Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/XbbFmmsY9vQhaJdAxMyouDpiDn8.roa
File: XbbFmmsY9vQhaJdAxMyouDpiDn8.roa (raw, json)
Hash identifier: yHZaXnwFAt4kiDW0w8SEps+21Cn/umSEbgexuBLO0EI=
Subject key identifier: 5D:B6:C5:9A:6B:18:F6:F4:21:68:97:40:C4:CC:A8:B8:3A:62:0E:7F
Certificate issuer: /CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Certificate serial: 04
Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/XbbFmmsY9vQhaJdAxMyouDpiDn8.roa
Signing time: Mon 08 Apr 2024 06:28:08 +0000
ROA not before: Mon 08 Apr 2024 06:28:08 +0000
ROA not after: Tue 08 Apr 2025 06:20:08 +0000
asID: 23827
IP address blocks: 115.31.80.0/21 maxlen: 32
Validation: Failed, certificate revoked on Tue 25 Mar 2025 06:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Validity
Not Before: Apr 8 06:28:08 2024 GMT
Not After : Apr 8 06:20:08 2025 GMT
Subject: CN=5DB6C59A6B18F6F421689740C4CCA8B83A620E7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:34:67:c0:8d:9d:08:36:d3:19:ae:c7:63:
47:22:32:a7:bc:ae:5c:11:65:38:09:6d:0d:fb:53:
7c:2c:67:25:5b:4e:97:53:ee:ba:e4:fa:de:58:9c:
e6:53:b8:21:c6:bc:b8:9a:80:03:93:1f:70:bf:38:
e8:7d:4e:89:e5:15:40:32:80:9c:de:a4:cd:df:7b:
a0:57:ea:b4:7e:99:50:a2:40:6f:2f:2d:45:74:3e:
47:15:03:9d:e2:f3:82:ce:58:31:f3:c4:7e:1f:83:
d6:b3:ab:d2:49:ee:e7:5b:24:f9:96:c3:ba:90:74:
f9:ff:ae:79:f7:f6:aa:9b:f2:14:f8:3f:fe:2d:83:
37:d9:8f:94:88:ad:d1:28:00:0b:7e:09:f5:20:aa:
b4:0d:54:23:12:02:6f:33:42:5b:4f:0b:e9:cf:1f:
9e:90:ba:60:01:24:6d:ce:15:82:6e:b5:e3:ef:27:
0d:b0:ba:1f:a1:d8:e8:22:48:ea:1a:1b:2c:d3:58:
90:a0:21:9d:4a:81:62:d6:31:9c:71:5a:5b:32:70:
72:22:24:f8:e4:d6:47:cf:5c:f8:71:4f:bb:61:f9:
07:c8:0f:9b:d9:2f:1e:a9:01:40:4f:66:e7:b0:1a:
cc:2c:87:1f:83:36:d1:de:90:18:07:0e:e7:73:bc:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:C5:9A:6B:18:F6:F4:21:68:97:40:C4:CC:A8:B8:3A:62:0E:7F
X509v3 Authority Key Identifier:
keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/XbbFmmsY9vQhaJdAxMyouDpiDn8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.31.80.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:70:25:fb:80:e3:0a:c9:cc:b5:14:de:e4:66:c2:6d:9e:2e:
68:f3:be:34:51:8a:c9:d8:89:bc:59:48:8a:28:ff:08:5b:7e:
01:9b:aa:d7:cd:01:db:9b:5f:e9:79:bd:a8:1f:94:4f:2b:dc:
04:4e:cf:f9:14:54:2a:f0:dd:7a:b6:26:1e:8a:07:ea:a2:b3:
ac:df:92:b4:b7:0d:2e:25:0d:b0:e9:6a:1f:ab:9c:e0:34:1c:
cd:97:ca:c4:bf:60:75:d0:e5:b7:20:71:0b:40:f6:16:47:34:
a5:dd:d1:64:36:02:ab:74:7a:76:5c:31:68:99:93:b6:43:93:
80:c5:bb:07:31:4f:11:c4:ba:39:01:66:34:92:86:58:47:55:
37:93:83:e4:86:a2:8c:69:84:ea:dd:7d:50:fd:6e:21:75:f6:
41:a0:54:70:2c:9f:cb:cd:b5:fb:a6:67:10:13:79:dc:3f:3c:
bc:e2:41:60:7c:ed:c2:e0:85:20:cc:0c:df:eb:40:59:25:64:
9d:46:79:5b:fb:be:96:b7:59:9e:6a:d6:b5:b2:f5:64:b3:24:
2a:dc:58:e9:55:a2:ec:42:1a:30:b7:0f:5c:df:20:31:db:e6:
5a:58:dc:98:1e:f4:85:55:de:7c:7e:11:c6:53:4c:a9:bd:b4:
f8:8e:13:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:51:19 2025 by rpki-client