Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa
File: 04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa (raw, json)
Hash identifier: of9jy/236C5LLy+6DH4lkOJjZfn4Fj+8je+OmVXYK8A=
Subject key identifier: D3:81:86:D8:D9:F8:3F:05:AB:86:84:26:87:41:80:7B:F1:A5:77:E9
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 01C5
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa
Signing time: Fri 31 May 2024 01:30:45 +0000
ROA not before: Fri 31 May 2024 01:30:45 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 4713
IP address blocks: 202.191.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 01 May 2025 01:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 31 01:30:45 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=D38186D8D9F83F05AB8684268741807BF1A577E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:7b:73:af:c4:84:e6:d6:45:61:c0:cf:3e:
2f:4d:25:96:b4:4b:59:d0:7b:96:e7:16:16:a5:6c:
4c:6b:3c:ac:62:db:77:b6:41:3a:86:19:1f:39:ef:
55:0a:d1:4b:6e:a0:d4:b0:70:e3:c2:69:86:e1:b9:
9b:93:f4:b6:b8:fc:3d:b9:d8:df:a6:5f:63:4e:b5:
9c:dd:e2:12:8a:36:43:3f:69:0c:8f:f0:be:d6:4a:
eb:8c:c8:7a:b4:21:02:5b:8b:2e:30:31:fa:d8:3a:
52:28:42:f5:c6:29:d2:f7:5b:e6:d8:6c:02:b0:0c:
2e:d2:89:a2:5e:86:34:7b:4b:dd:cd:87:df:26:63:
13:1e:6d:de:f2:83:09:42:81:33:b4:6e:34:0f:43:
5b:eb:34:d7:1d:18:95:57:0d:31:9b:a1:93:a1:82:
f5:78:68:e3:62:80:39:88:94:04:1d:5b:da:17:8d:
87:02:b1:cf:44:fe:5b:6c:55:10:23:63:fe:d1:db:
30:19:ef:1b:2f:c5:77:5a:a4:72:f6:7b:d3:bb:22:
1f:1e:87:ac:73:fe:db:d7:a3:15:6a:1e:1f:0d:53:
85:8e:dc:a5:bd:3b:a1:e8:b7:3b:dd:ce:71:d8:0a:
23:c4:dd:1e:86:6b:8b:15:39:25:54:3b:5a:7c:86:
dc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:81:86:D8:D9:F8:3F:05:AB:86:84:26:87:41:80:7B:F1:A5:77:E9
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.191.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:06:5e:ce:89:f3:4b:90:7d:60:7c:57:ab:cf:49:d1:2e:50:
85:2a:11:81:d4:ca:e8:a2:99:de:b0:70:d5:fe:18:d6:e9:48:
d3:0c:6f:5a:77:b2:01:4c:2f:84:1d:a1:d0:9e:53:9f:e3:15:
78:92:e3:f2:0b:0f:6d:fb:60:70:46:97:a2:d5:0e:43:a9:eb:
a0:96:73:7d:1a:68:4f:45:93:a1:e0:32:fd:a4:9f:f3:56:18:
ba:1b:ee:38:11:7c:89:84:9a:97:c1:14:fd:57:ae:53:c2:99:
ce:f1:af:dd:16:42:28:06:2b:24:ec:0d:f9:8a:df:cf:fa:d9:
77:2c:c4:d8:b0:49:1b:02:28:ff:15:fb:7a:5d:d0:09:a5:b3:
a4:64:40:ea:b7:e6:80:ef:71:0f:c3:fd:f6:f0:b1:f5:4e:65:
98:a6:69:0c:a1:44:4c:6a:4a:33:01:5e:80:35:5c:96:35:f3:
b0:47:71:2a:11:df:65:ed:5f:2e:4b:62:71:47:bf:d3:40:02:
04:7c:29:a8:a5:76:59:06:96:83:dd:4a:84:80:79:28:4e:4c:
d7:8e:f8:41:96:b6:64:3c:f9:00:5b:b9:dc:72:6d:fc:bf:72:
59:b4:57:cf:f9:89:83:7d:43:dc:95:83:d4:b6:3b:58:2a:4c:
2e:18:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:48:20 2025 by rpki-client