Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/exrOThJ7zgVjgQqz_mL9wZYgU6o.roa
File: exrOThJ7zgVjgQqz_mL9wZYgU6o.roa (raw, json)
Hash identifier: Xl4Q+qbg/Y2KZE3c5PKuMniWZpREwbu5KCy4i69OrT8=
Subject key identifier: 7B:1A:CE:4E:12:7B:CE:05:63:81:0A:B3:FE:62:FD:C1:96:20:53:AA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08DE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/exrOThJ7zgVjgQqz_mL9wZYgU6o.roa
Signing time: Tue 30 Apr 2024 02:24:46 +0000
ROA not before: Tue 30 Apr 2024 02:24:46 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:24:46 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=7B1ACE4E127BCE0563810AB3FE62FDC1962053AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:70:9e:65:87:67:3b:fc:c2:38:d3:d0:21:
16:6c:4e:c8:39:aa:77:c4:cf:45:38:39:0f:c1:e8:
25:14:36:53:f5:6b:20:81:6b:a7:f9:f2:99:94:08:
d7:5a:c3:30:d1:c6:39:c1:28:bf:fa:a7:69:f6:90:
bf:c9:00:c8:0b:2e:97:21:ad:f5:fe:6a:6d:a1:1b:
22:c1:6c:ba:f2:42:d9:c9:31:ac:28:48:d2:9c:58:
0c:80:2d:ff:6b:2d:f7:9c:49:3d:74:05:1c:4d:15:
9c:22:5e:56:0d:16:59:b7:90:fc:75:46:80:d8:9a:
97:8b:e8:e4:4a:a6:4f:2c:bd:54:8a:1b:e2:0d:73:
50:e9:af:62:77:25:2f:a5:9a:76:99:3c:af:36:a7:
2e:44:69:4e:0e:30:71:0c:1e:ae:09:c7:ae:e9:4e:
c6:6d:7c:97:a9:ac:cc:4a:b5:33:37:e2:03:9a:b2:
78:d5:60:5f:15:af:42:48:a9:fd:3b:cf:23:b1:60:
69:3f:5f:16:3b:9e:3a:37:8a:ed:50:e8:82:e5:ee:
41:a9:7b:30:35:7d:26:e5:2f:dd:52:49:8c:97:50:
6b:55:d0:2c:af:72:cd:96:51:76:70:39:a8:b6:02:
7a:c2:bd:f7:15:9e:e5:e4:bc:a8:7c:7e:e4:4d:9e:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:CE:4E:12:7B:CE:05:63:81:0A:B3:FE:62:FD:C1:96:20:53:AA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/exrOThJ7zgVjgQqz_mL9wZYgU6o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.40.0/22
Signature Algorithm: sha256WithRSAEncryption
78:ea:12:0f:e4:af:4a:45:b1:bb:33:df:be:2c:c2:0a:4e:59:
fb:da:55:f6:f5:a5:ac:ec:f8:5a:a5:b1:a3:d0:b9:fd:b5:fa:
e0:41:7a:84:de:82:a4:fa:01:82:c5:60:7e:b6:8c:02:8f:8e:
ac:1f:79:ea:0a:75:57:16:68:f1:cf:b8:f2:ed:c3:8a:cb:17:
61:5b:e9:49:cd:6a:33:86:3d:d3:bf:e7:59:ab:44:c6:5a:31:
30:34:f3:a7:38:48:e6:3e:9f:68:03:ea:cd:51:76:80:44:85:
a6:e8:4e:11:9a:5f:67:26:93:dc:ce:2e:bc:c2:de:ef:70:c0:
87:ee:1d:f3:89:99:bc:9b:df:51:89:bf:e4:b3:3c:da:53:b4:
7a:d9:c0:f6:a2:16:92:73:29:57:b1:e8:54:fc:34:fb:af:14:
f5:38:63:65:c2:ee:5b:cc:82:69:2a:ee:98:a5:09:db:b1:99:
21:f0:9d:5b:7c:67:95:03:80:c4:59:aa:05:52:f0:55:12:d4:
d3:f5:4d:a1:1a:61:74:b3:e8:9e:95:99:75:b2:9e:03:71:40:
7f:25:48:ad:81:e8:e0:20:ef:21:2b:82:4f:85:c3:36:cc:ca:
31:5e:eb:08:28:77:2d:13:d3:7a:bc:8c:87:93:76:44:18:b5:
fc:f3:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:02:18 2025 by rpki-client