Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/xU5EKKEyjJPdPqahKS3raUxHLVI.roa
File: xU5EKKEyjJPdPqahKS3raUxHLVI.roa (raw, json)
Hash identifier: sMnX1v4QnzBbUMLVXvjncHU5XGx10EirAZEKwSEA1+8=
Subject key identifier: C5:4E:44:28:A1:32:8C:93:DD:3E:A6:A1:29:2D:EB:69:4C:47:2D:52
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 56
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/xU5EKKEyjJPdPqahKS3raUxHLVI.roa
Signing time: Thu 29 Feb 2024 01:31:17 +0000
ROA not before: Thu 29 Feb 2024 01:31:17 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9370
IP address blocks: 2406:ce00::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: Feb 29 01:31:17 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=C54E4428A1328C93DD3EA6A1292DEB694C472D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:c8:17:e8:1a:a5:86:d8:75:62:59:e2:5e:
fe:69:b7:e2:ce:72:bc:69:a8:a0:55:bc:a6:e4:ba:
e7:bf:94:36:47:04:4b:69:16:83:45:5a:bd:45:76:
4c:0f:f4:e8:31:bc:66:99:1f:1a:7f:3b:1f:b6:17:
d4:27:a6:1b:76:9f:20:8d:04:53:dd:ff:79:38:c7:
99:50:41:61:4d:91:41:a6:9e:3d:b5:7d:1e:49:69:
58:a0:2e:5d:4b:ab:da:6b:3b:a2:94:81:3a:41:40:
6a:24:10:7d:c3:99:d6:5b:c0:49:24:e4:ff:08:85:
b2:39:5b:84:ce:b6:16:34:1a:02:5b:af:39:d4:be:
96:41:d0:13:c0:77:55:f1:61:63:d0:34:5f:00:87:
f9:54:99:e3:e9:c5:1d:70:c2:01:fe:04:0b:34:75:
c2:99:65:85:28:33:74:59:b0:83:63:fe:56:9b:47:
0c:17:b3:9d:f6:26:9f:70:f3:61:a5:06:a7:9c:e3:
76:06:ee:f6:85:69:9c:07:16:f3:2f:fa:ac:ee:20:
67:e3:89:49:7d:1a:70:0d:55:a9:d4:5f:60:8e:01:
25:ad:43:ee:0b:4f:58:66:be:d1:75:4e:34:36:ab:
63:3b:bd:d7:5c:30:4e:1b:34:92:c4:30:b1:57:73:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:44:28:A1:32:8C:93:DD:3E:A6:A1:29:2D:EB:69:4C:47:2D:52
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/xU5EKKEyjJPdPqahKS3raUxHLVI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
71:76:17:d7:53:b3:a4:38:fd:89:df:fc:d7:cd:42:e7:5c:9a:
b8:63:aa:0f:0b:37:a9:c2:01:20:6e:ed:a3:24:26:0b:6d:e3:
dc:52:b8:ef:f9:f0:c2:8b:68:86:92:b1:78:f3:df:86:1f:cc:
45:b5:54:90:69:8e:16:8d:a1:5c:77:64:1f:18:91:7a:61:59:
aa:59:a8:79:4f:51:c1:14:23:f2:23:a1:d4:81:17:37:4a:31:
1a:c2:73:2d:57:74:59:02:00:92:c3:58:c1:89:04:95:fb:99:
f4:1f:80:cd:82:9a:ba:72:04:24:71:85:8f:86:ea:bf:c9:e7:
e2:68:1f:71:06:77:16:1f:ce:32:ba:b5:12:9f:03:6b:ec:c7:
6a:15:bd:57:14:98:3b:35:d7:98:42:3e:ab:c4:76:0c:98:72:
19:6d:3a:20:2f:95:39:df:f0:bf:b4:80:ad:4d:f2:b5:4b:a9:
a4:67:ce:3e:d2:ff:5d:19:79:d3:a0:c9:cf:04:ac:ee:7f:fc:
56:2d:ee:38:bb:d7:81:f6:45:59:5a:75:70:6e:a0:3b:b6:c3:
7b:c0:c1:75:a6:6c:56:1c:31:e6:90:28:74:11:ce:4b:ba:c8:
71:78:a3:c5:ba:78:89:ea:ae:8c:a3:ca:8e:b9:af:cc:5b:89:
89:e4:a2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:29 2025 by rpki-client