Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AHSlESH8FtdJEjBO1ji-51b15Yg.roa
File: AHSlESH8FtdJEjBO1ji-51b15Yg.roa (raw, json)
Hash identifier: rhn7SC0Zjqz8RR5cjqhoTT+iHHvk/rCKMY1Z+fybIGM=
Subject key identifier: 00:74:A5:11:21:FC:16:D7:49:12:30:4E:D6:38:BE:E7:56:F5:E5:88
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0879
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AHSlESH8FtdJEjBO1ji-51b15Yg.roa
Signing time: Tue 30 Apr 2024 02:18:36 +0000
ROA not before: Tue 30 Apr 2024 02:18:36 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 211.14.64.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2169 (0x879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:18:36 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=0074A51121FC16D74912304ED638BEE756F5E588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:a6:b2:e9:56:2a:99:e9:de:03:d3:83:2f:
f9:9c:a2:c0:51:13:73:0d:0f:47:df:b8:6b:33:91:
fc:78:4c:e1:d0:76:db:b8:24:8e:0d:b9:1c:75:74:
d6:01:93:43:c1:b9:5c:d6:76:d5:38:60:0d:51:be:
03:a6:d9:5b:79:12:50:4b:d0:fa:16:aa:c6:7f:a9:
c0:97:5e:ed:24:08:38:b4:25:49:b5:ad:f9:51:13:
28:88:05:ae:6e:48:53:0e:bf:24:35:e5:49:d0:c6:
44:bf:19:5c:50:f4:6c:fc:f4:df:1d:12:d1:e9:3a:
cc:53:d1:55:18:13:bf:13:0b:26:a3:ee:0b:ed:58:
5e:c9:0c:a1:ed:4d:a3:fd:e7:16:cc:d8:8a:b2:c9:
bc:45:8a:28:a2:c9:d4:cb:d1:47:27:df:b8:d5:87:
79:9c:33:56:33:38:7e:01:3a:10:69:09:0d:c4:c9:
c9:1c:8a:d8:46:6b:55:92:8f:19:d7:ae:25:a0:ff:
18:5e:a5:e1:4c:fb:99:98:19:a4:39:8e:7c:a0:e6:
cf:33:4a:3d:7f:74:f1:06:52:e0:b3:e6:0e:8c:63:
61:04:85:09:f8:50:e1:95:03:ef:64:1d:bb:29:99:
44:98:03:dd:ad:05:8c:1d:c8:7b:e7:60:db:fe:df:
74:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:74:A5:11:21:FC:16:D7:49:12:30:4E:D6:38:BE:E7:56:F5:E5:88
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AHSlESH8FtdJEjBO1ji-51b15Yg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.64.0/21
Signature Algorithm: sha256WithRSAEncryption
57:4d:1a:42:8d:ce:54:b8:df:54:90:b6:d8:16:a7:54:ee:40:
21:db:60:d9:0b:03:c3:21:cd:ec:a5:f6:df:bf:12:ea:7c:8f:
cd:96:e6:0b:3b:fb:41:79:06:af:15:0b:81:6c:cb:09:99:b2:
38:3a:cc:a3:12:e8:e1:42:46:74:0d:4e:bc:47:a3:8d:d0:4b:
c2:45:30:7c:32:1f:90:a7:2c:63:d1:09:a7:79:0a:dc:e4:80:
25:d2:9e:c1:7b:f0:7b:b8:c8:64:e9:df:06:d0:c6:70:9b:ea:
ce:02:09:2f:e8:91:fc:97:e1:5e:d8:93:c0:13:5f:fa:6e:8d:
de:8d:f6:91:c5:ca:ef:b6:6b:d7:9e:37:66:d7:a9:72:de:f1:
5d:63:2a:65:2e:99:66:eb:0e:06:ec:37:b0:60:46:71:38:c2:
dc:38:69:0d:5a:98:e6:38:f3:dd:91:10:07:3f:d5:97:d6:e5:
27:97:5d:e8:a3:c4:70:52:19:3f:a5:6c:44:a8:19:c0:9c:03:
24:59:8d:55:5c:1b:7f:ab:e9:d8:8e:f9:ce:94:1c:c9:96:af:
cf:29:0c:30:9e:12:68:85:79:8f:bb:76:d0:61:cd:b8:64:6c:
1f:94:1d:0f:c8:ae:52:32:c7:60:a6:58:de:e1:80:21:a7:19:
22:11:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:55:21 2025 by rpki-client