Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/LI16yVmq91UoOUVhyzV2_aV58oc.roa
File: LI16yVmq91UoOUVhyzV2_aV58oc.roa (raw, json)
Hash identifier: kWYcSwKrKn3wUnQzfo3p0KqRnx9ewXBhYaPmGC9MDi8=
Subject key identifier: 2C:8D:7A:C9:59:AA:F7:55:28:39:45:61:CB:35:76:FD:A5:79:F2:87
Certificate issuer: /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Certificate serial: 04
Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/LI16yVmq91UoOUVhyzV2_aV58oc.roa
Signing time: Tue 16 Apr 2024 04:05:49 +0000
ROA not before: Tue 16 Apr 2024 04:05:49 +0000
ROA not after: Wed 16 Apr 2025 03:56:56 +0000
asID: 10002
IP address blocks: 120.50.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 02 Apr 2025 03:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Validity
Not Before: Apr 16 04:05:49 2024 GMT
Not After : Apr 16 03:56:56 2025 GMT
Subject: CN=2C8D7AC959AAF75528394561CB3576FDA579F287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5e:79:d2:fd:fb:b8:03:25:b1:df:6b:e8:6f:
8d:0d:17:f3:5d:3b:f1:4e:b4:32:dd:1a:cc:f0:2c:
62:36:fc:91:d3:bc:d5:a3:8c:a0:3e:b3:d4:48:1a:
60:e6:01:ed:3e:32:7d:4d:c0:f6:1d:62:3a:39:ba:
8f:50:dd:3c:0f:e7:69:2d:9d:2c:b3:02:25:32:a0:
6e:b7:ce:99:b2:b8:2d:68:7f:9d:5d:18:ca:69:e6:
e1:1b:c5:70:a6:75:14:1c:34:91:d4:b6:73:4d:c7:
17:18:cd:4c:5d:05:9c:21:66:6b:88:ac:78:39:4d:
07:1e:c6:2d:a0:73:5c:2d:89:c6:7d:e4:70:0a:5b:
25:e2:c8:4d:23:25:af:d9:84:2a:77:ea:f4:49:b8:
d1:05:ad:a0:b2:fd:70:a6:22:18:9e:0a:8c:75:57:
b2:2f:18:21:32:ff:ca:ab:ef:d8:70:02:be:85:06:
d2:a7:5c:c4:c4:4d:3d:54:e4:55:d1:2e:06:78:32:
fa:2b:72:9d:77:60:bf:0e:ce:67:07:01:c3:ef:7e:
93:d6:64:1d:be:66:b3:62:57:2f:1f:6a:ae:6f:ff:
db:ad:b4:ef:96:a5:04:fb:6e:d2:eb:d8:de:45:14:
d4:f0:cd:b6:ed:94:f6:05:4e:99:cf:b5:b0:61:25:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8D:7A:C9:59:AA:F7:55:28:39:45:61:CB:35:76:FD:A5:79:F2:87
X509v3 Authority Key Identifier:
keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/LI16yVmq91UoOUVhyzV2_aV58oc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.50.224.0/19
Signature Algorithm: sha256WithRSAEncryption
38:42:1e:9f:c0:6e:e2:2d:1f:ad:95:08:cf:f4:28:2e:77:71:
a0:16:30:45:b8:a1:3a:31:87:2f:89:3e:61:5e:55:57:ee:d6:
14:8b:81:4c:2e:84:e1:5a:5d:a6:c8:f6:e5:7e:5f:1f:38:b3:
65:09:78:c0:62:b8:82:97:be:6a:3e:aa:74:16:dd:70:c9:2f:
33:8c:d5:6d:63:77:44:3b:3c:0f:2b:f7:0e:fe:ff:e3:1e:3d:
76:9b:f1:20:b5:40:d6:a8:91:df:e1:7d:d9:63:8a:03:47:ae:
24:21:cd:c9:25:c3:d2:34:ef:9b:9a:0e:88:f4:9d:3c:66:f1:
e9:7b:4e:de:ef:a8:8a:9b:88:16:20:ce:77:1d:91:99:e9:d3:
3d:7f:9c:e5:65:68:1e:96:37:ea:06:d1:48:5f:b9:38:e6:71:
56:40:62:05:11:b6:0d:b3:9f:81:00:a0:02:59:f9:35:b6:16:
f1:1c:63:0d:6d:66:9e:df:08:80:34:df:ad:48:39:23:32:a4:
62:78:c4:28:c6:31:3f:49:62:26:c3:26:cc:3b:c0:72:97:90:
9d:fd:82:3c:b7:eb:89:96:f5:06:0d:25:79:95:97:2a:38:63:
f3:15:a6:3f:40:1e:79:52:28:d3:44:d2:7c:0d:b1:96:1a:6d:
97:78:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:13:44 2025 by rpki-client