Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFFpcqRnixFCKk01qQAT9wwPUqo.roa
File: hFFpcqRnixFCKk01qQAT9wwPUqo.roa (raw, json)
Hash identifier: GeMIZVpsuDAg7TRo24Z7MdoJf6pBjGsNuBP4dpQYIr0=
Subject key identifier: 84:51:69:72:A4:67:8B:11:42:2A:4D:35:A9:00:13:F7:0C:0F:52:AA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06FF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFFpcqRnixFCKk01qQAT9wwPUqo.roa
Signing time: Tue 30 Apr 2024 01:52:50 +0000
ROA not before: Tue 30 Apr 2024 01:52:50 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.138.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:52:50 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=84516972A4678B11422A4D35A90013F70C0F52AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7b:49:70:22:01:fb:84:9a:2d:dc:5e:8d:e4:
2c:ab:98:8e:d7:62:a7:6b:10:0f:53:21:db:99:84:
28:70:79:ea:f0:a1:ac:10:cc:37:da:14:26:30:7f:
9e:73:77:6e:60:fe:f2:0f:0c:27:8d:60:24:bb:d0:
a7:70:95:6d:a0:70:3e:0c:92:95:51:34:df:7c:b2:
e9:62:a1:41:c3:d7:49:12:f7:12:79:1f:dc:4e:e6:
45:9a:d4:a1:53:cb:c7:ab:eb:ee:d0:75:c8:e6:44:
2e:92:f1:d1:5d:33:8e:11:72:f6:82:d9:df:06:6c:
a2:7b:0f:9e:5d:38:af:2c:21:cf:25:ef:df:d1:d5:
0f:7b:67:40:57:2a:07:05:04:18:89:6e:b3:22:56:
d3:68:ed:28:b2:dc:92:a1:12:e2:1e:93:e5:c3:d7:
12:0a:1e:77:83:23:ac:cf:6d:9d:2e:c2:ac:75:d6:
4b:ec:ce:b9:de:56:c7:fd:9d:ec:74:b4:51:3a:14:
a6:3d:00:b7:48:c6:7e:0e:e9:95:19:b4:b1:73:1c:
aa:c5:6c:5e:0c:2e:06:23:bb:58:6e:59:b0:a2:9c:
e2:6c:e2:dc:8f:34:01:07:92:6a:61:7d:ed:e2:18:
7d:f4:49:c6:2a:0d:33:7e:16:c7:06:27:c3:82:36:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:69:72:A4:67:8B:11:42:2A:4D:35:A9:00:13:F7:0C:0F:52:AA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFFpcqRnixFCKk01qQAT9wwPUqo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.138.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:36:e9:ab:d4:11:62:25:05:59:4b:85:cd:67:05:90:d6:cc:
cb:fc:f9:c8:be:1e:92:76:c3:c3:31:b0:3a:e0:3a:1a:9c:9e:
2a:e1:6f:34:2c:77:7d:8b:54:8d:70:d9:a3:46:57:7c:1d:cb:
3b:91:0b:3e:8a:23:57:59:02:01:dd:39:d6:c6:e4:85:81:17:
ba:34:6d:a5:c7:f9:d9:51:88:61:12:e9:88:99:fa:b3:c6:e3:
3d:73:6c:b4:e5:06:1c:96:e5:64:7f:80:bd:18:07:43:4e:41:
fe:74:5b:17:83:b4:a4:df:dd:da:23:a8:a4:6e:4d:04:76:b2:
2e:c1:9a:fb:44:04:dd:85:4b:9e:2b:0d:41:6d:52:44:4b:97:
e9:5f:29:4e:25:6c:ae:c2:e8:3c:c3:38:bd:2f:b9:48:0f:d6:
8f:4a:50:df:b3:d7:bf:12:14:1c:fe:d5:7b:0e:a0:6c:fe:51:
ad:73:07:d9:dc:6e:8a:40:d9:3b:ea:42:a7:2b:21:b7:ad:a7:
fc:0e:cf:2a:54:2f:0f:7b:6d:84:22:08:5c:12:f6:f3:35:2a:
8f:5f:90:ff:d3:aa:50:b9:ef:40:9f:7b:9b:82:a2:7a:61:0a:
66:e7:c1:22:91:02:36:2e:ce:cd:18:c6:10:af:ec:82:09:d5:
65:05:a7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:23 2025 by rpki-client