Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/zGuV7kIlPFeNp6sMuKLeR-q_ThY.roa
File: zGuV7kIlPFeNp6sMuKLeR-q_ThY.roa (raw, json)
Hash identifier: RYoMwyEhlNWijAqjwg9Mj2Z0sByPzioTCJ2dGNpw03Y=
Subject key identifier: CC:6B:95:EE:42:25:3C:57:8D:A7:AB:0C:B8:A2:DE:47:EA:BF:4E:16
Certificate issuer: /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial: 28
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/zGuV7kIlPFeNp6sMuKLeR-q_ThY.roa
Signing time: Sat 01 Jun 2024 06:45:15 +0000
ROA not before: Sat 01 Jun 2024 06:45:15 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 131965
IP address blocks: 175.28.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 01:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Validity
Not Before: Jun 1 06:45:15 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=CC6B95EE42253C578DA7AB0CB8A2DE47EABF4E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:04:e2:12:b7:71:14:0e:71:85:d0:16:76:
c0:26:26:94:67:0e:35:84:e6:4b:8e:a3:93:e4:b1:
19:00:8f:a8:ed:07:0f:98:6f:c6:63:e4:e6:c8:02:
48:41:51:4b:c5:ce:75:ff:b2:3f:fe:a9:57:de:0d:
6f:d2:81:fd:10:c3:47:7c:b3:88:95:5d:fb:da:ca:
ca:4d:36:c5:bb:65:cb:45:e2:ec:fd:09:a7:e4:1c:
a9:c3:f7:54:0c:af:24:95:ba:e4:c6:0b:29:f3:a0:
8c:f4:23:7b:42:fd:39:cd:22:56:01:77:d7:ae:ac:
74:0a:a7:31:0e:46:7a:99:25:18:a5:bf:3b:a6:35:
2d:61:43:9f:c8:bf:53:0c:60:76:2b:60:9a:1c:a0:
7c:99:9c:01:6a:ac:31:0f:21:8b:7f:2f:f5:17:8e:
e8:cf:d4:f5:86:0d:ca:1f:fe:28:5a:4d:21:e8:90:
5c:1c:8a:b5:12:35:7b:df:16:9b:86:06:06:85:79:
c0:5b:6e:70:44:dc:de:f8:df:e9:c9:43:bb:a5:b2:
16:a7:f8:d6:14:c5:59:88:96:c4:1f:b7:bd:52:da:
0e:e4:c9:a0:76:24:de:6d:7a:64:6b:52:7b:7e:8b:
04:84:ac:22:1c:13:5a:ae:8a:b6:1c:eb:c7:88:fe:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6B:95:EE:42:25:3C:57:8D:A7:AB:0C:B8:A2:DE:47:EA:BF:4E:16
X509v3 Authority Key Identifier:
keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/zGuV7kIlPFeNp6sMuKLeR-q_ThY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.28.4.0/22
Signature Algorithm: sha256WithRSAEncryption
26:02:33:ba:f6:53:5d:a9:8e:c1:1b:c9:65:bc:1e:81:b9:23:
20:c1:9b:03:ca:92:85:aa:3a:56:e7:58:c2:1b:c3:a5:eb:9e:
3a:ea:8c:33:de:e9:d7:03:75:e4:07:24:aa:f2:1c:db:49:02:
1d:65:45:e7:6c:04:53:ae:b5:c4:86:c4:8d:ff:8b:2d:61:67:
5f:64:ca:22:d1:33:75:7a:b0:3b:f7:76:cd:23:67:cd:5a:9a:
ae:51:1b:26:de:35:89:3a:61:0d:15:94:76:74:18:05:e1:ce:
32:19:25:50:d1:49:1b:ef:1d:37:b4:b0:03:f6:f1:14:c2:70:
39:bc:1a:9c:c4:57:d3:1e:40:eb:15:24:81:ad:94:49:a9:04:
7a:58:c0:80:92:59:5c:ac:4e:77:6a:ce:52:a1:ac:e3:42:4e:
62:4a:c9:63:c6:57:6a:f3:bb:b7:10:28:5c:96:ba:3f:3f:1b:
59:14:6c:b2:6d:9a:af:d2:d8:f0:ea:fb:03:02:ea:c9:9d:f2:
7d:b8:f2:8d:69:2b:92:47:04:58:ef:c7:dd:68:cd:2d:ca:90:
c2:0a:05:8f:23:f7:57:4f:e9:1a:3b:07:52:0c:7f:dc:9e:a9:
29:0d:f6:c5:5a:85:ae:5f:f5:14:a6:cb:41:d4:94:ab:88:a8:
3e:4b:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:44:20 2025 by rpki-client