Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/O-VLvaBiSeLrHCqpElrL1mMCsfU.roa
File: O-VLvaBiSeLrHCqpElrL1mMCsfU.roa (raw, json)
Hash identifier: AA6JHyNFMJGKRGHKntjG0oC8O9CkOcNqaPsVKdmul6w=
Subject key identifier: 3B:E5:4B:BD:A0:62:49:E2:EB:1C:2A:A9:12:5A:CB:D6:63:02:B1:F5
Certificate issuer: /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial: 55
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/O-VLvaBiSeLrHCqpElrL1mMCsfU.roa
Signing time: Thu 29 Feb 2024 01:29:38 +0000
ROA not before: Thu 29 Feb 2024 01:29:38 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 7671
IP address blocks: 124.245.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Validity
Not Before: Feb 29 01:29:38 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=3BE54BBDA06249E2EB1C2AA9125ACBD66302B1F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:30:d9:49:ce:38:6e:8b:f9:fc:2e:5d:4c:
8d:52:b2:b6:5a:3f:0a:5f:e0:eb:69:5f:77:72:21:
79:88:c3:da:53:c8:29:a8:6d:07:b0:8d:2e:62:5d:
96:a8:70:b7:50:16:3f:80:ca:b7:7f:46:c0:0b:fc:
56:95:0c:32:8e:3b:9f:ce:c3:e2:45:b8:0e:92:70:
e2:66:2b:0a:f9:9a:94:e0:05:32:19:86:bc:48:0f:
b5:42:26:99:c8:44:4d:4b:02:44:33:91:47:20:d4:
82:39:03:8c:4f:8f:5b:75:81:5e:65:83:c2:3c:aa:
ee:fe:3f:21:ca:2d:8a:7f:26:4b:b9:7d:6f:15:18:
a5:da:4f:e0:6b:6b:99:73:4a:8f:22:46:92:68:12:
81:dd:26:f7:27:61:7b:d9:11:2a:33:92:7f:9e:64:
c2:35:1c:ad:70:6c:d0:fc:03:e9:6c:f1:a8:e8:60:
3b:5e:a9:bd:85:0d:b2:6d:aa:33:40:f5:de:72:14:
8d:1d:a0:e0:19:ba:2d:1f:86:a3:72:83:c9:ae:04:
ff:8f:2e:78:a0:86:89:4c:f1:ab:45:c7:bd:36:17:
47:c7:f1:8c:3b:7d:52:e1:78:a8:40:e5:9f:a3:6e:
34:ff:43:83:62:e7:0a:d1:81:63:af:d1:89:e8:29:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:4B:BD:A0:62:49:E2:EB:1C:2A:A9:12:5A:CB:D6:63:02:B1:F5
X509v3 Authority Key Identifier:
keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/O-VLvaBiSeLrHCqpElrL1mMCsfU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:1e:32:38:01:5b:b0:40:6e:d3:4f:16:9c:55:6f:99:58:f5:
98:ff:c3:c5:88:77:a3:a3:f8:97:6e:bf:b4:03:6c:e8:0e:eb:
98:a1:d1:1a:2c:49:12:2d:91:33:59:83:87:ac:bc:25:9d:8d:
0f:b5:11:25:10:1c:25:a9:8b:cf:d1:db:cc:3a:be:35:eb:84:
2d:5f:01:95:60:56:46:d4:24:13:6c:f7:2d:91:aa:c4:2b:56:
0b:d0:a9:d1:cc:1e:14:e3:79:e4:95:a4:36:12:be:25:28:7b:
78:81:83:50:60:ea:b8:b1:4f:bf:d4:a9:38:bc:cc:6e:80:4f:
95:a6:67:ae:47:92:31:78:1e:01:bb:9e:77:88:b7:f0:4c:b0:
d5:b5:5e:ad:2e:c5:78:32:85:5c:16:7e:4d:2b:3f:b2:1f:10:
15:d0:97:01:bf:c8:c7:fe:20:1c:8b:2e:5e:c7:5b:7a:41:54:
b4:9b:bf:a2:20:55:f0:08:47:e6:31:09:c8:de:35:3f:27:ed:
a3:65:7a:28:b4:13:d7:33:12:20:af:6c:88:70:95:a4:99:64:
7e:85:bb:31:63:49:b5:91:4a:d4:47:09:72:4e:71:cd:6a:95:
39:a7:09:84:3f:34:d2:21:90:78:68:05:e1:4b:d5:f2:24:0f:
92:59:3e:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:05 2025 by rpki-client