Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wYm6SLLaKahXJu6qnRhnWgjgJno.roa
File: wYm6SLLaKahXJu6qnRhnWgjgJno.roa (raw, json)
Hash identifier: gzjdJ//5klovYQcAhYhAQGEj53KliqD8gmx/zPlCza4=
Subject key identifier: C1:89:BA:48:B2:DA:29:A8:57:26:EE:AA:9D:18:67:5A:08:E0:26:7A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0809
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wYm6SLLaKahXJu6qnRhnWgjgJno.roa
Signing time: Tue 30 Apr 2024 02:12:23 +0000
ROA not before: Tue 30 Apr 2024 02:12:23 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:12:23 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=C189BA48B2DA29A85726EEAA9D18675A08E0267A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:ee:d2:14:e6:3d:6a:93:0c:e3:1a:8e:fc:
9a:07:30:81:0d:e9:09:c2:f4:df:4e:ce:e1:d3:84:
f8:91:d0:55:ad:6d:c6:ba:dd:cd:be:02:70:6b:01:
9a:1f:89:8f:94:0a:3d:d1:88:62:53:8c:04:19:2e:
6a:3a:67:06:10:71:5a:e1:28:67:82:c1:98:62:41:
66:29:ee:df:08:44:8e:5c:50:8e:69:ac:dc:96:1e:
e8:e3:17:3f:00:56:c8:57:dc:de:b6:c7:24:9c:00:
3f:e6:df:4a:db:b9:85:8b:fd:ba:69:f4:1c:6a:26:
08:98:b1:e9:90:3c:4c:dd:08:10:70:c4:73:60:7f:
45:0b:6a:1e:31:d0:42:bc:96:34:76:36:c3:8d:55:
b8:63:85:57:f8:22:fa:49:c0:ee:54:21:c1:c0:54:
ea:32:95:94:10:49:0a:4e:06:0e:14:a9:15:b5:96:
b7:f3:ba:6a:27:0e:e4:24:45:51:ad:63:ca:c4:f0:
fe:e9:dd:1c:46:2b:87:8a:10:94:50:9f:c5:99:aa:
5a:75:bf:92:c5:83:bc:85:d8:05:4a:40:0b:8c:ea:
02:2b:4c:21:b7:7a:33:bc:2d:59:1a:b5:bb:58:d5:
71:56:c7:dd:bc:73:dc:3c:c2:65:b4:5c:f7:c9:36:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:89:BA:48:B2:DA:29:A8:57:26:EE:AA:9D:18:67:5A:08:E0:26:7A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wYm6SLLaKahXJu6qnRhnWgjgJno.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.96.0/21
Signature Algorithm: sha256WithRSAEncryption
e6:94:af:42:67:ce:54:b4:e1:a9:09:d7:62:fb:74:ec:9e:9c:
83:fb:1a:8c:16:35:64:b3:22:e1:d2:ef:26:f0:93:87:be:ae:
f1:ae:4f:d9:fb:7c:58:f1:e9:48:dd:e8:39:cf:93:a2:1d:1d:
41:97:94:01:4b:66:a1:40:af:91:b6:05:32:67:37:24:b7:e6:
d3:42:32:ba:39:1f:64:93:53:16:63:2d:f4:d8:75:f7:ef:80:
7e:b2:7c:e7:b9:9f:d7:fa:bc:8e:7e:80:a2:80:dc:d0:24:76:
34:d4:cd:9f:b9:17:05:9e:75:a2:09:19:7d:78:33:9d:a7:89:
c5:c6:d0:dc:44:54:34:d7:d4:60:74:18:53:1c:4c:5f:7a:62:
fc:a5:4c:7f:50:c4:b8:26:37:5e:03:b2:fb:f7:bf:5f:1d:42:
32:aa:34:da:67:2c:cc:95:d2:0b:6d:29:d6:f3:85:17:00:29:
c1:70:0b:4c:46:ab:dc:1e:41:77:89:e9:12:7e:66:67:a1:ca:
95:8c:33:21:e3:eb:6e:42:c1:b5:b5:af:29:b5:33:df:d4:9b:
57:c5:c0:ee:f2:9a:f8:20:22:c1:d3:3f:36:40:cf:a7:39:f4:
98:0c:64:8f:c0:6e:44:3f:a9:b7:08:ab:20:d1:e8:d4:e2:df:
72:d0:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:14 2025 by rpki-client