Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/vPt57Vh3O-PMPiK6ZF3gvdYY7cs.roa
File: vPt57Vh3O-PMPiK6ZF3gvdYY7cs.roa (raw, json)
Hash identifier: FYeEGRmM00upKCTNo5dQpLtzmSsJu2YvIyfkwCxRNuY=
Subject key identifier: BC:FB:79:ED:58:77:3B:E3:CC:3E:22:BA:64:5D:E0:BD:D6:18:ED:CB
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01D0
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/vPt57Vh3O-PMPiK6ZF3gvdYY7cs.roa
Signing time: Wed 01 Nov 2023 01:31:17 +0000
ROA not before: Wed 01 Nov 2023 01:31:17 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 9371
IP address blocks: 49.212.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 01:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:31:17 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=BCFB79ED58773BE3CC3E22BA645DE0BDD618EDCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:b3:bd:12:c9:06:cc:1a:68:89:32:97:55:
10:7d:07:8c:3d:c8:e1:55:9c:2f:92:83:10:06:20:
45:ed:a9:40:fd:78:62:93:06:44:65:34:a4:9b:8f:
a2:c4:5e:f6:38:d1:29:00:05:f2:3f:a0:dd:d2:1e:
77:7b:da:7c:37:f1:44:18:63:39:f3:0e:13:6a:35:
6a:be:28:b1:0c:8c:de:1d:48:fa:fb:90:3d:2d:ed:
a1:7f:e9:e4:5e:c3:2c:a5:9a:0c:25:45:09:78:c8:
b9:9e:64:a8:00:13:92:81:6c:6c:c9:3e:9e:e5:6c:
83:c8:04:8e:1a:c2:1a:e7:43:7e:c5:5b:73:b4:b1:
51:83:b9:ee:f7:8f:4c:5f:de:aa:a8:e9:1d:10:2e:
06:4b:04:e8:53:f0:8e:11:78:d9:75:d7:e2:35:5f:
e6:94:97:7a:fc:f3:c0:68:d3:50:71:a6:39:e8:3d:
2f:e9:b9:ad:7b:5f:5f:05:c1:80:ad:eb:3b:95:bd:
71:d7:7e:bf:f2:03:b3:c0:ab:f7:40:b2:c3:44:2d:
fb:5e:03:fe:55:0b:82:99:f4:e2:df:1c:86:95:29:
84:57:9a:84:36:3d:30:96:58:01:ab:f4:97:b8:73:
ca:ea:ad:f8:f9:fd:0a:4a:54:fe:76:17:36:0f:c4:
ea:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FB:79:ED:58:77:3B:E3:CC:3E:22:BA:64:5D:E0:BD:D6:18:ED:CB
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/vPt57Vh3O-PMPiK6ZF3gvdYY7cs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:f4:f0:c3:31:4e:7e:a8:35:be:4e:91:31:03:72:9b:fa:75:
c7:6a:c2:41:42:24:7c:0a:87:f6:9a:58:b0:bb:5e:45:06:5e:
1e:4b:a6:1d:1b:66:47:7a:99:df:50:76:84:21:99:93:9a:0b:
de:c3:27:91:67:e1:95:74:6e:3b:4f:cf:32:18:87:80:a8:f2:
56:09:7f:cc:0f:bb:54:97:d2:a7:70:fc:b7:65:fb:dc:76:d9:
4c:0b:ef:8c:e3:12:6e:85:20:47:9e:e3:bc:d8:b5:42:d4:01:
0a:b0:e5:d4:45:c2:0b:a3:95:27:bd:ea:a7:e1:b5:18:37:b9:
61:17:c5:cf:71:d1:d1:77:99:86:4c:0e:55:57:cb:4a:84:75:
c6:e8:c4:20:4a:70:c4:77:1e:4a:3d:53:d9:74:78:53:cf:b1:
ff:64:34:f4:9f:92:67:60:65:39:ac:3d:53:5c:d2:1a:a9:50:
47:e8:24:85:d8:c9:e6:cf:82:26:f5:78:a6:6e:5b:e9:13:f4:
b2:67:b2:42:94:ff:6e:62:3e:f2:9e:7a:4b:e3:f1:fa:d8:ae:
51:a3:ec:b3:03:bc:2f:29:2b:1b:5d:8e:f8:8e:53:8f:97:ca:
1a:c2:a7:59:75:8c:e3:30:32:d8:4c:23:80:18:4b:e2:ac:0d:
03:a1:41:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 30 03:16:01 2024 by rpki-client on console-fra.rpki-client.org