Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/CkNXygqC3AyDaWEcQas9Ydj0V_8.roa
File: CkNXygqC3AyDaWEcQas9Ydj0V_8.roa (raw, json)
Hash identifier: VMUHx0aBm+eliv6gC59f6sziaecsLoWU430wez2hoIE=
Subject key identifier: 0A:43:57:CA:0A:82:DC:0C:83:69:61:1C:41:AB:3D:61:D8:F4:57:FF
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: F1
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/CkNXygqC3AyDaWEcQas9Ydj0V_8.roa
Signing time: Fri 31 May 2024 01:30:27 +0000
ROA not before: Fri 31 May 2024 01:30:27 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 9607
IP address blocks: 124.147.0.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 01 May 2025 01:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: May 31 01:30:27 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=0A4357CA0A82DC0C8369611C41AB3D61D8F457FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:35:dc:70:92:8d:a4:81:69:2e:85:b3:82:
59:76:03:51:13:7e:e7:16:c6:b1:87:2e:ad:f3:c7:
7c:41:b3:e8:0e:83:6e:3e:b2:e3:91:51:3a:95:aa:
e9:d2:d6:31:f7:26:c3:90:71:90:6d:52:8b:cc:69:
3a:2a:b3:7d:9e:1b:13:37:71:c7:1d:88:f7:25:12:
6b:8a:85:08:9b:76:ba:7c:20:53:d1:04:47:0c:ed:
ef:7e:60:d2:03:4b:4d:ae:81:60:c3:72:03:fe:9e:
ae:cf:bb:6a:53:5b:dc:9b:00:28:96:73:50:dd:63:
62:9a:46:77:9d:b4:eb:5b:44:d8:e5:2f:ae:d3:73:
2d:29:4d:48:3e:db:45:e1:9a:70:54:e4:ff:37:74:
c9:8e:c7:8d:45:fc:35:4f:cc:87:e1:aa:1e:b8:8d:
0b:2d:80:e4:4d:d0:ba:5f:36:5b:e3:a2:ec:0e:5b:
cb:8c:0b:9b:02:75:34:ef:14:99:80:cf:00:cd:64:
04:cc:34:2b:0a:b8:2c:5a:88:9e:89:83:17:5b:7c:
42:39:ae:91:5f:d6:d0:c0:b4:02:5e:dc:2c:d2:55:
20:30:c1:0e:4e:d1:69:11:53:93:16:a6:d2:aa:4a:
e6:25:4d:b1:05:c7:2a:fc:17:18:81:bf:9a:1d:1c:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:43:57:CA:0A:82:DC:0C:83:69:61:1C:41:AB:3D:61:D8:F4:57:FF
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/CkNXygqC3AyDaWEcQas9Ydj0V_8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.147.0.0/20
Signature Algorithm: sha256WithRSAEncryption
07:79:3b:b0:59:c1:df:97:c1:0a:d9:d9:ba:6c:fd:f4:d6:de:
89:45:31:70:94:f1:53:29:69:ef:7c:15:88:9a:bc:2d:dc:01:
a9:05:52:9e:a5:96:53:d3:95:68:62:93:90:84:f1:89:39:cd:
91:42:66:97:d8:38:e2:ab:82:59:ec:0b:d8:9a:f5:29:f4:c3:
10:77:a2:34:7b:47:c9:f3:f1:d5:65:45:8e:48:fa:1b:05:34:
3b:2e:91:bf:4d:e9:aa:53:36:43:89:4d:bc:43:14:52:b3:44:
8a:63:b3:3f:99:2e:4a:82:89:37:ac:7d:31:04:e7:8d:df:d8:
86:30:19:ce:bc:0d:7e:68:15:6d:ed:47:50:68:5f:46:8b:09:
85:99:4b:ff:64:a0:12:22:47:12:e0:44:3c:85:ac:d3:df:18:
6a:bc:8b:da:c7:6e:ac:bc:c1:e5:09:f2:3a:8b:b4:cc:b3:98:
49:97:0c:8e:3f:a5:db:73:8d:4d:d9:73:3f:9f:98:9d:41:c9:
19:54:f2:d3:cb:f0:d9:f6:41:73:bf:79:f7:50:43:bb:4d:65:
8a:f5:7f:84:dd:ee:16:e3:f0:05:df:36:0f:25:87:5a:66:fc:
6c:d9:9b:85:ec:14:26:f3:b9:8e:ff:d1:a7:6d:a5:89:e8:c8:
cc:0c:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:34:39 2025 by rpki-client