Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/R90ESLwRYwfwZ-qNrpD_ojoKxG4.roa
File: R90ESLwRYwfwZ-qNrpD_ojoKxG4.roa (raw, json)
Hash identifier: 6ureyUmVjk5dDKo2vFYVcUtEp93DS1kKv99jHMJIvtU=
Subject key identifier: 47:DD:04:48:BC:11:63:07:F0:67:EA:8D:AE:90:FF:A2:3A:0A:C4:6E
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 01B1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/R90ESLwRYwfwZ-qNrpD_ojoKxG4.roa
Signing time: Mon 01 May 2023 01:32:05 +0000
ROA not before: Mon 01 May 2023 01:32:05 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 124.212.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:32:05 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=47DD0448BC116307F067EA8DAE90FFA23A0AC46E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:d6:95:ee:cc:83:e6:58:49:cd:7b:59:7d:
17:1a:b7:c6:d8:1b:b2:54:1f:95:92:2c:3e:f7:4c:
38:08:fd:41:4e:75:4f:c4:55:d0:1b:67:13:3a:ba:
da:64:4e:51:2b:b1:4c:4d:1b:7e:67:67:ea:4b:7b:
59:9b:68:12:c3:24:87:a6:6c:88:fa:14:2f:3e:1c:
d4:dc:96:95:c3:e8:65:71:2d:fd:4a:22:95:aa:da:
9b:a2:28:74:7d:e6:c8:53:5d:08:df:ad:27:89:5e:
de:8d:59:e3:26:e4:2b:bf:d0:bd:3a:9b:0f:16:5c:
2c:ba:43:a6:5a:cf:9b:b9:d9:e9:b6:37:4a:66:c6:
47:5a:ce:81:6a:7c:fc:31:c1:02:b3:46:73:fc:a3:
1d:b5:75:f1:8e:23:ba:c5:09:30:7a:2a:21:03:af:
24:85:6c:77:f9:f5:9d:69:8f:5b:49:ca:d5:ff:a5:
b4:84:cc:a1:96:42:da:a9:ca:bf:70:be:09:d6:8f:
11:91:b5:b2:71:94:ad:08:fc:9d:08:b5:35:0c:a5:
3f:a9:93:93:0f:86:0d:bf:83:bf:07:0d:ac:6a:84:
30:d4:73:19:c0:05:e9:8d:79:ec:58:9a:04:22:ff:
f9:e4:17:89:46:cf:5b:43:e0:74:c6:52:5d:a0:92:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:04:48:BC:11:63:07:F0:67:EA:8D:AE:90:FF:A2:3A:0A:C4:6E
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/R90ESLwRYwfwZ-qNrpD_ojoKxG4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.212.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:a1:8f:71:18:f1:28:db:24:63:c6:8d:17:5f:52:2f:fc:6f:
93:31:92:a4:f3:34:c9:61:1d:de:9e:1f:ed:37:6c:7f:ed:b3:
78:25:d5:ac:42:4c:e2:01:a9:4e:e5:87:b9:e2:06:f9:d3:4e:
31:8d:ad:8b:11:e1:b9:24:fd:6c:cf:c4:95:b7:0e:72:c1:ac:
ba:ef:17:59:3e:24:5b:ed:48:a9:59:15:77:80:c8:00:af:c2:
a5:e6:90:c3:8f:06:20:50:fa:8a:99:03:65:1e:60:63:9e:99:
71:4f:9f:8b:2b:24:85:8b:4a:6a:d2:1f:f8:74:1a:97:05:1a:
be:b8:2d:8e:ef:20:c7:ca:9f:4e:88:fb:df:f7:f4:46:18:d1:
69:94:8b:f1:0b:5b:8a:a4:cc:0e:f0:7b:f7:3e:af:60:85:20:
cd:f4:3f:4a:f3:7c:65:58:d9:5e:5f:9d:20:1e:12:d6:ac:90:
9a:7b:ee:f7:37:ed:94:6f:bd:c6:9a:c0:b0:60:7b:60:62:ed:
c7:4d:4a:69:6c:68:6f:12:a2:ce:78:98:79:33:22:68:d4:2d:
c8:13:28:c5:90:8f:30:d1:14:23:ac:90:0d:39:8c:2e:e0:83:
ae:a2:83:8c:14:13:ed:62:34:48:11:14:3d:78:0c:d7:2b:bc:
0e:40:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org