Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iU5jt8K4JX1WSopKBCLbnUoipoU.roa
File: iU5jt8K4JX1WSopKBCLbnUoipoU.roa (raw, json)
Hash identifier: j39I6wNQ3NlfIrxHsSbjdXEQZ8S/nYU8+bcZ8vzRBpQ=
Subject key identifier: 89:4E:63:B7:C2:B8:25:7D:56:4A:8A:4A:04:22:DB:9D:4A:22:A6:85
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 082E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iU5jt8K4JX1WSopKBCLbnUoipoU.roa
Signing time: Tue 30 Apr 2024 02:14:25 +0000
ROA not before: Tue 30 Apr 2024 02:14:25 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 110.162.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094 (0x82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:14:25 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=894E63B7C2B8257D564A8A4A0422DB9D4A22A685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:c2:72:bc:04:83:4c:06:40:92:bc:73:48:
23:28:1f:f1:5d:1b:61:8a:1a:c9:f5:98:a6:a9:f8:
a8:a3:00:b9:f1:c9:f1:e1:9e:a6:b6:ee:51:26:ae:
84:eb:b9:93:ca:a3:fe:bb:f7:f3:b4:04:28:97:b4:
b9:c6:89:44:34:a3:25:66:a3:55:c2:a9:b5:5e:39:
68:a9:f7:09:29:a6:ce:08:46:8c:f6:d4:e6:24:1b:
bc:d4:c0:e9:39:92:89:26:17:06:31:f1:81:15:8c:
4f:a3:f2:ab:49:ee:5d:4b:73:85:ce:60:36:85:a4:
32:8f:02:48:13:cd:8e:f6:52:60:c4:8d:8f:de:74:
02:83:6b:6e:b6:c0:5c:91:2d:b3:c7:b8:9e:dd:a7:
6c:95:92:09:35:62:eb:21:d1:39:24:bf:15:77:bc:
f1:18:6c:ce:4d:88:7e:86:6c:7f:01:9d:b9:bf:5b:
2b:26:4a:c8:66:92:54:e5:ec:49:60:7b:83:12:66:
8d:d1:a1:f0:b8:83:f3:64:9e:7d:2b:31:30:19:4a:
ee:11:b6:a9:f6:a1:17:cc:c2:53:0c:44:2f:e5:8f:
aa:68:d3:d2:e1:97:fa:60:11:3f:17:99:08:04:f8:
ab:72:43:79:80:eb:50:ef:59:66:23:9a:2b:f2:66:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4E:63:B7:C2:B8:25:7D:56:4A:8A:4A:04:22:DB:9D:4A:22:A6:85
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iU5jt8K4JX1WSopKBCLbnUoipoU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.162.128.0/17
Signature Algorithm: sha256WithRSAEncryption
37:91:0a:9b:d8:e8:b9:4d:9c:85:7c:0e:0b:e2:c2:c9:0d:c9:
d5:4f:8d:c1:24:7b:e0:82:0c:41:13:65:82:fc:21:53:cb:19:
18:ef:cc:d1:f0:76:77:56:5a:db:1a:7c:04:52:04:1e:74:8a:
98:f4:cb:82:c6:e2:53:33:81:04:ad:d9:ab:af:be:63:c9:ba:
a5:44:c4:bc:59:61:5f:b2:cb:88:5d:ff:ae:c2:60:fa:89:74:
ae:7b:db:79:1a:0c:ff:58:f8:57:6a:2b:5b:df:c2:33:0c:90:
4c:97:9e:0d:fa:c7:c2:ea:27:83:a7:35:49:a7:e3:cc:8f:ac:
0c:f6:0d:54:30:ab:b5:55:85:85:42:e4:a3:a0:69:22:1d:a9:
5d:13:07:eb:10:2d:9d:db:44:d6:ec:0d:a2:0f:8a:5f:f5:ba:
00:ad:d0:5f:4e:dd:59:1d:81:ca:4c:f7:6b:3a:66:0a:65:f5:
f2:7d:ef:9c:5d:5c:52:49:50:44:07:06:32:8e:71:bb:ce:dd:
86:47:64:88:d6:a2:85:17:55:ae:ed:5e:5e:75:1e:b4:87:ae:
e0:0a:d5:aa:46:c2:f1:fe:d2:26:c2:51:f5:a7:23:9d:51:cd:
34:cb:b0:dd:f6:4f:d4:7e:9e:7f:0e:ed:f8:df:b6:9f:82:62:
e7:78:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:44 2025 by rpki-client