Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/hIf3mwmnnZG160bxMRyRuvSXtWo.roa
File: hIf3mwmnnZG160bxMRyRuvSXtWo.roa (raw, json)
Hash identifier: Y6deJTKwAPMhoLlejqtT5MG4WSWf/D94pOB8mRZUxlo=
Subject key identifier: 84:87:F7:9B:09:A7:9D:91:B5:EB:46:F1:31:1C:91:BA:F4:97:B5:6A
Certificate issuer: /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial: 1B
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/hIf3mwmnnZG160bxMRyRuvSXtWo.roa
Signing time: Mon 07 Nov 2022 05:34:57 +0000
ROA not before: Mon 07 Nov 2022 05:34:57 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 131921
IP address blocks: 157.120.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Validity
Not Before: Nov 7 05:34:57 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=8487F79B09A79D91B5EB46F1311C91BAF497B56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:b9:6b:75:b3:38:3f:84:b9:19:70:62:6e:
4f:14:49:30:b9:28:58:4f:64:39:d5:0d:d3:fe:5e:
2e:c0:0d:59:e8:c1:34:6b:42:95:a9:a8:44:5f:65:
ce:34:95:31:22:4e:44:1e:4c:ee:47:22:30:27:e1:
41:78:bd:79:e0:17:1e:44:29:ed:d3:4f:22:5c:af:
34:ed:3a:b3:62:10:61:c5:8b:55:8e:a2:70:d0:75:
f5:a1:6a:47:eb:4e:ef:22:25:7f:1f:92:02:58:7b:
de:86:56:d5:a9:09:2a:94:4b:ab:e8:29:0f:9b:61:
a1:39:2e:9b:50:2e:56:b8:eb:bd:b0:39:65:75:75:
37:93:ab:cc:c4:01:4f:fa:cb:3a:00:66:8e:12:87:
9c:57:57:e7:fe:6b:e0:aa:48:ba:4f:9e:4d:c6:c2:
54:19:b7:bf:a8:ef:40:92:65:00:97:af:48:94:64:
ad:9d:56:04:bc:eb:f1:07:84:8e:e8:6e:8f:31:c8:
0f:72:b0:cc:e0:30:28:3e:63:23:d8:40:33:29:7b:
88:d9:a1:d3:c5:23:1e:d0:ca:c7:9e:94:62:61:a0:
d7:23:21:70:4d:ff:46:2d:92:05:71:ac:75:2b:54:
f6:f4:76:dd:52:f1:e8:10:a4:7a:b1:10:00:e0:e2:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:87:F7:9B:09:A7:9D:91:B5:EB:46:F1:31:1C:91:BA:F4:97:B5:6A
X509v3 Authority Key Identifier:
keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/hIf3mwmnnZG160bxMRyRuvSXtWo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.120.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:92:cd:4d:05:fd:84:0d:83:17:35:d3:c5:d5:75:c3:35:6b:
7d:d1:23:99:95:9f:00:1c:e8:0c:df:fc:4d:08:41:55:9f:56:
6b:37:c3:3e:a9:fe:0a:2a:a5:b5:6a:50:f6:c2:0c:a0:05:f1:
a6:f9:7e:b9:a1:39:a1:4c:57:04:d2:f3:c3:9b:87:04:25:99:
6e:ce:96:dd:94:ce:58:fb:70:09:e1:89:66:dc:55:2b:40:a9:
4b:18:16:d2:63:30:b6:90:49:25:39:cc:b5:b7:bb:f5:95:3d:
f2:23:cf:98:4b:5f:ca:a7:97:30:5b:19:90:b1:82:95:34:cc:
77:fa:cc:9a:5c:44:23:aa:c4:38:1a:a9:51:30:cc:29:e2:13:
0a:40:61:b6:50:7f:c7:23:7d:3f:ff:0e:0a:13:3e:ff:64:72:
09:55:ad:41:62:c6:90:0b:14:6c:b1:89:94:99:b4:9a:95:9c:
9a:a6:34:e4:1f:95:10:9d:1e:92:1b:2b:96:4f:ea:fa:a2:a7:
58:c7:53:03:6b:a6:b4:b5:27:87:d8:e1:3b:15:ac:f9:03:a4:
22:26:1f:ba:40:47:06:60:08:2f:1e:4c:95:0d:5b:a3:06:b7:
c1:ed:c7:e4:8c:b8:97:a1:03:29:49:19:65:4c:b6:50:03:23:
f0:9c:08:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:39 2023 by rpki-client on console-fra.rpki-client.org