Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/5QzCfu4hnXY6hrbmZE8RN94nPP8.roa
File: 5QzCfu4hnXY6hrbmZE8RN94nPP8.roa (raw, json)
Hash identifier: PDH1y19lskjRVG6zl4MPZ3iMwyqqO1olTCCm6k3Ne4o=
Subject key identifier: E5:0C:C2:7E:EE:21:9D:76:3A:86:B6:E6:64:4F:11:37:DE:27:3C:FF
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 01C3
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5QzCfu4hnXY6hrbmZE8RN94nPP8.roa
Signing time: Fri 31 May 2024 01:30:44 +0000
ROA not before: Fri 31 May 2024 01:30:44 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 4713
IP address blocks: 153.252.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Thu 01 May 2025 01:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 31 01:30:44 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=E50CC27EEE219D763A86B6E6644F1137DE273CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:7f:fe:76:a4:b3:bc:77:ef:1b:7e:ef:8c:
26:8d:97:02:42:99:80:37:f1:7c:ce:eb:ae:db:6a:
a7:e9:9d:c8:b8:cc:27:79:cc:5d:69:61:8c:d1:05:
5e:44:b4:34:15:d6:b6:06:33:16:fb:01:e7:bc:d9:
38:0d:bd:77:e8:2c:ab:6c:53:e1:ff:f5:01:ed:f7:
f1:a5:1d:15:c9:89:af:eb:51:aa:1a:a7:fc:aa:12:
5b:4d:ff:d5:37:af:69:07:56:49:6e:4a:95:86:09:
1e:b5:06:0f:19:ce:c7:db:93:4d:18:ae:db:1b:62:
b5:22:7a:55:3c:47:99:54:42:90:78:8a:08:57:32:
41:af:93:c8:d3:9b:5d:4a:4a:d4:3c:9b:ce:8e:a8:
c5:ee:9b:27:3a:02:89:9c:0a:5f:03:05:7a:0e:c9:
31:8c:f5:ee:94:c2:27:6a:d4:c8:96:bc:e6:19:5c:
12:3f:d7:99:3f:c9:dc:06:fd:3a:56:c1:ea:12:f2:
6d:2f:45:5c:20:78:b5:0a:ff:cc:9f:7a:37:88:c8:
66:7d:95:cc:59:08:a7:be:4b:86:01:64:fa:48:54:
b1:15:2c:1e:b5:46:e4:ac:40:c8:23:29:57:97:d4:
13:1b:9c:50:d7:3c:1f:17:db:97:23:81:5b:d9:28:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:C2:7E:EE:21:9D:76:3A:86:B6:E6:64:4F:11:37:DE:27:3C:FF
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5QzCfu4hnXY6hrbmZE8RN94nPP8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.252.0.0/15
Signature Algorithm: sha256WithRSAEncryption
02:48:9e:1b:a9:39:d3:8b:d2:4e:33:67:76:98:de:66:e5:8b:
4b:d0:36:10:e5:ed:4c:4d:32:20:2c:00:ff:d2:96:73:c5:45:
6a:ed:55:64:21:7d:92:f5:9f:51:89:dd:4e:06:d7:79:d9:18:
bf:8f:f9:09:d0:fc:e9:5f:c0:98:e8:6f:7a:69:bc:c1:a9:0d:
be:23:bd:61:d6:b8:fe:fb:7b:0d:16:97:c1:66:b4:36:12:01:
85:8c:5f:8b:a6:d8:5e:e0:af:04:2c:e9:85:89:2b:2a:2b:e3:
7e:e6:c7:c2:ed:d0:97:4d:dc:da:02:b2:a4:c5:c0:ed:de:ce:
b2:e8:d6:64:7b:d0:26:f9:09:eb:69:ae:50:7c:5b:56:d5:00:
0e:df:33:8d:bd:40:e4:cd:7c:e9:ed:bc:d4:34:33:23:73:6c:
00:e4:cf:80:aa:74:a2:f6:2c:10:bb:45:47:a1:8f:24:04:0e:
86:d0:56:4d:08:75:78:d0:cb:af:70:82:d4:00:1b:77:c3:ab:
a8:7e:c2:3d:90:86:93:5e:b4:aa:30:89:56:83:67:df:36:cb:
a4:87:70:00:b9:ff:a2:e6:f1:7a:12:bf:8f:e1:12:ac:8c:15:
43:0c:02:e7:2d:f3:f5:d5:32:b9:16:01:94:84:5c:7a:35:9f:
bd:2a:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 23:00:04 2025 by rpki-client