Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/RH7mcyR_rcarqemjvfzMCTllzuo.roa
File: RH7mcyR_rcarqemjvfzMCTllzuo.roa (raw, json)
Hash identifier: ZBt1JyX5KVxHQUaPOEcWUZ48OLS8LeTER89pTp9lm5g=
Subject key identifier: 44:7E:E6:73:24:7F:AD:C6:AB:A9:E9:A3:BD:FC:CC:09:39:65:CE:EA
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 04E0
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/RH7mcyR_rcarqemjvfzMCTllzuo.roa
Signing time: Thu 29 Feb 2024 01:35:57 +0000
ROA not before: Thu 29 Feb 2024 01:35:57 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 10010
IP address blocks: 220.216.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Feb 29 01:35:57 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=447EE673247FADC6ABA9E9A3BDFCCC093965CEEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:87:56:2f:62:48:4c:22:1f:13:a2:93:32:
60:cb:66:0c:45:3e:1b:e1:e1:7d:8d:cb:41:7d:d3:
68:97:be:89:55:8f:d6:17:b2:81:9e:b0:93:9a:0a:
89:e0:0b:bf:be:75:05:e6:d3:af:e6:d5:01:d9:b3:
64:fc:7b:fb:46:86:60:c7:ab:de:ea:a3:dc:4c:a1:
31:ca:c5:57:b4:11:6b:f1:4c:d8:ed:39:38:fb:7f:
0c:8f:9c:cb:52:0d:e6:99:5a:99:be:22:a4:d0:7a:
6a:c4:03:42:74:43:9d:d5:89:24:7c:4c:a7:a1:09:
48:37:b0:87:ec:ee:39:9e:88:b9:80:c1:a0:01:f7:
7d:a5:d9:d4:28:71:1c:d3:77:d4:46:8f:be:10:a7:
a6:bf:94:42:e2:c1:69:7a:b3:8b:4f:fb:32:f5:1d:
94:57:40:5f:d1:14:1c:4a:5f:a7:50:c5:c1:b9:0e:
36:23:e3:c7:f3:aa:02:46:96:8d:c0:d9:aa:30:eb:
78:d7:ff:33:0f:91:4b:14:3e:ab:0a:70:28:ab:b3:
87:ff:d3:db:fc:df:e5:7a:1a:ac:3b:7e:05:70:9b:
2a:0c:ca:e4:71:ab:e9:45:40:b1:4e:95:e2:3b:77:
33:bc:b6:d4:b2:ad:ec:6a:45:c5:0f:43:70:e8:b3:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:E6:73:24:7F:AD:C6:AB:A9:E9:A3:BD:FC:CC:09:39:65:CE:EA
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/RH7mcyR_rcarqemjvfzMCTllzuo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.216.88.0/21
Signature Algorithm: sha256WithRSAEncryption
21:33:68:d5:c9:be:f0:58:72:c7:de:02:c9:bf:ed:31:8f:e6:
00:a6:20:57:61:71:9a:87:f0:17:68:f9:64:5a:08:78:93:b8:
17:17:db:96:6b:3a:d7:25:3c:1e:02:f3:54:73:a2:08:7d:f9:
c4:72:e8:3d:39:7c:41:1b:a9:04:79:2c:b3:59:d0:6b:0d:a1:
5d:40:c7:f0:4a:90:ec:60:fd:ab:ca:58:d2:e1:2b:fc:3c:b9:
40:16:cb:69:8b:bc:8e:f9:ee:58:58:70:e6:99:66:a7:53:09:
fd:25:32:63:c6:f2:bb:5d:25:50:10:94:7a:13:9e:52:6f:57:
ce:83:76:bf:76:d7:31:e5:8f:1d:6b:64:2b:ce:2c:c1:28:b8:
52:ba:c5:fb:60:1b:43:69:75:6b:d2:c9:4f:50:5d:7a:06:83:
f8:17:55:b8:46:b9:66:52:29:ed:03:9e:00:e4:7b:f5:db:0f:
be:e7:f6:44:c9:27:e1:98:39:57:1d:56:0d:59:9d:bc:17:88:
4d:3c:15:bb:06:24:13:71:58:16:cc:26:d1:33:7d:2b:17:e8:
a5:9b:93:48:1f:81:96:ae:f6:90:25:b2:7f:33:59:78:50:3e:
54:23:e6:65:a2:07:1b:10:35:1e:d9:62:17:82:d1:4a:cf:9d:
5d:c1:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:29 2025 by rpki-client