Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CgzLYMy0SxH7Aiw93C84ivUtTJQ.roa
File: CgzLYMy0SxH7Aiw93C84ivUtTJQ.roa (raw, json)
Hash identifier: XVlb/mut0yMiSPs7c9S4kBEkj9NNaJeR/9xiTsk41RQ=
Subject key identifier: 0A:0C:CB:60:CC:B4:4B:11:FB:02:2C:3D:DC:2F:38:8A:F5:2D:4C:94
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 019D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CgzLYMy0SxH7Aiw93C84ivUtTJQ.roa
Signing time: Mon 01 May 2023 01:30:35 +0000
ROA not before: Mon 01 May 2023 01:30:35 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 121.109.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:30:35 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=0A0CCB60CCB44B11FB022C3DDC2F388AF52D4C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:f1:2c:6d:18:6b:22:ea:be:11:96:72:c5:
fd:0c:cd:6c:3e:85:39:19:6f:3b:a5:12:80:71:5d:
2e:aa:41:d4:65:6a:d8:55:dd:46:35:73:58:92:c9:
b5:9e:e7:09:cd:e3:a8:7b:49:76:d9:ca:ac:cd:c8:
d5:dd:2a:6b:7d:c0:52:b9:48:63:a8:7e:13:71:6e:
39:7f:a9:3c:c5:cd:4c:00:f6:47:a2:69:d0:a2:d4:
01:75:ce:40:89:54:0b:b2:7b:0b:d0:48:81:9c:14:
d0:cc:67:c4:26:52:af:aa:68:38:c1:b9:84:77:90:
c2:ea:80:c3:b2:db:a6:93:7c:6f:ab:14:44:bc:cc:
5e:a2:01:57:b9:22:eb:08:9e:11:b5:af:84:d9:cf:
d8:00:a6:00:d8:3e:63:e9:99:63:6e:86:07:ae:ea:
4a:77:01:4b:aa:c1:03:9e:27:25:a7:0a:8e:82:e0:
0d:37:8b:f3:09:10:97:c6:1a:39:99:0c:c7:5f:83:
c2:ea:2d:3e:ab:87:4a:79:84:33:88:cf:68:77:8b:
43:d1:1d:14:de:9c:d7:10:aa:25:15:32:28:d5:2d:
5b:96:2f:8c:bd:41:93:fb:43:5c:90:c8:cd:4f:23:
94:7b:48:b5:79:5b:8f:1b:8e:be:c2:70:2a:4b:51:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0C:CB:60:CC:B4:4B:11:FB:02:2C:3D:DC:2F:38:8A:F5:2D:4C:94
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CgzLYMy0SxH7Aiw93C84ivUtTJQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:41:ee:20:c9:12:4a:f6:cc:89:dd:39:68:e9:8d:08:9e:1b:
8f:c8:97:25:73:66:ef:0a:f8:a2:ff:46:26:96:af:5e:1b:55:
0e:c1:d4:20:57:d0:09:a0:85:15:bf:86:ee:3e:e6:ce:a7:98:
c4:8f:cc:b5:1d:ba:c3:6f:67:a6:19:53:84:4b:82:ed:15:8e:
b0:ef:e5:f3:2a:f6:ab:4b:34:8b:8b:c6:57:8a:dc:d9:bf:90:
3f:28:b9:3b:a2:ad:31:67:b9:87:c9:bb:6f:cb:92:72:0f:c1:
a5:62:80:2a:63:04:82:46:86:d4:d4:4c:dc:33:1c:47:59:51:
a2:9a:f6:c6:27:23:65:70:9b:d5:e2:eb:db:7b:69:8e:c4:89:
af:1a:1f:ed:22:a8:7e:7c:f4:1a:bd:ca:9b:6f:38:b2:37:4b:
2f:52:36:2d:6a:ca:1f:6b:d6:ac:eb:cc:1c:09:0c:f5:f1:c5:
23:44:8f:e3:77:0d:df:68:bb:c0:e0:2d:9c:56:ff:43:a4:d2:
1a:89:35:b0:ef:d9:f0:13:47:76:f5:4c:0c:4b:ad:c2:ae:8f:
b1:bf:4e:f3:59:49:a5:50:af:94:d2:a7:b1:ec:15:6b:90:19:
a2:da:e9:5f:32:cd:16:85:7e:10:ca:97:f0:d4:fe:da:d4:b5:
3e:c3:a3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:33 2024 by rpki-client on console-fra.rpki-client.org