Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jKzo9N6cyjqFxdhpprQv5ZP39OQ.roa
File: jKzo9N6cyjqFxdhpprQv5ZP39OQ.roa (raw, json)
Hash identifier: NW/1wTBb8i/IZkvA49VaVz1lO63xVKsl0U1ddrk1X7c=
Subject key identifier: 8C:AC:E8:F4:DE:9C:CA:3A:85:C5:D8:69:A6:B4:2F:E5:93:F7:F4:E4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08E0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jKzo9N6cyjqFxdhpprQv5ZP39OQ.roa
Signing time: Tue 30 Apr 2024 02:26:25 +0000
ROA not before: Tue 30 Apr 2024 02:26:25 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.242.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:26:25 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=8CACE8F4DE9CCA3A85C5D869A6B42FE593F7F4E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:93:e4:1c:a9:91:f8:2e:51:cb:e7:68:22:
65:2f:33:11:15:61:9c:b0:c0:a2:2c:1a:49:34:56:
29:18:46:8b:8a:c7:d1:4c:ad:86:c8:55:18:4b:55:
ea:83:ab:23:88:a4:57:fa:a0:b0:55:69:b5:4c:13:
63:43:4d:05:07:9f:3a:4f:5e:35:d9:12:5e:e2:c4:
37:c3:0f:39:e3:5c:94:95:e5:de:4f:54:5a:4d:a1:
61:20:be:5d:ba:06:fc:b5:9b:2f:98:96:1d:c5:aa:
e6:a4:f8:7f:ad:2c:db:60:0d:b9:93:45:ac:ee:dc:
8c:da:75:51:a5:f3:59:12:50:3c:76:e8:37:15:9b:
91:4c:ad:9f:2a:1c:ce:1e:25:6c:74:19:52:d9:80:
9a:de:98:da:76:84:8f:c1:f2:43:dc:5f:13:54:84:
9e:3d:12:47:fb:7c:c5:2a:7b:76:33:50:9d:49:16:
74:47:9b:f8:bb:76:1c:04:a6:1f:d3:9d:25:71:7f:
12:24:1b:eb:a6:94:02:e9:8b:f6:3c:ef:01:92:2c:
5c:eb:e0:ad:7b:d5:56:42:2a:82:6b:70:99:1d:56:
ca:c0:24:e9:c5:5b:7e:ee:ab:55:d3:31:51:65:bc:
1e:5d:6c:45:a2:44:6e:1c:ff:85:34:5d:2e:fd:c1:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:E8:F4:DE:9C:CA:3A:85:C5:D8:69:A6:B4:2F:E5:93:F7:F4:E4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jKzo9N6cyjqFxdhpprQv5ZP39OQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.242.0/23
Signature Algorithm: sha256WithRSAEncryption
49:05:ce:da:c1:bd:27:4f:99:b1:0e:37:80:f7:5c:51:21:95:
6b:1e:9e:31:bd:e5:4e:8a:69:6e:de:96:d1:f7:4c:16:00:52:
34:64:c4:ae:0f:70:77:bc:3d:6b:b4:51:60:f2:5d:74:7d:b5:
c8:2f:4b:69:61:28:6b:09:51:f4:5f:8b:7d:00:10:b5:d0:68:
7e:d4:3a:42:9d:82:c0:cf:7b:ce:6c:7a:30:44:e2:a0:17:eb:
44:6e:7a:c2:bb:2b:9f:b3:77:01:61:94:38:0f:97:1a:cf:96:
a0:b0:3c:1e:10:e6:59:e4:69:2a:42:3c:97:3f:f0:d1:08:5e:
ac:b5:31:c9:92:d9:c9:a2:eb:d9:9a:f4:4d:3a:d9:ff:17:ac:
39:b4:3d:76:88:0f:49:25:94:6d:ef:70:f2:0c:f6:b7:a7:52:
7a:f3:f3:d9:b8:1b:a5:79:e0:08:55:ea:8a:0f:7a:62:45:2e:
07:25:8f:c3:38:6b:20:ac:24:25:08:74:59:a4:40:ad:76:01:
06:92:6f:39:b1:aa:b1:ce:57:fa:a3:3e:77:04:40:3f:ed:60:
4b:2e:73:7e:9e:db:be:2f:44:2b:97:cc:bc:23:c7:72:b4:53:
7b:e1:24:3e:8d:72:30:56:cf:06:e5:5a:df:3c:a4:08:92:58:
d1:5b:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:59 2025 by rpki-client