Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30428/mRNM7zXNvWnSgLHomQnoKGh5iS4.roa
File: mRNM7zXNvWnSgLHomQnoKGh5iS4.roa (raw, json)
Hash identifier: vH/9MxpBExfrDO7o4/WKz1j6YoDlDPxFz57Tk7D/e2M=
Subject key identifier: 99:13:4C:EF:35:CD:BD:69:D2:80:B1:E8:99:09:E8:28:68:79:89:2E
Certificate issuer: /CN=CBAAB6E902A754AB20FF1256A2AFC679C413373E
Certificate serial: 02
Authority key identifier: CB:AA:B6:E9:02:A7:54:AB:20:FF:12:56:A2:AF:C6:79:C4:13:37:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6q26QKnVKsg_xJWoq_GecQTNz4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/mRNM7zXNvWnSgLHomQnoKGh5iS4.roa
Signing time: Thu 11 Apr 2024 07:37:28 +0000
ROA not before: Thu 11 Apr 2024 07:37:28 +0000
ROA not after: Fri 11 Apr 2025 07:30:15 +0000
asID: 23831
IP address blocks: 2401:2f20::/32 maxlen: 128
Validation: Failed, certificate revoked on Fri 28 Mar 2025 07:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBAAB6E902A754AB20FF1256A2AFC679C413373E
Validity
Not Before: Apr 11 07:37:28 2024 GMT
Not After : Apr 11 07:30:15 2025 GMT
Subject: CN=99134CEF35CDBD69D280B1E89909E8286879892E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:fb:8b:f0:92:63:fd:28:64:ae:a4:b3:84:
7e:d8:91:b5:06:a4:51:83:d6:4d:23:17:0a:5c:e3:
ab:5b:f9:60:b6:3f:fa:e2:8d:c7:41:90:c5:1c:5d:
63:ac:84:3a:83:b4:b9:d2:19:90:f1:53:4b:81:87:
e4:77:ac:54:0c:29:29:df:ed:08:f4:c8:f0:65:0c:
65:ef:aa:e8:aa:06:2a:ba:4a:89:5c:40:1f:d4:0e:
f1:9f:7b:1e:41:17:27:db:13:25:88:b6:45:6e:a9:
84:d5:95:45:3e:b6:39:ff:1e:df:eb:a9:26:1a:0d:
06:bc:46:2f:a9:95:21:63:1d:d6:fe:09:1d:f9:72:
81:21:ed:bd:b7:39:ba:d6:28:cd:fc:80:87:b6:71:
02:d7:81:e7:95:f4:75:1a:9d:bf:d4:df:16:f3:99:
9e:af:e3:d5:50:27:6c:a4:f7:fe:84:bd:75:ce:10:
f1:ca:2b:51:f5:d9:49:b5:6f:2b:87:2b:63:4e:52:
90:a0:92:13:e5:ae:db:39:80:ce:ac:70:b7:3f:a8:
17:08:46:6d:86:4d:46:44:f1:b6:0b:47:08:49:24:
ef:94:87:70:e7:e3:3c:46:a7:d5:0d:5b:08:68:1d:
ac:5f:bd:55:54:7c:6f:43:b6:f2:d4:91:ea:72:a6:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:4C:EF:35:CD:BD:69:D2:80:B1:E8:99:09:E8:28:68:79:89:2E
X509v3 Authority Key Identifier:
keyid:CB:AA:B6:E9:02:A7:54:AB:20:FF:12:56:A2:AF:C6:79:C4:13:37:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/y6q26QKnVKsg_xJWoq_GecQTNz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6q26QKnVKsg_xJWoq_GecQTNz4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/mRNM7zXNvWnSgLHomQnoKGh5iS4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:2f20::/32
Signature Algorithm: sha256WithRSAEncryption
0f:c9:00:0f:6b:6a:b1:3d:9d:fd:67:55:3e:2f:c7:45:9a:25:
38:7d:89:fd:d6:06:43:75:9f:b3:f2:24:32:4a:a5:01:ff:78:
77:59:76:93:87:b8:10:9f:4c:e7:9a:0a:d4:9d:d8:5a:48:5d:
8a:d9:c1:6f:1b:ce:a6:7d:3c:d2:45:33:17:bd:8e:5f:46:f2:
b7:24:26:12:d3:05:c9:62:1b:64:82:1c:59:0a:b6:09:18:8b:
25:cb:21:b9:37:fd:0f:cb:0a:90:13:d9:3f:1e:0a:61:4c:c7:
4a:c9:47:e3:72:a2:a9:15:94:34:3a:b8:74:a1:bd:7d:1b:e4:
fe:3b:a7:2b:5e:c8:cc:3d:3f:72:12:df:4b:06:06:0c:71:60:
db:43:37:26:99:b1:dc:81:2c:cc:04:8c:ea:3e:df:d9:f5:8c:
5a:c6:19:be:5d:78:f0:bf:d3:09:65:61:42:95:2e:1c:c9:4b:
31:6a:1e:e5:b6:1c:bd:b1:ed:80:b1:62:18:77:65:c2:00:af:
e8:cd:11:1b:06:c2:db:76:52:34:94:e5:c2:d3:68:df:f3:40:
09:71:5a:75:76:1a:3b:09:f3:1b:2d:f0:17:9c:d5:ce:b5:96:
0b:44:33:6e:d7:e6:70:e3:24:6b:39:73:9a:b1:18:0e:de:bc:
f5:63:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:35:54 2025 by rpki-client