Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/D2r3mE_un7duh2iFidq0cL0NrOM.roa
File: D2r3mE_un7duh2iFidq0cL0NrOM.roa (raw, json)
Hash identifier: FQppwe/D7uN5mksA85/+lXBXz3hoyjHDki1QcmBoF+k=
Subject key identifier: 0F:6A:F7:98:4F:EE:9F:B7:6E:87:68:85:89:DA:B4:70:BD:0D:AC:E3
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01A5
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/D2r3mE_un7duh2iFidq0cL0NrOM.roa
Signing time: Sun 01 Oct 2023 01:28:32 +0000
ROA not before: Sun 01 Oct 2023 01:28:32 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9371
IP address blocks: 133.167.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Oct 1 01:28:32 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=0F6AF7984FEE9FB76E87688589DAB470BD0DACE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:9e:25:a3:83:35:e0:16:69:a4:ce:f9:1f:
ae:92:6c:78:67:db:72:ae:ba:c6:75:45:3d:9a:f4:
d9:af:f8:9e:37:8c:62:fd:47:8b:1e:10:18:00:53:
f7:06:73:d4:2b:b5:c4:eb:83:56:0f:71:88:b7:a7:
e5:65:f8:d4:80:60:09:a0:a3:26:02:e3:e3:8b:6c:
bb:4d:89:68:0b:50:98:bb:23:56:1d:fb:e5:90:7f:
00:18:59:f3:ef:d1:04:cf:26:2b:85:44:6b:a7:dc:
b3:32:46:b1:66:40:d2:a4:ee:49:17:67:ec:4a:46:
27:5d:af:d6:01:c2:45:bd:8d:8f:e9:5b:73:6e:6b:
dd:6e:ab:40:c5:2a:8e:89:c6:01:01:32:7e:ae:0a:
a7:1b:68:78:81:24:3b:0c:ec:59:c8:06:61:c4:1a:
0e:85:10:dc:0b:23:92:59:46:6b:24:88:4c:e5:9f:
46:de:7c:0c:3a:bd:72:22:7d:84:b1:cd:ea:7b:58:
5a:8b:bd:b8:20:5f:b3:8a:88:93:24:47:59:c9:0d:
2f:de:09:eb:1b:2c:c6:b1:d5:56:38:7c:f4:66:96:
a2:41:c2:69:8a:4c:31:3d:d5:ed:4e:4b:1f:00:55:
32:41:1b:19:29:6b:4f:91:53:a5:d5:61:05:21:e5:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6A:F7:98:4F:EE:9F:B7:6E:87:68:85:89:DA:B4:70:BD:0D:AC:E3
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/D2r3mE_un7duh2iFidq0cL0NrOM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:33:ed:3e:b8:96:6d:c5:16:47:99:eb:02:0b:a0:ee:14:b0:
3a:e1:a6:d2:65:89:8c:60:2a:eb:89:d0:4b:92:6b:5f:65:91:
dd:34:9e:3a:d7:72:a6:ab:a0:45:63:0a:06:11:bc:d1:a1:48:
b7:7c:12:9e:1e:be:15:6a:83:d2:75:6b:a5:81:68:b8:5a:5b:
58:da:ca:40:c0:97:84:a6:e3:01:20:b5:f6:ea:92:9f:55:ec:
ee:0d:78:24:2c:96:c6:c8:a5:53:4d:4b:0b:04:9d:dd:2c:be:
15:ec:36:c5:a3:28:c4:4c:01:2a:9f:58:85:99:21:93:3d:cd:
30:d0:0f:1d:56:3b:62:1a:34:62:a2:e1:9f:ed:96:9d:a4:1b:
9a:b3:e1:2b:f3:b9:00:21:0d:ae:5e:07:80:9f:8d:38:30:c2:
07:32:b5:bc:27:0e:3a:94:a0:93:fd:6d:17:d9:0b:7b:95:fb:
f2:da:8c:71:4c:f6:37:00:4f:ba:70:8c:51:5b:4d:e1:46:2d:
7c:c1:f4:dc:5f:8a:df:bb:84:97:27:da:72:eb:19:21:0f:d3:
b3:5f:91:92:66:39:3b:eb:df:77:de:f6:dc:d5:5e:46:0e:aa:
17:1e:b2:68:8c:fe:10:a5:fe:b3:0a:a5:4e:24:e8:13:2c:a6:
14:fe:6e:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org