Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/NGB4lSHoT4emF92ClWj_-s-XehA.roa
File: NGB4lSHoT4emF92ClWj_-s-XehA.roa (raw, json)
Hash identifier: FuWpIO0iBl3Jcp22KrbT20U1BZsKNG+gTVdQdDFBfmI=
Subject key identifier: 34:60:78:95:21:E8:4F:87:A6:17:DD:82:95:68:FF:FA:CF:97:7A:10
Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial: 2B
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/NGB4lSHoT4emF92ClWj_-s-XehA.roa
Signing time: Thu 29 Feb 2024 01:34:12 +0000
ROA not before: Thu 29 Feb 2024 01:34:12 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 131934
IP address blocks: 27.147.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
Validity
Not Before: Feb 29 01:34:12 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=3460789521E84F87A617DD829568FFFACF977A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:2a:72:f2:00:73:a6:8a:29:92:63:b2:58:
b3:2a:1d:55:34:99:3f:c1:5d:52:7d:b0:a9:15:04:
a6:91:60:0e:ad:40:a5:74:2c:c2:5a:0f:41:af:53:
fa:63:e0:19:ec:27:1d:cb:76:66:3e:4d:98:a7:ef:
76:9a:91:9d:db:12:4e:86:d0:b3:56:7b:6c:97:87:
e0:8b:f6:fd:ea:2e:ff:0a:10:3f:d0:a4:70:5d:08:
bc:b0:14:7b:04:48:97:11:0d:5e:e7:2a:cc:ab:32:
17:b6:e0:4c:75:d9:2e:45:97:fd:b6:77:23:a4:01:
72:9e:44:e7:b5:92:7f:d7:2a:be:76:6e:78:2f:4b:
20:73:93:e4:fa:81:10:7a:10:de:0b:e2:d0:77:df:
11:99:0a:2b:0c:c4:27:8a:6a:cb:65:e2:81:cf:f9:
d7:fc:68:d1:24:40:72:81:dd:67:a9:6d:81:04:7e:
4b:46:61:16:df:36:c4:c8:e5:85:d0:78:ba:f7:4a:
cb:24:6d:28:c6:5f:8b:b5:41:d5:9b:70:df:14:de:
aa:cf:67:ac:66:23:48:da:a5:52:0c:91:1a:51:42:
0c:39:1a:be:6f:37:5c:3e:ae:94:89:b5:3b:0a:af:
4d:ee:5a:53:d7:2e:04:94:6f:b0:cf:91:f8:b7:99:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:78:95:21:E8:4F:87:A6:17:DD:82:95:68:FF:FA:CF:97:7A:10
X509v3 Authority Key Identifier:
keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/NGB4lSHoT4emF92ClWj_-s-XehA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:21:18:78:80:32:b9:2d:86:dc:9b:5a:ff:72:90:67:8f:6c:
5e:cb:58:60:16:43:79:67:ce:59:2c:f5:4c:27:4f:2d:7f:0a:
95:6c:03:cb:b3:18:8a:f7:72:10:20:26:5e:57:ad:75:ac:4e:
1e:02:39:9f:44:25:53:d6:84:38:ef:29:93:94:28:02:dd:ff:
02:35:2a:38:c7:3d:18:25:02:3b:87:78:4d:16:93:b0:ff:a7:
c2:8a:28:97:cb:e1:b2:54:dc:19:ac:b8:28:5c:89:43:be:30:
43:67:e9:24:79:d7:3e:ae:83:d2:77:6a:9d:b0:f8:6b:97:8a:
0b:69:ec:ef:14:24:d7:0b:47:12:36:24:05:e5:79:36:b0:0b:
a4:62:53:aa:d3:84:73:2c:e3:c1:95:9b:f8:42:88:b5:19:8f:
9d:6f:3c:24:13:91:7b:b0:d2:7f:d2:2d:09:56:77:09:d6:59:
ab:78:97:ac:e6:fb:4e:ca:9e:c3:4c:48:2d:1d:4f:57:5d:46:
2d:b6:51:b8:84:a4:fb:e7:dc:8b:eb:ed:55:33:26:e1:be:8d:
a4:c5:89:3b:34:de:77:9a:21:63:c2:84:0e:5b:95:85:08:d6:
38:b4:06:d8:9b:18:9b:f0:7a:22:70:b7:2a:ad:4e:7e:5e:32:
30:9d:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:35 2025 by rpki-client