Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/sLzTCrWLUEvhzhBFjiwiQB9dQHI.roa
File: sLzTCrWLUEvhzhBFjiwiQB9dQHI.roa (raw, json)
Hash identifier: L7g5ZjKrKWHKgEQ+v4IK8RxzHHwwTXKXwceAddKUKTo=
Subject key identifier: B0:BC:D3:0A:B5:8B:50:4B:E1:CE:10:45:8E:2C:22:40:1F:5D:40:72
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: AB
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/sLzTCrWLUEvhzhBFjiwiQB9dQHI.roa
Signing time: Fri 31 May 2024 01:31:50 +0000
ROA not before: Fri 31 May 2024 01:31:50 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 2518
IP address blocks: 111.168.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 01:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: May 31 01:31:50 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=B0BCD30AB58B504BE1CE10458E2C22401F5D4072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:51:48:8f:01:50:8d:e5:ff:d0:aa:02:16:
72:f0:1f:db:45:4e:fe:0b:ad:a1:ea:90:0e:9e:38:
3c:d1:52:d2:c8:c3:3a:aa:ed:82:5b:cb:94:f7:bf:
bb:6d:bb:22:a2:e0:71:a6:7c:23:7e:ce:84:ad:04:
ad:63:5c:ee:b4:5e:71:cf:01:a8:fd:04:87:c9:87:
06:b8:f0:33:50:93:1b:30:38:2a:59:cb:9d:31:92:
9e:ee:e5:18:0b:1b:a3:01:d5:a4:4b:3b:4c:24:4f:
60:1e:07:b9:37:c8:12:1e:50:1c:77:6d:a2:17:2b:
12:01:94:c0:40:e5:a1:b5:36:23:f3:4b:b3:d4:ed:
e6:28:8a:6a:4b:28:11:03:ea:fb:e6:a8:f6:e1:95:
18:17:dc:5e:b3:70:39:d9:12:de:c7:9b:90:09:63:
b6:68:37:0d:3e:d6:dc:f2:fe:18:81:a8:98:6b:c0:
93:7e:c6:ee:7a:4f:ab:9e:2a:c5:01:9d:dd:d2:77:
a7:69:b9:1e:7e:c3:d4:d8:18:61:24:bd:cb:82:6f:
39:86:d8:2e:cd:9c:3f:bb:a2:9b:9a:da:29:ee:0a:
13:48:36:10:93:a4:e5:7f:c9:ac:5b:52:a5:bc:10:
2d:f1:2c:ea:37:19:e5:08:fc:69:d0:29:36:1c:38:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:D3:0A:B5:8B:50:4B:E1:CE:10:45:8E:2C:22:40:1F:5D:40:72
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/sLzTCrWLUEvhzhBFjiwiQB9dQHI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.168.0.0/15
Signature Algorithm: sha256WithRSAEncryption
81:43:9b:58:88:78:71:4a:99:f1:84:a9:29:e7:fc:05:82:f3:
51:42:00:41:a2:fa:b3:61:4d:b4:25:a8:03:dc:b2:87:78:d9:
59:57:d4:05:c2:b1:9b:bb:94:bf:5e:80:18:95:f8:85:7f:8d:
7f:d5:02:dd:64:a1:68:28:fa:3e:a5:cf:5f:7f:24:06:2f:5e:
97:de:88:9b:29:90:de:2d:67:11:21:b6:1e:08:ee:07:55:ad:
a4:04:47:7b:bc:2e:c8:f1:cd:b3:0e:df:cd:ee:a2:41:6b:71:
83:a3:3b:a7:cf:67:f2:34:d3:c1:de:09:24:10:41:25:92:91:
cb:b3:11:b1:79:0b:79:99:c5:31:e9:b8:bd:02:0e:61:7f:3a:
65:05:f0:b2:a2:32:79:4a:53:ed:b6:9b:65:1f:86:30:81:a0:
60:4a:ab:b7:f6:b9:6d:94:ce:90:8f:02:e3:bf:d5:ed:6f:58:
57:58:cf:a0:9e:c3:30:5b:64:50:0c:42:64:f1:0c:69:04:69:
08:40:0a:d1:6e:e3:d4:8a:bc:3e:0c:3c:86:9e:55:e1:29:2d:
fd:69:b1:14:99:0b:f9:f3:4f:c4:7f:02:f3:32:ab:29:3b:b9:
2d:4a:a6:14:e7:a0:33:ae:32:af:12:e1:38:79:6a:bd:dd:44:
0b:d9:a7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:03:53 2025 by rpki-client