Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Wqe3KUCnAXVnSGCpTInzve5lm5g.roa
File: Wqe3KUCnAXVnSGCpTInzve5lm5g.roa (raw, json)
Hash identifier: U/ZVbF+w1vFhv9tjNIWMkmaQ+FVG7KmWQXEQHQlNWPg=
Subject key identifier: 5A:A7:B7:29:40:A7:01:75:67:48:60:A9:4C:89:F3:BD:EE:65:9B:98
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 01A6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Wqe3KUCnAXVnSGCpTInzve5lm5g.roa
Signing time: Sun 31 Mar 2024 01:29:02 +0000
ROA not before: Sun 31 Mar 2024 01:29:02 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 4713
IP address blocks: 60.32.0.0/12 maxlen: 12
Validation: Failed, certificate revoked on Sat 01 Mar 2025 01:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 31 01:29:02 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=5AA7B72940A70175674860A94C89F3BDEE659B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:49:70:5c:91:2e:76:56:df:8f:03:35:dd:
d3:49:80:72:6e:78:61:fe:f3:8b:86:26:3e:ba:6a:
26:c3:a8:7d:de:36:85:67:36:80:0c:78:39:4b:7a:
23:99:2e:62:3a:4d:9c:82:de:49:35:4c:f8:8c:f2:
71:cf:74:e5:c6:96:58:1a:1d:e7:ba:45:17:fd:89:
95:5d:9d:25:28:e2:e2:21:8a:ab:9a:62:e5:b8:67:
cf:38:17:88:02:e3:e3:8a:51:90:22:4d:14:f8:91:
92:79:5f:9d:b2:57:ab:45:d2:e1:5f:01:cb:36:b5:
1a:3c:3d:88:2e:6b:44:ee:12:a6:3a:76:6c:28:7e:
b5:43:90:ca:07:03:0b:a8:12:ea:60:ac:5b:86:e7:
fb:c9:1f:37:f6:62:fc:ec:c3:90:0c:87:7c:57:bf:
75:82:38:f2:08:2e:79:7d:ad:88:1e:63:fb:ac:4b:
3c:d6:56:64:81:34:ba:65:fd:fa:81:1b:a9:79:eb:
6e:97:69:a4:05:96:3f:a6:2c:e8:f6:8a:c9:bf:fc:
f7:5a:8d:d3:2f:8a:69:22:f7:ae:95:48:80:a1:b6:
f2:df:e5:a6:8c:31:86:4e:12:3d:a0:61:b2:fc:ef:
3a:b1:b3:76:95:e2:4a:40:a3:22:18:f3:ea:58:03:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A7:B7:29:40:A7:01:75:67:48:60:A9:4C:89:F3:BD:EE:65:9B:98
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Wqe3KUCnAXVnSGCpTInzve5lm5g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
60.32.0.0/12
Signature Algorithm: sha256WithRSAEncryption
82:4c:70:84:00:73:a5:bb:1c:19:1b:7b:71:08:fd:37:63:72:
e2:70:a7:9f:8b:8a:07:68:46:81:ec:5c:38:c3:5d:f8:94:bd:
f0:69:f5:4e:36:26:8a:16:eb:f6:ab:75:94:6d:68:96:3d:46:
02:f3:51:62:17:8e:4f:da:b5:34:6f:b2:c9:dc:62:fb:b5:43:
7a:cc:24:49:6f:38:1b:72:cd:82:c3:8b:1b:b7:3a:de:b8:7b:
80:75:b1:f2:6d:41:1f:2a:12:ae:b6:a6:de:03:a5:e7:b5:e3:
4b:a4:62:ea:e4:59:24:61:0a:3d:55:ad:fe:e1:a0:21:13:46:
f3:69:0b:02:a8:44:3b:48:25:cf:f1:65:aa:7f:75:54:5b:2c:
6b:b3:2a:64:c6:d3:00:8f:13:2b:aa:57:76:48:cc:14:bb:6d:
0c:5a:80:ab:aa:af:27:51:62:cf:f3:a6:2d:51:b2:df:69:6e:
80:d0:d4:a1:64:d8:e4:70:15:93:fb:93:0c:3d:61:a3:c9:cf:
f9:3d:81:c0:e1:63:e4:b3:ef:b8:f6:18:7c:b5:41:80:b7:08:
44:f2:80:d1:f5:34:cd:ad:9e:a2:dd:85:0e:eb:53:e6:22:1e:
78:c4:3d:ec:a7:ed:27:b6:34:18:f6:d2:33:51:d8:16:22:f8:
45:e6:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:02 2025 by rpki-client