Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/A4qvRLq2DEHaOvzXPM36hYnSv0k.roa
File: A4qvRLq2DEHaOvzXPM36hYnSv0k.roa (raw, json)
Hash identifier: dOVnmQkWtTkGXU9TSphORpW6U/6tvcps64orLr4/Ecs=
Subject key identifier: 03:8A:AF:44:BA:B6:0C:41:DA:3A:FC:D7:3C:CD:FA:85:89:D2:BF:49
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0224
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/A4qvRLq2DEHaOvzXPM36hYnSv0k.roa
Signing time: Mon 01 May 2023 01:37:56 +0000
ROA not before: Mon 01 May 2023 01:37:56 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 106.180.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:37:56 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=038AAF44BAB60C41DA3AFCD73CCDFA8589D2BF49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:52:46:36:b7:10:6c:67:ff:7f:9c:e3:72:
47:35:c0:19:7c:e1:39:6c:24:04:7d:74:4d:c7:a4:
8b:47:82:b8:aa:2e:8d:a9:26:fe:02:44:9b:65:3b:
ad:36:8f:52:a0:30:15:15:84:da:0e:2f:da:ff:c6:
d6:18:19:7c:aa:b4:60:af:35:df:fe:5a:85:d3:37:
ae:25:16:64:ff:59:59:9a:99:ca:e0:1c:6d:11:50:
62:4e:50:34:f1:d1:36:01:75:06:71:2c:57:98:82:
ec:96:8c:99:58:95:6d:05:03:ef:46:7d:de:0c:f6:
1b:b1:76:ab:f5:ef:6e:63:b3:de:38:87:c6:36:ce:
cc:73:40:db:70:24:40:30:0d:d3:c4:a4:8d:45:f2:
8b:c5:97:07:0c:1f:3f:f6:21:72:ae:db:7d:49:f4:
96:88:82:64:b4:b8:2e:d1:32:02:9d:f5:6f:f1:6c:
a3:7d:5c:78:6b:a2:64:65:c2:42:ee:cc:a5:fd:3e:
75:ec:cf:1d:4a:b4:2b:c6:f0:17:70:0b:bd:e7:7f:
78:c3:c7:7c:c7:87:28:be:7c:37:ef:e2:4c:bd:05:
9b:1e:d2:72:3a:a2:57:7f:c7:6a:cb:ee:f6:88:6b:
b8:c6:1f:3a:6b:ad:79:5a:03:62:b2:fe:bb:63:e8:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:AF:44:BA:B6:0C:41:DA:3A:FC:D7:3C:CD:FA:85:89:D2:BF:49
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/A4qvRLq2DEHaOvzXPM36hYnSv0k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
106.180.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:a8:be:ed:67:72:47:f1:bc:94:ef:0c:df:f3:c1:52:21:46:
3c:77:36:41:3f:95:33:29:92:3f:38:26:3a:60:30:f4:15:ad:
aa:8e:28:4c:99:92:00:aa:22:1a:e5:e5:36:2b:37:80:cf:37:
26:38:00:47:39:43:fd:39:2e:87:40:0d:f2:6a:6c:ff:ad:d1:
f8:2d:88:48:62:45:94:b1:76:50:d0:98:f3:a9:2b:06:fc:39:
af:3d:61:c7:47:fb:2c:74:9c:5e:f4:6e:d6:f4:91:00:ac:22:
47:69:d9:a2:8a:00:8a:3f:96:cd:68:97:9f:fb:69:b3:f8:62:
1c:a6:8f:94:cf:0e:2b:0b:ff:75:05:c7:85:58:68:70:52:27:
95:1b:ae:ed:20:c0:35:d1:5d:cf:fc:15:09:a1:bf:f9:e2:5e:
76:64:87:e2:ab:8e:cc:a2:92:97:f1:5c:06:41:ef:41:92:14:
5b:7a:de:73:a7:bd:18:f6:62:90:75:57:fd:60:9d:6b:dd:2e:
ae:45:2b:6e:5b:23:f6:fd:ae:2b:a7:1f:fa:d1:fb:d9:d5:71:
60:73:54:45:d8:5e:28:14:b7:f9:59:92:79:d7:f8:ba:6c:80:
6d:0a:52:2c:be:97:70:69:2e:b7:66:23:2d:30:54:60:48:ac:
4e:bb:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org