Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/kNnYQFLSwm39q1b_rueoUguiqkA.roa
File: kNnYQFLSwm39q1b_rueoUguiqkA.roa (raw, json)
Hash identifier: KnM6EdEJnwBaJJwiCLCtXVyerGkCAqPT8oWQNOf9L6o=
Subject key identifier: 90:D9:D8:40:52:D2:C2:6D:FD:AB:56:FF:AE:E7:A8:52:0B:A2:AA:40
Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial: 27
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/kNnYQFLSwm39q1b_rueoUguiqkA.roa
Signing time: Mon 20 May 2024 06:56:00 +0000
ROA not before: Mon 20 May 2024 06:56:00 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 7672
IP address blocks: 218.223.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 01 May 2025 01:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
Validity
Not Before: May 20 06:56:00 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=90D9D84052D2C26DFDAB56FFAEE7A8520BA2AA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:94:fc:de:e6:39:01:81:37:8a:3c:49:45:
9f:9d:aa:23:fe:09:d0:d8:fa:41:45:dc:7b:bc:05:
0f:24:88:4e:b3:b9:d6:f9:4a:47:3e:61:fc:1b:04:
0f:58:3a:5b:b3:ae:89:89:b8:11:28:7c:30:93:71:
ec:d0:d8:01:5b:89:81:ca:d9:39:d1:86:d8:cb:c8:
29:07:76:8b:bb:e4:82:97:4f:d8:d7:b5:94:31:eb:
6b:81:3c:65:55:8c:22:de:1b:38:58:28:9e:67:ba:
34:6f:1f:19:ae:25:ac:5c:18:9e:66:74:2d:b6:f1:
56:6b:49:b5:58:25:6f:82:6b:34:7d:80:6d:b4:cd:
c4:d6:71:3d:76:ba:8a:31:ad:df:c8:d6:e9:e0:c5:
bc:67:ce:97:db:0c:c7:21:91:be:08:70:f1:81:1e:
bb:10:74:c9:e3:26:27:9a:c1:4e:93:20:d3:55:e5:
9b:bc:c1:52:ea:9a:cf:4c:b7:f3:fe:ee:eb:f4:67:
a7:00:67:4b:5d:5b:9c:8f:f1:c1:5c:08:52:18:42:
6e:4c:18:92:35:e5:31:a1:d0:b7:38:a8:9c:9b:d8:
2b:76:7e:80:9f:14:b3:95:bf:64:e5:31:60:d1:93:
48:7c:2b:be:f6:85:1a:f5:a6:f5:0b:4b:47:57:be:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D9:D8:40:52:D2:C2:6D:FD:AB:56:FF:AE:E7:A8:52:0B:A2:AA:40
X509v3 Authority Key Identifier:
keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/kNnYQFLSwm39q1b_rueoUguiqkA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.223.208.0/20
Signature Algorithm: sha256WithRSAEncryption
87:49:f9:8d:66:dd:b9:d5:28:36:d8:9f:97:d7:85:44:3b:a0:
1e:b4:a5:5e:d8:19:77:15:36:fd:0a:46:48:4c:3a:35:92:26:
bb:28:ac:0a:df:aa:22:2f:81:ba:4f:5f:34:1a:e7:6e:5b:76:
c8:50:51:9d:8e:04:6f:02:e2:8a:08:7e:75:69:27:3b:5e:c8:
3f:e7:28:aa:15:34:63:63:b1:53:69:df:fc:cd:50:06:10:de:
09:29:7b:2b:20:ee:2c:d8:6a:7b:49:cd:a6:29:e0:2a:32:ae:
f7:b7:f5:e2:00:21:04:25:3b:fa:79:4a:fc:67:c9:20:39:41:
bb:c7:0a:48:a6:a1:ec:2e:7b:d3:5b:15:64:6b:30:b8:81:3a:
41:ae:4b:02:e6:c3:27:b6:8e:44:94:a2:65:81:4b:ca:57:4f:
67:c4:ef:fc:44:98:d5:1b:df:b6:4a:44:de:64:96:92:71:2d:
8e:ca:43:25:71:67:49:e5:0a:8a:c3:91:5c:49:88:9e:ad:1c:
9f:ee:f1:4e:32:50:fa:b3:33:0c:d8:6a:bf:39:73:3b:87:15:
f1:83:d0:ec:c8:92:c6:f9:56:95:24:e7:cb:ec:38:b8:7a:60:
26:f4:d7:21:9d:7b:4e:47:12:b4:f8:39:ed:45:de:e2:ff:71:
fd:31:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:54:23 2025 by rpki-client