Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/xVCX6CArIMSK5oMqN7elZ7QaJJg.roa
File: xVCX6CArIMSK5oMqN7elZ7QaJJg.roa (raw, json)
Hash identifier: jsXCFEW5NMTxTQMvSK6j+F/D8lvJq7qwwKGYyNSd8Mg=
Subject key identifier: C5:50:97:E8:20:2B:20:C4:8A:E6:83:2A:37:B7:A5:67:B4:1A:24:98
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 40
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/xVCX6CArIMSK5oMqN7elZ7QaJJg.roa
Signing time: Thu 29 Feb 2024 01:33:59 +0000
ROA not before: Thu 29 Feb 2024 01:33:59 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 63789
IP address blocks: 202.9.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Feb 29 01:33:59 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=C55097E8202B20C48AE6832A37B7A567B41A2498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:13:78:d1:c0:67:79:df:5f:01:b1:64:76:
65:f5:bd:7a:a3:a2:d1:fb:f1:9c:59:b6:b4:3f:3f:
e9:88:3d:a5:b9:da:2e:31:66:3b:5a:39:76:61:26:
d1:c4:65:99:51:de:6a:d4:63:4c:db:28:f4:95:e1:
cd:94:b1:c6:6d:68:c4:28:f0:40:6e:f1:ee:d8:90:
49:28:6a:20:ed:34:4f:c0:b1:9e:71:e7:73:78:4a:
8c:5e:1c:58:f2:59:1c:b2:1f:1a:27:48:4c:db:32:
d5:6b:b5:54:2e:eb:48:d9:36:1c:99:ba:05:ac:44:
d6:8c:e2:9e:a4:aa:11:b6:ad:c9:ad:a1:87:1e:e8:
b6:8d:fc:a4:2a:cf:95:05:2f:db:fd:40:ef:75:31:
44:05:b3:78:9a:83:f0:40:fb:59:11:9f:36:72:5f:
fc:ec:6a:fc:7b:0c:82:cc:32:d3:6d:2f:01:8c:59:
36:99:e3:3c:d5:4b:b6:8c:11:fe:c5:aa:54:a3:06:
0c:6a:df:42:db:61:fe:ec:44:b8:6f:32:11:ce:4a:
6a:ef:9b:dd:c5:b3:40:f9:15:06:53:ea:5b:0c:17:
dc:da:6a:bd:a7:78:74:38:32:7c:6d:63:4f:c7:0d:
d0:a5:8d:4f:75:42:1b:19:b2:a1:19:05:4b:e6:2a:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:50:97:E8:20:2B:20:C4:8A:E6:83:2A:37:B7:A5:67:B4:1A:24:98
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/xVCX6CArIMSK5oMqN7elZ7QaJJg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.9.208.0/24
Signature Algorithm: sha256WithRSAEncryption
29:df:9a:b6:bb:52:35:04:d8:4f:74:5f:2d:9a:bb:90:24:e8:
c4:39:d4:fc:62:c3:b4:97:f4:b3:a8:8f:37:ac:e1:87:c5:9b:
37:89:48:d0:20:70:b6:ff:8c:d4:fc:f7:d7:df:af:a5:f8:eb:
46:b9:05:8c:1e:c7:7d:ff:2f:8a:91:7b:58:07:79:51:28:ef:
b8:c0:a6:25:a7:90:4f:da:f3:61:29:ce:74:6f:34:00:8e:0c:
05:f0:7c:ff:10:46:95:30:6a:cd:42:96:0e:d1:d2:5f:a2:a3:
c1:ee:c1:e7:bd:eb:30:a5:dc:92:17:39:3e:f0:da:59:1d:8e:
9c:2c:2f:a0:d8:00:93:1c:19:65:8b:31:61:36:2a:99:cf:37:
4a:5a:81:3e:b8:ed:56:a5:9a:25:b1:03:41:06:6c:bd:09:e0:
23:3a:b9:9a:7f:53:d9:fc:70:24:27:83:ca:f7:1b:a0:04:66:
e7:47:c0:37:56:cf:91:07:fd:b6:d6:cd:74:79:ae:1a:f7:f6:
96:0f:25:b7:67:5d:0e:df:d7:81:95:a6:8e:d1:22:c9:da:ad:
10:54:c7:ae:cc:7f:04:ab:e4:3b:b1:e1:18:a4:89:6b:fb:ec:
b4:19:66:94:ce:02:3f:ff:90:57:3d:9f:13:41:e9:28:75:17:
bd:a6:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:12 2025 by rpki-client