Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yN7Wy8UUCTSGOLKlTaNMUAZVon0.roa
File: yN7Wy8UUCTSGOLKlTaNMUAZVon0.roa (raw, json)
Hash identifier: v2kQSGeWJXrQZ0JB6if9KQjxhwtZLeN+L38dl9O4rVs=
Subject key identifier: C8:DE:D6:CB:C5:14:09:34:86:38:B2:A5:4D:A3:4C:50:06:55:A2:7D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 078F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yN7Wy8UUCTSGOLKlTaNMUAZVon0.roa
Signing time: Tue 30 Apr 2024 02:04:46 +0000
ROA not before: Tue 30 Apr 2024 02:04:46 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 20 Jan 2025 11:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:04:46 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=C8DED6CBC51409348638B2A54DA34C500655A27D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:4e:38:be:4d:df:c3:9f:35:4f:45:ba:e8:
3c:97:dd:ab:2a:6b:65:cd:62:26:79:2a:d0:9a:76:
e3:25:35:5b:2b:54:26:c8:9f:69:dc:0d:fa:98:b9:
52:e9:cd:12:e9:37:bd:a0:e9:7c:fd:c7:c8:0c:5e:
91:5f:d7:ec:47:bd:0d:67:7e:bd:c1:06:7c:96:b9:
bf:f7:a9:1a:f5:51:c2:0b:46:68:e7:31:6d:62:15:
4d:8b:b4:f2:dc:80:c9:b4:47:bd:34:f6:10:43:8a:
48:32:64:1a:c9:40:69:bc:2c:38:ed:6c:fd:0f:d0:
1d:c7:ff:8d:b7:e9:c9:56:d7:89:92:6a:20:62:3d:
be:77:4d:e9:d1:c1:1e:ce:89:ca:3a:af:46:e4:11:
35:b3:7a:01:b2:7c:72:13:a4:bc:97:1c:ef:82:22:
9d:0a:60:07:29:18:71:d1:7e:31:74:9d:66:d7:b2:
1a:cd:de:fe:a5:52:e5:a6:8b:b8:46:5e:59:b1:af:
05:08:27:1d:3b:d2:b0:66:93:33:2f:55:31:34:08:
93:85:85:31:37:ec:f1:eb:8d:76:36:f5:0f:2b:ca:
ec:32:0e:ce:bf:f7:25:ff:ba:ba:27:88:6f:37:d6:
50:1d:ca:48:bf:b8:31:50:b6:19:71:23:b7:cb:e1:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DE:D6:CB:C5:14:09:34:86:38:B2:A5:4D:A3:4C:50:06:55:A2:7D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yN7Wy8UUCTSGOLKlTaNMUAZVon0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.230.0.0/19
Signature Algorithm: sha256WithRSAEncryption
70:8f:7c:49:7e:53:87:4e:d1:d2:df:d8:e4:dc:c5:e4:6e:7a:
65:4f:f3:6e:69:e3:14:7e:68:0d:47:6e:ec:dc:4c:66:5f:4b:
04:33:96:0b:75:3b:f1:7c:94:62:42:c7:4d:30:e5:ba:79:00:
10:68:b5:f2:51:86:5a:3d:51:e1:69:4f:be:1b:f5:5e:76:74:
30:cb:f0:0c:25:01:24:70:13:bc:78:a4:30:4d:82:fb:c3:ae:
3e:b3:5f:f4:1e:75:b9:7a:9d:af:38:d4:0e:d7:8c:90:f1:74:
57:0d:c6:8e:bb:c5:f2:11:32:59:6f:63:7f:0d:63:5c:d8:27:
d0:d7:bd:54:57:4a:79:ae:bb:0b:04:e3:cc:5e:95:a4:7d:2f:
68:97:30:84:c1:53:d6:c2:3c:30:dd:61:e4:b1:85:86:98:cf:
2f:fa:f9:14:b8:6b:eb:a2:24:9e:0f:dd:83:04:a6:45:68:83:
7f:6e:2b:5c:97:1e:52:1f:34:b6:9f:7a:1b:5d:c8:37:e4:1d:
ff:a5:c1:bd:3a:c1:96:16:a8:23:6e:55:24:e7:b6:c4:db:45:
fe:e8:8a:2c:c5:b9:91:5a:fd:06:43:aa:8a:90:27:ae:9a:79:
d6:7c:94:10:69:61:9f:83:ba:c8:51:3b:45:fb:c0:46:ff:e0:
fd:24:de:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:02 2025 by rpki-client