Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/cfdEVs_iQERmiMDLa4GruF-2_o8.roa
File: cfdEVs_iQERmiMDLa4GruF-2_o8.roa (raw, json)
Hash identifier: gaHQ9lKRBk/n/2/OsHaCeiuCWoX0HjI6kUVgI4fB3ao=
Subject key identifier: 71:F7:44:56:CF:E2:40:44:66:88:C0:CB:6B:81:AB:B8:5F:B6:FE:8F
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0217
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cfdEVs_iQERmiMDLa4GruF-2_o8.roa
Signing time: Wed 31 Jul 2024 01:29:12 +0000
ROA not before: Wed 31 Jul 2024 01:29:12 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 9824
IP address blocks: 103.55.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Jul 2025 01:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Jul 31 01:29:12 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=71F74456CFE240446688C0CB6B81ABB85FB6FE8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:e7:35:d2:35:00:47:2e:f5:0a:12:fc:38:
9f:13:3d:73:07:61:0e:46:ce:c6:e0:18:d5:51:b3:
30:fb:98:d1:97:be:ee:d5:33:ee:17:1d:39:a3:02:
72:e5:86:d0:b7:05:2b:1e:a6:09:40:78:fe:9c:df:
f4:79:c0:52:d3:f8:3a:12:3a:27:72:a9:d3:d7:9e:
a9:4d:7e:26:24:9f:39:ec:23:98:0d:f5:c8:0c:47:
83:d8:c3:53:72:64:13:96:c0:d6:6c:54:f8:f7:ec:
45:38:43:c9:75:76:aa:ff:5e:f6:5c:d4:5c:ae:31:
43:54:41:bc:02:29:73:43:15:f3:91:50:bd:70:3f:
69:cd:ae:8e:bb:d8:0d:fb:16:db:47:a7:22:00:02:
e3:8d:91:f7:99:60:0c:2b:58:37:83:5d:52:1b:8c:
3b:d0:00:28:83:25:1c:dd:8d:f6:50:a7:89:f5:0b:
39:9f:89:a4:95:0e:44:00:3e:0c:45:58:01:47:ce:
30:0b:bc:3f:2d:40:b7:26:21:83:55:16:6c:e7:43:
92:8d:e9:53:b1:27:94:29:61:ac:62:72:84:08:77:
ab:30:2b:09:4c:1f:5d:c0:d8:3a:54:d2:c4:a0:d5:
5b:9c:28:25:5f:a6:40:b3:86:85:c1:9a:fb:48:1b:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:44:56:CF:E2:40:44:66:88:C0:CB:6B:81:AB:B8:5F:B6:FE:8F
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cfdEVs_iQERmiMDLa4GruF-2_o8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.55.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:51:04:22:48:2a:9f:f3:8c:dd:40:d3:c3:83:3a:f2:35:2d:
69:7d:7f:85:8e:59:b1:b2:9e:8a:e1:24:84:ab:69:14:68:96:
63:0c:76:3f:81:c8:33:df:6e:5b:9d:8e:a3:e8:97:b5:8c:61:
96:73:65:ac:4d:6f:29:ec:1d:5a:9c:cf:ad:9d:8a:4d:b6:0e:
d5:14:88:6d:6a:e5:1b:a5:76:70:0f:79:bf:bb:a1:62:89:a1:
b9:b8:53:62:f0:c8:ad:71:e4:00:d9:82:9b:99:56:b6:b8:9a:
3c:4d:a5:96:17:4e:36:57:4d:00:bc:47:8d:3a:99:1d:ba:b2:
76:07:7f:9f:ce:31:50:83:69:08:c3:bf:e4:15:82:d8:85:99:
61:97:d0:7d:db:66:b2:56:c8:da:17:81:b9:47:09:5b:96:43:
9b:78:f8:d2:9a:08:e6:36:f3:02:59:89:9d:b0:e2:b6:1c:79:
27:5a:3c:f1:e2:c3:94:1a:73:e2:7b:ab:67:d1:06:fe:0d:70:
58:db:22:67:8d:17:6f:32:1c:76:02:47:96:0f:46:fc:79:b7:
2c:76:7f:8d:24:83:19:c2:e9:26:b2:e0:f5:d8:98:a8:4c:ee:
30:02:93:72:0d:f4:48:2e:2f:84:3a:bc:e1:e7:5c:2d:60:6a:
0a:5b:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 00:01:25 2025 by rpki-client