Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kc0utLeowUcnBnhV-r_fkTc29kI.roa
File: kc0utLeowUcnBnhV-r_fkTc29kI.roa (raw, json)
Hash identifier: 4DbG6YzfIgQXQruW42wCwRvJU8X3JebpGcMx5MASU/0=
Subject key identifier: 91:CD:2E:B4:B7:A8:C1:47:27:06:78:55:FA:BF:DF:91:37:36:F6:42
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0887
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kc0utLeowUcnBnhV-r_fkTc29kI.roa
Signing time: Tue 30 Apr 2024 02:20:31 +0000
ROA not before: Tue 30 Apr 2024 02:20:31 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:20:31 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=91CD2EB4B7A8C14727067855FABFDF913736F642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:ab:00:8a:d6:64:c6:48:27:67:ed:2f:0a:
ca:6e:5d:c6:01:48:a5:a4:04:cc:30:0b:e5:32:05:
9e:00:d9:af:e2:cd:1e:38:a4:5c:c7:8a:8c:80:e4:
67:ac:98:d2:3b:27:9f:a1:83:e8:0f:93:57:4c:f0:
ab:2f:5c:63:dc:1c:b0:a0:54:68:4e:3e:9b:23:f8:
a1:92:68:63:e9:c8:53:7c:8b:8f:fd:b9:27:64:31:
88:50:e0:13:f5:6b:15:ea:0d:55:ae:ee:02:4e:a6:
e6:18:7d:37:8b:fe:b5:c2:35:11:d1:79:4a:a4:ef:
71:f0:be:99:10:72:8c:c2:2a:c3:4f:82:1c:ad:70:
ee:ef:a7:5b:43:26:0d:ef:9d:90:97:0e:9b:be:48:
a3:80:f5:28:d1:b6:bd:c9:6a:dc:6b:c3:99:fc:00:
66:d2:31:0a:94:31:f1:e2:51:03:96:4a:a9:00:7a:
8a:c5:ed:80:7b:ef:13:7d:03:76:39:06:aa:92:bd:
42:2b:e3:ab:0d:84:72:79:71:ee:82:bc:e2:58:80:
0d:ef:30:47:43:27:b2:de:8b:b0:ff:56:17:57:02:
61:ca:87:3b:a3:4f:58:62:d5:41:27:db:7c:d1:da:
5f:10:f0:48:3c:3e:7a:eb:21:02:59:a7:5a:fc:65:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CD:2E:B4:B7:A8:C1:47:27:06:78:55:FA:BF:DF:91:37:36:F6:42
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kc0utLeowUcnBnhV-r_fkTc29kI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.25.0/24
Signature Algorithm: sha256WithRSAEncryption
62:df:bf:ac:dc:9e:8b:40:78:09:27:ce:ee:9e:e4:88:f5:e2:
b0:50:d3:66:3d:ec:60:50:cd:77:3e:70:cc:12:0e:5b:37:68:
b9:50:40:0a:c0:6e:af:ec:e0:de:2b:cd:5c:c3:ff:de:1f:26:
f1:8e:38:29:b5:27:e9:0e:35:f0:21:2e:01:5a:7a:b0:80:28:
9a:80:5f:7c:93:ca:dc:be:e1:d1:01:52:0c:bf:13:a8:78:c4:
48:05:07:b5:36:c5:c3:1e:aa:82:f6:63:bb:71:a1:d2:fd:91:
b1:f2:42:fe:cd:d7:af:44:de:d5:54:49:6e:7f:4a:11:c9:0f:
d2:de:4e:93:69:9e:8d:e6:ef:76:53:cf:fd:d2:79:e4:38:2c:
2e:a7:ad:cd:54:ea:a0:ab:74:62:39:e9:40:7a:c9:fa:8e:b9:
0e:83:c1:1e:75:26:99:61:f3:ec:4d:06:0f:01:60:2d:92:d0:
82:2b:ab:12:8b:20:b4:e5:18:09:ca:a7:ef:b5:26:09:44:1b:
07:f2:bb:d4:10:2a:bc:d6:f6:d9:a0:82:56:db:8b:4f:70:26:
be:8f:9a:f5:52:a9:c6:22:90:e6:45:d3:df:02:ab:90:88:1e:
1e:d7:3a:00:de:b7:5b:7a:8b:bb:f1:23:c3:0f:9d:b2:d7:80:
9a:4b:1b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:42 2025 by rpki-client