Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30306/VPJwl05vsyWcsabQ24uo5WNapgo.roa
File: VPJwl05vsyWcsabQ24uo5WNapgo.roa (raw, json)
Hash identifier: 2mtgBJuHLVoJ+GXZBi+KUOetXNiXTixQn8TMFPZ3NRc=
Subject key identifier: 54:F2:70:97:4E:6F:B3:25:9C:B1:A6:D0:DB:8B:A8:E5:63:5A:A6:0A
Certificate issuer: /CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B
Certificate serial: 11
Authority key identifier: 9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/VPJwl05vsyWcsabQ24uo5WNapgo.roa
Signing time: Wed 11 Sep 2024 06:26:43 +0000
ROA not before: Wed 11 Sep 2024 06:26:43 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 23637
IP address blocks: 2402:3000::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Oct 2024 06:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B
Validity
Not Before: Sep 11 06:26:43 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=54F270974E6FB3259CB1A6D0DB8BA8E5635AA60A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:37:67:30:9a:27:20:81:6f:1c:30:86:4e:
42:53:d7:20:b5:1a:32:ad:7d:89:fb:16:3f:6c:c8:
aa:0a:98:d1:2e:e5:aa:a0:1e:d1:90:aa:ca:de:db:
d5:af:7b:b6:3d:0d:9d:4e:68:ca:38:3f:55:02:c1:
1e:d5:43:28:29:8a:ea:35:3d:6a:00:13:4a:32:c1:
99:29:07:fb:50:d6:9e:e5:3e:fa:3c:dd:fa:90:ad:
1f:0f:54:2b:2e:b8:78:e7:c3:33:f9:b7:46:a8:d6:
e7:ba:1d:fc:40:f4:a8:34:71:a0:03:9a:e1:f4:0c:
bb:5d:7a:92:8e:a3:d9:74:27:e3:29:60:8a:2d:18:
1a:d8:bc:2b:ec:40:91:de:e2:ac:06:1a:32:b8:61:
cb:ea:8c:48:c1:52:6f:28:09:31:ff:18:91:a6:ba:
c5:72:c1:1a:77:e3:21:6c:d3:16:f9:0d:d5:db:7c:
16:8c:78:ad:b5:02:ad:c3:1c:07:80:27:aa:83:38:
bf:5c:ed:4c:c0:2f:25:dd:3e:3d:bf:37:f2:c3:c5:
ac:22:2a:36:86:b7:df:1f:49:f7:55:16:2f:73:60:
ac:c4:d5:99:6c:1f:b1:8d:ed:97:27:8a:2d:c3:78:
e2:ec:38:c0:27:2c:c7:d9:ad:01:69:66:74:c3:eb:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F2:70:97:4E:6F:B3:25:9C:B1:A6:D0:DB:8B:A8:E5:63:5A:A6:0A
X509v3 Authority Key Identifier:
keyid:9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/VPJwl05vsyWcsabQ24uo5WNapgo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:3000::/32
Signature Algorithm: sha256WithRSAEncryption
11:5a:f9:9a:73:2d:d8:7f:bb:e9:eb:bc:d5:8a:0f:7e:40:b5:
2d:5c:7e:7f:51:d3:14:56:85:d7:ff:f5:07:fa:d6:29:f7:5e:
c9:55:ce:1e:73:46:6e:6c:22:ad:83:2f:87:ba:bf:a2:42:06:
cd:b4:1e:82:3f:4e:ee:be:c0:79:48:12:59:c5:e6:39:1f:63:
5b:7b:f3:a1:ed:f1:a0:7d:88:60:1c:a4:aa:8c:79:be:10:96:
ec:42:45:ef:f4:73:9b:75:b4:bf:07:f4:86:28:e7:d3:6c:91:
6c:ea:1a:ae:36:c1:1f:06:b0:b7:f0:43:ef:19:d5:6e:8b:de:
b5:92:e9:49:59:a1:3c:eb:0e:81:84:17:5b:ab:a7:36:a1:26:
f5:1a:da:ac:61:bb:eb:3f:6f:53:50:1e:cd:68:b5:e7:43:5f:
53:73:0a:4d:9c:41:18:53:1d:25:2a:45:98:ec:24:04:08:20:
2c:79:39:69:62:bd:6b:15:4c:ca:34:de:2e:97:60:2c:88:0e:
69:fa:7d:28:e3:16:e2:33:a5:e5:bf:98:2b:7f:e4:e4:af:01:
b7:1e:4f:d3:2b:e5:04:2a:1a:f2:67:f9:e7:a4:59:2d:e8:4d:
33:bb:1d:e9:48:93:d5:34:b8:29:3b:cc:a1:28:de:98:39:0a:
6d:63:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:05 2024 by rpki-client on console-ams.rpki-client.org