Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6rhQBqlts5Oxefc1G43ffdcDvIY.roa
File: 6rhQBqlts5Oxefc1G43ffdcDvIY.roa (raw, json)
Hash identifier: K0njzgBoDwIoetk1xqhJEnLvMA5LdPUtAXV+SpH+VqM=
Subject key identifier: EA:B8:50:06:A9:6D:B3:93:B1:79:F7:35:1B:8D:DF:7D:D7:03:BC:86
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05EC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6rhQBqlts5Oxefc1G43ffdcDvIY.roa
Signing time: Thu 29 Feb 2024 01:35:38 +0000
ROA not before: Thu 29 Feb 2024 01:35:38 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 1.66.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:28:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1516 (0x5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:35:38 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=EAB85006A96DB393B179F7351B8DDF7DD703BC86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:ea:9a:99:88:b0:f7:3b:cf:b9:34:47:a6:
68:30:1a:62:84:9a:54:7e:b1:ac:e2:df:c5:59:5f:
a5:f9:02:61:90:38:2e:b5:28:5c:8e:ba:df:cc:68:
5d:1e:80:52:ac:1b:36:7d:f8:36:bf:c1:59:39:d9:
9f:d9:04:04:af:5a:24:08:f8:71:5c:d3:22:e3:c9:
c8:52:51:58:5f:b3:fa:db:d6:3f:e7:c3:89:00:b3:
13:76:6b:9b:f5:21:1c:a2:22:7f:c2:e8:fb:b8:e5:
df:a4:21:4c:b2:63:51:46:9c:be:29:6f:45:d1:f6:
7b:25:d0:8c:29:ac:85:84:5e:15:5f:fd:76:7a:a3:
0d:e5:17:20:a8:6a:ca:f8:c5:a1:7a:76:cf:28:74:
75:c1:a9:0f:71:f9:2b:cc:d6:54:aa:a7:e5:fe:35:
07:41:a6:09:75:50:8f:f2:a0:9f:2a:a3:18:8c:bd:
0d:d9:db:3d:72:fa:e7:46:3a:1e:57:3e:bc:9a:2f:
fe:c1:a0:36:7d:12:6e:69:eb:6a:88:85:9f:9d:fd:
70:f3:aa:3b:6c:dc:f6:42:8f:05:53:68:5f:59:c2:
54:b5:70:1f:d0:21:ea:55:1e:ba:89:10:f0:71:bd:
c9:ad:5d:57:04:7c:05:85:5b:0b:ac:9b:46:00:bb:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:50:06:A9:6D:B3:93:B1:79:F7:35:1B:8D:DF:7D:D7:03:BC:86
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6rhQBqlts5Oxefc1G43ffdcDvIY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.92.0/24
Signature Algorithm: sha256WithRSAEncryption
96:4d:60:0f:86:72:72:5a:d5:2e:47:a9:ff:00:c6:3c:83:3c:
5e:e8:79:f8:c7:43:01:d5:4b:4b:22:74:01:58:bd:cd:1e:8c:
7c:bd:ae:fb:cf:5f:75:f7:5f:6a:dd:3b:48:05:ed:9e:2f:bb:
1a:58:51:c2:f9:0c:3e:20:b5:b8:36:44:74:9d:64:68:c3:84:
bc:7f:99:6e:8a:a9:b7:fa:8d:b6:a6:72:c1:d2:b4:b5:ff:90:
68:a8:dd:a4:52:0b:4f:ee:4d:86:b1:fd:35:b7:f1:94:69:d6:
38:23:1d:ec:4a:82:c9:40:19:4a:18:d7:50:33:d0:cc:71:8a:
51:77:c6:8c:07:4c:23:95:4a:78:bc:09:30:9d:a9:dc:c6:94:
1a:20:92:8e:db:eb:86:10:c0:77:2f:45:d8:ed:71:b2:87:80:
6e:4c:05:42:34:f6:02:63:86:7f:46:a7:f8:0f:2d:83:4a:2b:
8f:fb:70:73:b8:76:ad:25:45:3d:5d:b2:86:d2:3f:13:11:83:
e0:0f:bd:60:c3:17:4f:9a:34:08:51:e4:d6:6c:88:8a:29:01:
9a:8d:c4:25:0a:da:dd:70:07:4c:d3:ca:2e:75:18:8f:5f:8a:
a6:fc:3d:34:c2:43:8a:43:c0:65:e1:ec:03:5a:69:91:87:b8:
0d:bc:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:53 2025 by rpki-client