Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1L0K--uEjagMXGzg9a25cDxkDQc.roa
File: 1L0K--uEjagMXGzg9a25cDxkDQc.roa (raw, json)
Hash identifier: eGYY9D0ST6wnIMN9BQUAdLSbTLNowAPKDsvtYnL3S6E=
Subject key identifier: D4:BD:0A:FB:EB:84:8D:A8:0C:5C:6C:E0:F5:AD:B9:70:3C:64:0D:07
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01D7
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1L0K--uEjagMXGzg9a25cDxkDQc.roa
Signing time: Wed 01 Nov 2023 01:31:23 +0000
ROA not before: Wed 01 Nov 2023 01:31:23 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 7684
IP address blocks: 49.212.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 01:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:31:23 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=D4BD0AFBEB848DA80C5C6CE0F5ADB9703C640D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:65:cb:13:7e:14:61:95:88:0e:5e:6e:d7:
d2:a1:6d:84:8c:27:23:8a:ed:ca:26:92:63:6b:b5:
49:0a:3a:b2:4f:6f:9a:08:bf:3b:77:76:0a:c0:8b:
37:fd:ef:c9:10:e1:6e:27:75:32:0f:81:0a:3b:f6:
b7:50:ec:d3:92:67:d5:de:72:12:b4:7d:cc:1d:6a:
64:c8:42:a1:47:c0:33:54:02:34:01:f2:f1:b2:99:
3a:21:67:62:17:4f:3c:b3:3d:b2:af:a2:2e:57:63:
be:b4:3e:1b:1c:4e:6c:d1:8a:59:9d:bd:30:40:a3:
e7:4e:d0:79:99:74:43:6c:25:fb:41:52:bd:db:f6:
b2:d1:22:b0:1e:df:97:d5:7e:f4:a8:39:5e:3e:4b:
fc:85:a7:7e:86:74:3e:1b:88:78:26:fd:09:47:39:
f5:71:26:df:fe:a1:c2:3e:a5:14:45:34:fa:dc:8a:
50:b3:ec:7a:88:91:7d:20:e9:38:5c:6d:a6:97:c3:
23:04:95:60:41:aa:b9:c8:4e:fa:ea:74:88:17:99:
9b:e0:c9:ee:cb:21:3d:4e:6d:84:57:52:93:ff:35:
cd:42:63:9f:f4:62:87:5d:b5:cb:9a:46:a5:3c:9b:
6b:5f:ca:7e:e1:8e:f9:94:6e:63:5a:9f:ad:d3:29:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BD:0A:FB:EB:84:8D:A8:0C:5C:6C:E0:F5:AD:B9:70:3C:64:0D:07
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1L0K--uEjagMXGzg9a25cDxkDQc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.72.0/24
Signature Algorithm: sha256WithRSAEncryption
81:91:54:7e:4b:13:c7:6b:8e:fb:1f:17:64:1f:d7:a6:ca:16:
d7:ab:72:6b:b1:21:02:e7:ec:6c:db:d1:f5:2a:51:5c:6d:46:
77:49:b4:aa:f7:89:20:0d:42:18:e1:d1:66:73:e1:25:a1:92:
47:17:49:5d:ed:f4:68:6a:dd:77:8e:7e:1e:d9:fe:e9:28:42:
16:13:e9:a0:07:03:0f:b4:9f:67:d5:d8:1e:7b:5b:4b:61:ed:
ae:ef:ff:15:36:92:39:a5:e3:82:8a:6c:01:fd:65:65:54:0c:
55:4b:db:9a:f5:f8:01:06:8a:b4:71:5e:9a:d3:b7:df:c3:4c:
ae:13:fa:fe:03:1b:0e:80:61:42:f2:91:19:7b:a0:4b:90:db:
5f:eb:bc:da:79:32:34:b6:bc:84:b7:9a:2c:ef:f2:e4:f1:53:
06:80:42:2c:a8:22:29:16:a3:45:49:e9:78:87:fb:e0:b7:72:
fe:90:8d:33:61:ea:a8:48:4f:49:0d:bf:57:f3:29:51:69:b5:
c0:c6:58:49:4e:58:00:67:e5:0b:93:d3:55:1a:65:d1:ed:11:
5a:45:14:48:9f:22:d8:d4:8f:62:1b:64:14:2f:d6:ac:d2:35:
f9:99:72:1a:4e:86:1f:21:d8:44:47:7d:96:45:b9:05:0f:3d:
c8:82:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 04:40:47 2024 by rpki-client on console-ams.rpki-client.org