Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MA68rKNuiN0tX4toMC79WgqMc8g.roa
File: MA68rKNuiN0tX4toMC79WgqMc8g.roa (raw, json)
Hash identifier: 2dGbk0LqtxUxd/wqY1gdOcmG3NApdGk2WjcejmjyNFk=
Subject key identifier: 30:0E:BC:AC:A3:6E:88:DD:2D:5F:8B:68:30:2E:FD:5A:0A:8C:73:C8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 073A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MA68rKNuiN0tX4toMC79WgqMc8g.roa
Signing time: Tue 30 Apr 2024 01:58:44 +0000
ROA not before: Tue 30 Apr 2024 01:58:44 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 110.161.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1850 (0x73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:58:44 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=300EBCACA36E88DD2D5F8B68302EFD5A0A8C73C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:f3:99:02:67:97:ec:d0:82:fa:d2:18:91:
58:5e:c8:8b:90:5d:a1:34:45:2e:59:4e:f1:45:d8:
35:56:bf:79:31:3f:f7:dd:63:f6:59:1b:ec:44:f7:
74:fc:94:85:13:d9:0b:07:cf:fd:44:cb:13:cb:6b:
a5:cb:92:d5:f4:f7:7a:ce:2f:b7:62:eb:09:d7:52:
64:39:61:84:4f:5c:23:19:f4:8d:d7:17:cf:08:49:
8d:09:04:31:b6:46:02:d6:34:c3:1d:04:4e:99:8f:
8d:99:cc:07:86:74:af:ab:5f:d9:0a:8c:53:4a:25:
62:72:af:cb:1c:a0:64:3e:71:38:14:80:bc:95:e5:
e1:70:4d:7d:09:fb:8a:74:cd:8f:e4:f2:bb:9c:76:
3b:bc:47:8d:99:b1:14:00:67:54:a8:9d:10:ca:a9:
f1:79:e2:9d:b8:82:06:af:41:8d:ae:4f:31:5a:1a:
18:fe:dd:29:bf:4b:89:36:01:3b:c5:0d:21:df:08:
fd:56:63:41:33:58:ab:1f:99:1b:48:80:85:40:f6:
5b:64:62:c8:f1:a7:ca:c1:1f:00:cb:a9:a2:a4:fe:
0c:cd:34:18:11:24:cf:53:60:32:fd:3f:c7:d7:b0:
3c:25:3f:ba:b0:53:e5:7f:1b:7d:0c:75:bc:57:ee:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:BC:AC:A3:6E:88:DD:2D:5F:8B:68:30:2E:FD:5A:0A:8C:73:C8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MA68rKNuiN0tX4toMC79WgqMc8g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.161.192.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:6a:4c:40:8e:a0:b8:6a:16:82:90:95:bc:20:3c:1f:d1:9d:
6c:0b:5a:9e:e1:e3:22:e5:e9:2e:8d:fe:e4:52:41:93:9f:5a:
56:47:f1:15:33:5c:91:b1:2f:05:09:7b:e1:87:e1:2d:e5:7c:
c6:8d:be:42:cb:9d:e6:b7:e7:b2:f8:fa:d9:b7:49:b0:6e:e2:
ff:ea:0a:65:99:57:e1:e2:3c:d4:e2:6d:aa:15:0f:7f:2a:44:
d0:24:14:21:30:6b:1b:50:9b:fc:84:62:4e:b9:3d:be:bf:cf:
93:21:38:41:77:ed:4d:ab:b2:86:d1:89:49:17:84:b6:25:0d:
37:bf:a8:0b:bf:16:e0:2a:34:10:cd:9e:aa:a1:4e:c9:f5:d5:
21:ad:0c:2f:62:da:45:fe:e1:5d:01:b5:49:db:7d:b0:3c:14:
db:9c:ce:ed:c6:31:41:66:11:30:3f:18:a3:73:da:46:96:2e:
eb:5a:54:4c:36:75:f3:d3:0a:9c:fe:8d:e0:18:61:33:c9:35:
1c:d9:fb:a7:f3:36:80:4c:82:6b:3f:38:94:8c:e9:d7:7e:39:
94:b0:30:b1:a4:f1:99:78:09:db:5a:ad:c0:5d:36:66:f9:36:
ad:8b:ef:63:9b:88:73:81:93:ad:72:26:ef:79:64:ce:05:ae:
01:c6:e3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:47 2025 by rpki-client