Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/np9qLgfMz5OALy5iB7DOxVPuvDw.roa
File: np9qLgfMz5OALy5iB7DOxVPuvDw.roa (raw, json)
Hash identifier: 0rW4WfX0l2q6Dsgb/ksbn6+9crD6FylqzD2YNZd5RDk=
Subject key identifier: 9E:9F:6A:2E:07:CC:CF:93:80:2F:2E:62:07:B0:CE:C5:53:EE:BC:3C
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: 88
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/np9qLgfMz5OALy5iB7DOxVPuvDw.roa
Signing time: Thu 13 Apr 2023 09:53:24 +0000
ROA not before: Thu 13 Apr 2023 09:53:24 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 18126
IP address blocks: 202.142.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: Apr 13 09:53:24 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=9E9F6A2E07CCCF93802F2E6207B0CEC553EEBC3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:9d:86:e8:c8:b4:59:1e:76:dc:36:b1:2e:
6a:fc:2b:ac:9f:74:79:6d:e9:b2:13:46:06:0f:53:
98:e1:a8:bd:57:04:2e:04:1b:64:2d:ca:02:6c:d8:
12:0d:25:97:1b:b1:ec:b0:bb:48:22:27:7c:6f:e9:
1d:ae:b9:e9:37:81:d9:66:d5:7e:15:2d:3f:c1:7e:
94:2e:92:57:c6:84:b3:6f:e0:69:b8:32:39:ff:98:
66:9c:9a:57:b5:63:e2:54:8d:e2:6e:ae:93:20:7c:
ba:69:8c:65:bf:e5:94:8b:41:59:96:fe:10:42:64:
77:89:3c:84:33:ca:d0:31:42:16:3c:5e:e0:f1:42:
94:27:de:87:fa:a5:75:50:7a:a0:03:ac:e1:4e:00:
7f:8e:9d:da:e0:13:53:9c:37:59:d5:c4:9f:a5:c6:
57:48:96:96:5c:a8:66:ae:55:a1:e9:1f:e7:0a:4e:
b9:65:7f:18:c6:a1:e6:b0:a7:cb:92:e5:94:7e:d0:
0f:fe:69:72:4f:9a:cf:28:e2:d9:b9:26:c1:5c:56:
7b:c8:1e:ec:d7:47:9c:f5:6c:ac:99:fb:f6:f9:61:
36:02:d6:0a:fc:ab:cb:8f:40:38:a1:2b:55:60:8e:
08:5f:a4:0c:9c:32:b0:01:38:e1:0c:4a:35:bb:3d:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9F:6A:2E:07:CC:CF:93:80:2F:2E:62:07:B0:CE:C5:53:EE:BC:3C
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/np9qLgfMz5OALy5iB7DOxVPuvDw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.142.224.0/19
Signature Algorithm: sha256WithRSAEncryption
09:ec:47:d6:97:a6:79:a7:b5:59:f5:6d:2b:4e:ff:dc:c9:53:
1c:7a:33:01:2d:6d:73:4e:f1:f5:79:4a:59:dc:4b:71:7d:51:
7c:05:4c:fa:13:ca:cd:1d:87:d6:a2:3f:35:c7:78:60:d9:d6:
4a:06:7d:cc:b5:08:31:c3:23:bd:aa:b3:84:42:bd:38:3b:27:
a8:b4:df:0b:ce:3f:62:96:fb:2a:f5:97:56:d6:bb:18:5c:c8:
cd:05:a5:76:9f:94:ca:ce:21:1c:f7:ab:78:9a:67:e2:04:7d:
80:5a:e0:6e:a7:95:0a:c4:bc:d4:1b:f5:ed:8d:c9:49:57:de:
0b:57:aa:a6:51:1a:4e:77:f3:b5:a5:b0:08:c1:48:51:24:34:
af:f9:22:8c:fb:ef:01:e1:47:29:84:25:5d:79:2f:a0:62:79:
5f:70:7c:f1:a7:f3:fb:3a:9b:2c:2d:b4:54:6a:91:81:0c:e9:
a0:77:36:7a:b1:1e:fb:96:2f:5f:88:36:c8:e3:36:bc:c0:b2:
ea:17:d0:3d:0c:cf:4a:b6:0e:c9:39:55:b1:44:32:78:4e:74:
59:58:2f:de:59:60:33:22:6b:b5:81:8d:d8:05:a4:78:8a:66:
6d:13:5f:54:94:ca:78:cd:a3:a9:32:d6:31:01:0b:ad:6f:fc:
5f:83:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:10 2024 by rpki-client on console-fra.rpki-client.org