Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1188/tigC-q50kwakwkdCSi9RKEhaqb4.roa
File: tigC-q50kwakwkdCSi9RKEhaqb4.roa (raw, json)
Hash identifier: ZajccitcqLgaWTGxbzamTcmn7eNstsbbnflNNW0cP7Q=
Subject key identifier: B6:28:02:FA:AE:74:93:06:A4:C2:47:42:4A:2F:51:28:48:5A:A9:BE
Certificate issuer: /CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4
Certificate serial: 02
Authority key identifier: 81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/tigC-q50kwakwkdCSi9RKEhaqb4.roa
Signing time: Tue 01 Nov 2022 07:20:21 +0000
ROA not before: Tue 01 Nov 2022 07:20:21 +0000
ROA not after: Wed 01 Nov 2023 07:15:19 +0000
asID: 0
IP address blocks: 133.252.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4
Validity
Not Before: Nov 1 07:20:21 2022 GMT
Not After : Nov 1 07:15:19 2023 GMT
Subject: CN=B62802FAAE749306A4C247424A2F5128485AA9BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:51:9e:a0:bb:d2:7f:85:9f:70:52:65:c3:
35:7d:e6:bb:0a:5f:b1:a9:4b:13:c4:92:32:78:13:
32:bd:45:b3:b9:fa:e6:6f:e8:30:60:08:80:2d:ba:
bc:8f:c2:d4:e1:bc:46:7c:2d:05:c8:36:b4:ae:d0:
af:35:5d:03:3f:63:f4:e0:73:16:ce:0e:bf:9a:ab:
57:a8:3c:91:4b:88:0a:82:65:6a:be:6d:fa:db:0e:
45:9f:a6:a4:2e:21:19:86:11:05:4d:51:3c:3d:8e:
d9:fc:0b:16:a5:cf:31:20:0d:3d:d3:2d:20:a4:24:
03:40:ac:b2:a1:23:20:9d:2a:87:d5:8a:8f:18:6b:
c5:f5:ae:8d:1d:30:49:36:4c:48:6a:d8:55:f4:7a:
dd:5e:b6:04:49:e2:1b:2f:f9:be:42:c8:60:6f:db:
bd:9d:63:0d:c3:8e:86:11:19:a4:fa:6c:68:98:ad:
a2:e2:6e:a0:88:a8:16:b5:93:15:51:c3:8e:dd:4d:
70:ba:50:98:e2:5f:f7:4d:54:5d:10:c3:1d:66:35:
a5:aa:30:d0:ed:62:dd:35:63:c9:c7:4c:36:49:73:
15:7f:4a:c2:a8:37:6d:da:50:51:27:8d:5a:fd:aa:
10:70:2b:cb:a9:8c:ca:a2:ea:30:00:3c:11:28:66:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:28:02:FA:AE:74:93:06:A4:C2:47:42:4A:2F:51:28:48:5A:A9:BE
X509v3 Authority Key Identifier:
keyid:81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/tigC-q50kwakwkdCSi9RKEhaqb4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:c6:29:91:d6:ae:85:3e:7e:86:d4:3c:91:32:e7:c1:56:36:
21:c4:37:27:ac:8c:cd:78:f5:d0:c5:f6:ab:78:98:f8:6c:b0:
dd:03:d9:b6:28:32:ac:72:67:52:6b:1f:ce:f8:70:a1:7d:ec:
0f:f3:79:f6:27:59:72:95:57:69:6e:a8:17:ae:ed:57:5f:8d:
a4:01:fa:02:ae:51:7a:11:de:c0:79:13:c6:4b:fc:84:4c:2a:
38:20:27:12:66:06:6d:51:b2:55:85:e1:9f:d4:41:df:02:d7:
7c:52:c6:de:4e:2d:57:fd:5a:5f:e6:d8:98:05:0d:57:5d:1e:
0d:d0:f3:86:a8:84:91:f3:7c:bd:65:c4:25:09:c0:6b:d3:18:
f0:10:79:1d:49:bb:39:1d:86:86:87:9c:70:d1:76:7c:8a:82:
4e:f8:7c:ff:65:7f:48:84:15:3a:84:14:ea:7e:11:54:ca:58:
60:02:12:4f:ea:35:70:74:47:b6:18:68:1a:53:eb:73:63:a1:
04:32:a6:4a:2e:5f:bc:01:1d:31:5d:cb:ea:82:22:67:31:3f:
65:ec:12:4d:87:8b:4d:4b:38:48:af:be:ba:24:95:0d:75:f1:
01:e4:e1:47:9c:e8:ea:89:9f:39:90:81:8f:d4:14:60:0f:34:
c5:28:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 07:36:08 2023 by rpki-client on console-ams.rpki-client.org