Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tAfX8mr87puMhmzDElZRin_5r0U.roa
File: tAfX8mr87puMhmzDElZRin_5r0U.roa (raw, json)
Hash identifier: s+GYVbgvz9+dLmn54Bc9L/UzJYusD6+DdGQYnU/JC/4=
Subject key identifier: B4:07:D7:F2:6A:FC:EE:9B:8C:86:6C:C3:12:56:51:8A:7F:F9:AF:45
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 029B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tAfX8mr87puMhmzDElZRin_5r0U.roa
Signing time: Tue 30 Apr 2024 01:35:14 +0000
ROA not before: Tue 30 Apr 2024 01:35:14 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:17:f90::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:35:14 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=B407D7F26AFCEE9B8C866CC31256518A7FF9AF45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:59:c9:f4:61:49:47:ca:da:f3:2c:c0:71:13:
88:c3:98:e3:f4:dd:ef:5f:35:55:d9:5d:27:9e:fa:
af:8b:a6:0c:36:55:b7:bc:69:8a:6b:42:ab:36:6f:
fc:d3:6f:e1:31:22:7f:0b:31:bf:19:ea:d7:e0:ac:
d3:d1:d0:4c:9e:40:23:71:d9:10:a4:5e:85:f3:40:
e4:38:cf:17:50:fc:11:99:72:76:b9:5f:dd:34:7a:
45:2a:ac:08:13:48:43:b0:38:3a:0d:9a:a9:c3:c7:
ba:d3:62:02:06:3b:f1:91:4d:f3:12:92:d7:ec:0d:
dd:9f:bb:4b:b5:c1:cd:ce:2f:35:66:b2:ca:56:1b:
60:cf:a3:8e:1b:33:74:83:65:b7:5c:da:9e:99:22:
5b:88:ec:f1:82:62:a3:96:1a:e2:da:9b:88:e3:bc:
6c:d4:9a:e8:86:99:2c:9d:36:29:d5:b2:4e:61:8e:
3c:f0:11:4b:da:59:f4:f3:aa:18:ce:59:9d:ce:ea:
25:d8:7f:ef:ca:2d:5a:21:47:07:ca:df:cd:45:b2:
0a:91:42:b6:24:1b:c7:66:86:76:f6:21:e6:68:63:
7a:3d:fd:fc:5d:68:a9:6b:de:75:22:63:28:ac:1f:
37:6d:81:09:3b:85:92:92:f5:38:8d:93:4a:e7:b8:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:07:D7:F2:6A:FC:EE:9B:8C:86:6C:C3:12:56:51:8A:7F:F9:AF:45
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tAfX8mr87puMhmzDElZRin_5r0U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:17:f90::/44
Signature Algorithm: sha256WithRSAEncryption
69:08:17:17:20:4e:12:a0:66:b1:f1:99:a1:54:c2:b4:62:33:
95:c3:c8:d0:56:a9:b6:70:f0:97:1f:c8:74:93:eb:81:45:73:
eb:8d:f1:7e:37:b4:c9:06:95:49:3e:d4:58:45:d5:bf:f0:bf:
42:03:92:bc:29:6d:e0:5d:41:d1:e6:f1:86:ee:4b:3b:fe:b8:
4f:89:31:32:37:d4:d5:05:6e:33:e3:df:47:19:20:82:bd:dc:
5a:53:7c:10:9d:9e:4a:b8:56:f5:2e:92:47:91:5c:a8:ca:95:
c1:c9:c0:fc:45:7b:ea:ca:c2:ec:e1:5b:e3:5e:37:14:a9:8b:
c4:46:ac:3b:44:c1:76:d1:30:9d:6c:2f:5b:45:38:57:9e:39:
12:1d:09:2e:01:8c:d4:7b:f6:c7:ba:6e:0d:8b:c5:06:bd:3c:
99:67:37:e3:b4:fc:20:3a:0e:a9:7a:4c:88:14:b0:e8:2d:8d:
13:af:57:4d:21:e5:b3:21:59:0a:22:47:8a:6a:d5:b0:3e:55:
3e:6d:94:a7:ad:31:8e:c4:d3:be:2a:e5:10:23:08:45:53:bb:
a9:03:71:e0:38:a0:95:12:ec:ef:9c:15:c0:1b:f1:8f:c8:1d:
e9:e3:fb:7a:2b:20:e2:ef:e8:9d:63:15:5f:9c:dc:68:45:f8:
5d:01:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 05:42:35 2025 by rpki-client on console.sobornost.net