Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/QN8m_pTn1yEQ1L_vpEgyKaJt3Co.roa
File: QN8m_pTn1yEQ1L_vpEgyKaJt3Co.roa (raw, json)
Hash identifier: qO5kdHKdcDo0ofVOgD43xmBlEU/ytuFbi9v1jJk1ZPI=
Subject key identifier: 40:DF:26:FE:94:E7:D7:21:10:D4:BF:EF:A4:48:32:29:A2:6D:DC:2A
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0106
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QN8m_pTn1yEQ1L_vpEgyKaJt3Co.roa
Signing time: Fri 01 Sep 2023 01:29:00 +0000
ROA not before: Fri 01 Sep 2023 01:29:00 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2497
IP address blocks: 220.156.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 31 Jul 2024 01:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Sep 1 01:29:00 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=40DF26FE94E7D72110D4BFEFA4483229A26DDC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:f0:fb:63:0a:20:5b:15:d1:64:d8:f9:83:
11:cd:91:b3:2a:c2:bb:59:27:82:a3:8a:68:ab:ec:
87:46:84:af:d1:14:d7:c1:a9:9c:c1:8e:4d:05:28:
a0:86:08:f4:4d:b7:4b:64:cb:bd:08:fd:8f:f5:98:
29:64:80:01:f3:00:40:3d:9b:83:99:ae:d3:16:4f:
4f:46:89:79:22:0f:2b:33:1f:29:eb:8a:58:63:e6:
a2:16:b3:27:c6:2a:04:eb:06:ab:3d:d8:e8:04:0d:
2d:62:40:b1:72:ff:57:5a:e5:bd:10:e6:bd:2f:22:
10:eb:b3:ce:b2:92:e0:0f:45:f4:66:78:40:34:e8:
da:dc:44:e9:d6:85:4c:c4:92:13:a1:8d:94:d1:f1:
bb:e5:54:80:ce:1f:c9:cc:6a:e2:36:f8:cd:21:5b:
56:aa:96:31:12:57:b4:e8:3c:0c:9a:75:00:bd:37:
a3:58:0f:dc:e3:ad:73:ce:e8:be:17:ce:3b:32:8b:
df:0d:2b:c1:21:ee:31:32:3b:71:14:61:c7:46:ff:
52:33:c0:9f:78:f5:0f:9e:5a:47:21:0c:94:1d:80:
e9:13:02:87:71:eb:5b:a1:c0:a0:16:46:78:50:61:
e5:69:bc:fb:6e:85:74:b7:3a:26:6b:6b:39:b4:2c:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:26:FE:94:E7:D7:21:10:D4:BF:EF:A4:48:32:29:A2:6D:DC:2A
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QN8m_pTn1yEQ1L_vpEgyKaJt3Co.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.156.128.0/19
Signature Algorithm: sha256WithRSAEncryption
07:f3:a4:2d:81:f4:2e:9c:14:f5:2e:87:c0:1a:ee:fb:05:d1:
2b:8c:f7:17:4d:14:f5:30:7e:12:9c:65:a0:e9:7c:1b:13:0e:
d5:68:0c:00:ea:a1:19:8b:9e:06:11:60:fc:f3:01:94:76:f3:
da:63:bf:65:c8:d3:20:70:c0:4b:41:8a:ad:b2:1d:28:4f:0c:
f4:70:cd:be:ee:0f:3a:e2:0a:40:ab:eb:57:b1:94:2a:69:85:
4f:7a:c1:9f:55:1e:0f:9d:cf:9e:0f:c9:3c:ef:47:06:98:98:
3a:76:bf:dc:42:3d:71:2d:9a:00:0c:ba:9d:91:9e:29:a9:bd:
fe:35:60:a5:99:86:ff:51:a7:56:1b:f8:a6:d9:c0:77:7d:99:
1f:33:fc:31:1e:e1:fc:42:13:b3:4b:f6:6b:55:34:7a:49:ba:
2f:98:88:3b:de:5e:66:28:a5:f6:88:e1:38:10:f2:c3:4a:4f:
01:53:49:26:ed:38:bd:e4:a4:6d:53:3a:d0:8e:5b:76:6d:b0:
5b:89:aa:1b:0c:86:a1:31:d4:4b:55:5a:96:e7:85:f7:71:c4:
ca:28:56:6c:d8:1f:7e:a2:a0:f4:e3:27:22:45:d6:9c:55:4a:
80:2c:c4:11:6b:1d:7d:c9:03:b5:7b:f7:8a:e6:8a:7f:0c:bc:
3b:8d:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org