7c:0f:
8a:87:9e:72:d0:be:d9:97:eb:15:c6:b8:c8:60:c4:
d2:99:9c:90:59:d1:52:b7:9f:44:e7:dc:35:c0:00:
6f:2d:f4:2f:0e:2c:f1:7f:ea:4b:4a:f3:9f:6f:73:
a4:25:d2:3f:83:25:b5:27:f6:92:2b:9d:64:42:c2:
b9:cb:43:c4:2b:27:ef:69:42:0f:2c:60:19:26:97:
bf:95:6f:3e:d1:22:f4:aa:09:81:e8:90:8c:08:1a:
67:be:a9:87:d1:0a:8c:f5:de:76:dd:cd:8e:d6:56:
5b:41:cc:5d:5e:d9:41:59:85:2a:aa:9d:d5:87:f4:
ae:8e:f3:4b:9b:03:0d:4f:64:5e:7d:dc:46:a8:8a:
9e:44:67:01:3c:ee:d8:3e:b6:15:e2:e0:0b:27:6b:
1f:de:39:cf:2c:2d:c9:07:ca:37:fc:c8:6d:b3:84:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B4:9D:34:FC:7B:57:B1:20:EC:CA:94:BB:80:07:0F:C2:97:8A:E4
X509v3 Authority Key Identifier:
keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/O7SdNPx7V7Eg7MqUu4AHD8KXiuQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7ec0:a000::/36
Signature Algorithm: sha256WithRSAEncryption
a9:53:0f:f8:33:2d:fa:fb:fc:47:03:07:90:7d:94:9a:6d:db:
06:5c:1d:87:75:96:33:cd:d7:b9:83:e5:96:7c:22:9f:6c:b1:
03:66:10:17:55:b2:f1:9f:7d:ac:3a:e7:09:c1:8f:61:57:9c:
67:db:e9:3d:83:e4:ff:a6:91:8c:d1:4a:e5:32:6f:3b:5e:5d:
62:44:6e:38:8d:96:6a:c6:61:42:0a:90:e8:7a:e3:38:55:58:
63:e2:59:5f:38:b4:8b:48:c3:38:b7:cf:5b:cc:bb:65:9f:7d:
72:31:d7:4b:6f:ee:b3:fe:25:08:7d:12:96:6c:ce:2a:ba:09:
95:5e:bf:6d:25:e4:49:11:f0:f2:29:ff:0a:92:11:49:50:bb:
4d:b6:31:8a:6b:d2:c3:14:b3:9c:ed:71:3e:e1:b1:a2:60:e0:
c3:e6:38:b3:17:9e:9b:90:80:33:75:01:55:d0:e1:7c:56:b4:
5b:c1:4a:8e:0f:f4:9f:10:a2:23:fe:10:69:1d:01:80:82:5c:
6c:bb:b0:2f:a1:c8:67:06:1a:81:44:7c:88:a8:f7:6d:f2:4b:
1e:3d:8b:87:0c:25:6a:e0:49:7d:71:e6:46:b5:5c:34:e3:64:
d5:16:e9:3e:34:e8:cb:a7:e1:e5:d1:40:e1:67:2f:43:0d:28:
87:d2:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:38:36 2025 by rpki-client