Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/hquvBlOF_oINBeY7_5Wxu8ZEebQ.roa
File: hquvBlOF_oINBeY7_5Wxu8ZEebQ.roa (raw, json)
Hash identifier: t3CfgOBG4dtjEBRqwwrghaMBvwiXjANDuGNOEbbbKjY=
Subject key identifier: 86:AB:AF:06:53:85:FE:82:0D:05:E6:3B:FF:95:B1:BB:C6:44:79:B4
Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial: 62
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/hquvBlOF_oINBeY7_5Wxu8ZEebQ.roa
Signing time: Fri 10 May 2024 09:29:11 +0000
ROA not before: Fri 10 May 2024 09:29:11 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 63804
IP address blocks: 101.78.4.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Validity
Not Before: May 10 09:29:11 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=86ABAF065385FE820D05E63BFF95B1BBC64479B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:ce:67:4c:08:f6:34:0a:12:02:12:c8:f3:
fe:54:00:90:4b:1f:52:58:da:12:c6:f6:d6:e4:89:
14:1e:5f:1e:60:c8:23:08:1a:9b:ed:fa:00:bd:ba:
69:98:d8:1f:51:8b:0a:f1:a4:78:74:01:bd:14:f7:
e1:5e:1e:b7:45:b9:47:20:75:ec:d9:41:9d:3e:5c:
c8:99:fe:0a:fc:49:18:09:20:d0:4d:ef:33:d7:b0:
8d:82:1c:04:6a:9c:58:9d:67:12:79:17:83:82:05:
43:f2:7a:18:a1:38:70:47:10:2d:73:67:e0:a5:76:
49:b0:3b:80:97:62:31:12:06:da:0c:dd:af:2c:4b:
70:ff:fe:e9:51:90:f4:d3:de:44:2e:c2:52:8c:b4:
b9:71:fb:63:26:e7:2c:a4:8f:da:0c:34:fb:6e:bc:
ee:ab:c5:93:64:f2:20:44:4c:a3:85:86:a1:99:0f:
95:9d:50:9f:58:8a:7a:79:dd:ec:92:10:ab:d6:71:
40:cd:e2:b6:c8:b8:fc:5f:48:56:c1:2c:3f:e0:bb:
0f:7b:3b:2d:f9:ad:66:01:a0:2b:d4:79:3c:79:ab:
fd:ec:c8:3d:bd:7d:81:d0:f5:f5:b5:5a:3f:b6:b1:
d0:78:5a:e2:f5:e3:b3:91:0f:63:81:15:55:3a:7e:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AB:AF:06:53:85:FE:82:0D:05:E6:3B:FF:95:B1:BB:C6:44:79:B4
X509v3 Authority Key Identifier:
keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/hquvBlOF_oINBeY7_5Wxu8ZEebQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.78.4.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:ef:b5:c4:f0:9c:c6:e5:24:e7:04:67:98:3a:d0:93:38:77:
5f:cc:d0:84:8a:cd:4b:83:d9:22:94:89:9e:35:e7:8e:eb:3b:
fc:5f:19:34:66:18:ed:da:35:cb:81:42:14:a0:b5:c7:e9:88:
89:7a:96:b7:fe:17:cf:c7:82:9d:2c:02:11:80:b7:52:07:bc:
f0:61:fe:bc:5c:ad:c9:f9:83:87:d1:60:5c:20:2f:38:ec:7e:
84:e4:d9:b4:99:79:ed:97:00:b2:3d:4b:66:ac:99:23:6b:a5:
e6:e8:d1:74:87:3f:c1:a1:bb:29:56:ce:da:da:33:47:d4:cc:
34:65:45:a6:e2:80:f9:ac:8c:fa:ec:f2:85:bc:8d:d8:60:c8:
2f:63:45:54:45:8e:bb:fd:16:6a:2c:b3:0a:57:d7:b5:49:c4:
fd:8a:e2:e2:72:4a:d7:1e:83:fa:35:4e:70:b6:da:f8:5e:b9:
b8:82:69:90:78:8c:b5:0c:0e:b8:6f:16:c7:cf:cd:4d:65:90:
76:f1:75:03:e8:ec:8e:c3:c1:47:5d:d1:01:47:99:8a:b0:c4:
74:f1:53:1a:bc:9a:f5:15:00:82:69:7d:92:7f:5a:f3:b3:a0:
02:e1:6e:23:b7:12:7a:14:74:20:84:57:7e:34:38:74:3a:e4:
af:5d:7b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:19:40 2025 by rpki-client