Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Zu6CljrMkA3EHpFZsXfGqWbGOdg.roa
File: Zu6CljrMkA3EHpFZsXfGqWbGOdg.roa (raw, json)
Hash identifier: 5iUV/2aWvWNefIS8V3lmeFcXjTglXEx8hVSxYCR/ZSA=
Subject key identifier: 66:EE:82:96:3A:CC:90:0D:C4:1E:91:59:B1:77:C6:A9:66:C6:39:D8
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01CE
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Zu6CljrMkA3EHpFZsXfGqWbGOdg.roa
Signing time: Wed 01 Nov 2023 01:31:16 +0000
ROA not before: Wed 01 Nov 2023 01:31:16 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 9371
IP address blocks: 219.94.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 01:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:31:16 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=66EE82963ACC900DC41E9159B177C6A966C639D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:08:48:75:b9:e1:6f:1b:42:90:a4:39:d2:
a7:7e:e7:1c:b5:31:94:ca:62:62:42:b7:c4:59:dc:
38:c8:d2:84:0e:d8:cc:b4:26:2c:54:d9:a0:84:43:
d9:a9:81:d3:b6:a6:8e:14:61:98:86:fe:d9:5f:37:
bc:11:df:b8:97:27:0c:71:e0:64:cf:11:6a:13:92:
d3:cd:e5:db:c9:bf:2d:6c:16:78:fa:00:cb:d4:76:
79:a2:3f:44:4a:21:05:e2:38:c6:d6:2a:c7:a1:e4:
f4:c5:a1:c1:e9:be:ae:8f:05:a6:d7:57:7c:0f:8e:
03:96:ad:18:f3:3d:c7:ca:39:88:fa:ed:04:0f:65:
ad:2a:83:2e:c0:3e:30:cb:2a:fa:ba:2f:fa:2e:de:
fb:e2:43:25:ab:45:8e:f7:69:69:27:74:de:02:88:
c4:31:20:5a:34:20:33:47:51:f3:51:5b:71:49:2b:
fb:17:53:07:e8:b3:d8:26:4f:a3:69:48:8d:e7:7d:
7e:f9:1f:90:75:a1:55:28:f7:af:5e:0d:5a:9c:61:
8e:2c:a8:59:aa:39:25:00:d3:66:a6:57:9e:ab:5f:
4b:2c:3f:e7:78:f5:12:51:fc:a4:41:67:5d:5d:fb:
67:d9:03:72:2b:1a:e2:a3:71:78:f4:e4:3e:2c:9f:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EE:82:96:3A:CC:90:0D:C4:1E:91:59:B1:77:C6:A9:66:C6:39:D8
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Zu6CljrMkA3EHpFZsXfGqWbGOdg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.94.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b8:f0:96:63:c6:b3:79:ee:b2:29:9b:f5:d6:8c:b8:32:df:f1:
58:2a:fd:d9:12:6f:78:fb:72:0a:47:1b:9e:4d:13:51:27:7d:
99:f2:9e:ae:10:ab:33:ac:e9:1a:d5:11:f6:fe:24:77:77:eb:
fa:79:29:22:8f:03:c5:af:e3:9d:17:2f:84:d5:dc:9e:1c:52:
29:6d:8d:23:41:9d:70:53:52:5f:ee:e5:dc:58:ae:ae:56:1b:
79:1f:5d:c8:c7:b7:05:56:99:5f:6b:35:fe:4c:be:76:b6:21:
fa:db:7f:66:17:cd:25:80:1a:64:ab:73:7e:bf:bd:f1:6d:ec:
9a:af:b6:e9:ad:2f:91:f5:6b:9f:c6:4d:2a:27:50:52:4a:fb:
6e:1d:d2:da:60:5b:19:d4:5f:59:0f:4f:cc:21:7b:07:b1:b9:
f3:5d:6a:4f:39:2b:e0:1f:c5:df:18:08:c4:3d:56:ec:0d:c9:
fe:19:d9:7c:f6:97:8c:be:a1:66:8a:3b:8b:87:7e:73:78:17:
6a:cd:84:d9:9f:8f:9d:9f:b8:2e:20:7a:0c:bb:83:68:89:67:
22:56:8c:31:b9:2a:d9:66:6d:fd:96:84:c3:6d:34:c0:e8:a7:
d5:17:db:bf:87:90:a7:cf:b6:88:91:e9:6a:54:0e:04:71:dc:
04:94:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 03:16:01 2024 by rpki-client on console-fra.rpki-client.org