Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/XKXlt6TVx2O5valwLS7R9_Ys6Ok.roa
File: XKXlt6TVx2O5valwLS7R9_Ys6Ok.roa (raw, json)
Hash identifier: 6nR3tHn39CfmoZdlENym8a8Tt95tea0k/Uh8vAcAy4I=
Subject key identifier: 5C:A5:E5:B7:A4:D5:C7:63:B9:BD:A9:70:2D:2E:D1:F7:F6:2C:E8:E9
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 01AA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XKXlt6TVx2O5valwLS7R9_Ys6Ok.roa
Signing time: Mon 01 May 2023 01:32:03 +0000
ROA not before: Mon 01 May 2023 01:32:03 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 124.210.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:32:03 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=5CA5E5B7A4D5C763B9BDA9702D2ED1F7F62CE8E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:94:78:09:a6:f7:0e:9f:1e:ff:a4:12:ad:
ed:87:a7:f1:06:1d:54:92:9c:1c:45:30:8f:4c:bc:
8c:16:dc:d7:4e:ee:85:fc:09:e4:4d:cf:13:96:a0:
51:c2:aa:54:ad:52:a6:9f:23:cf:b9:fe:d8:fe:b4:
33:6e:c6:09:6d:2b:49:9e:e5:5e:38:75:ab:35:9b:
a9:87:81:0a:23:39:b8:9d:b1:e7:d0:81:1d:09:3e:
05:63:5c:2a:76:73:3c:ed:6e:4f:59:b9:92:35:65:
93:08:72:ff:e8:3f:75:f2:3c:b6:26:21:8c:fa:ca:
79:5e:95:2d:0a:35:84:0f:35:e5:fd:55:91:46:f8:
7b:8f:be:e3:c8:4b:9b:ae:41:6f:9f:e8:27:04:be:
dc:dd:7c:b5:20:54:d2:8d:87:10:16:da:ac:1a:68:
dd:f9:27:87:61:aa:45:aa:e8:6b:fb:54:29:44:4c:
93:0b:65:fb:b2:55:33:f4:e2:31:d6:d8:75:a6:c4:
bd:16:f7:6d:af:63:45:c4:52:da:b8:4f:87:56:37:
44:f7:6c:0c:12:22:6e:02:d6:91:5b:98:e1:4e:8e:
02:aa:d4:61:a1:40:35:9c:20:5c:4b:db:c3:7c:08:
9b:30:68:83:d6:86:a6:ad:d1:e5:49:e4:3e:a8:e0:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A5:E5:B7:A4:D5:C7:63:B9:BD:A9:70:2D:2E:D1:F7:F6:2C:E8:E9
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XKXlt6TVx2O5valwLS7R9_Ys6Ok.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:ca:fd:86:0d:52:55:d8:9c:e6:77:67:8d:db:23:0c:c3:84:
4d:e1:ca:71:74:a6:87:13:bb:b8:c8:21:db:0e:98:df:96:f2:
09:bd:e4:4f:ef:09:54:a8:36:9b:d1:67:4a:83:f4:dd:17:a4:
4d:92:f3:01:2e:fd:ff:02:8c:95:ce:38:49:44:68:b4:ce:62:
94:a5:f8:f7:aa:ba:03:1c:54:55:2f:f5:f8:9e:99:4c:51:6d:
94:e3:a5:dd:ab:86:77:e7:42:9b:cf:ee:01:32:23:6b:3a:ae:
cf:3b:e7:38:41:a6:87:f8:33:05:6c:8e:cd:35:db:a8:fc:c4:
68:26:84:7e:e8:2b:05:5e:c4:2b:49:bd:0b:f3:d2:30:a3:78:
d3:75:05:b8:6d:a3:1b:fa:6e:e5:71:af:21:01:24:98:e1:79:
9c:42:41:4e:c2:da:2c:f9:6e:cf:bd:b3:b9:f8:88:17:0e:7a:
bd:f1:0f:05:2c:c9:6c:61:bb:ad:0c:a0:4b:7e:d7:84:60:53:
1e:3d:7c:0f:4f:f8:02:a4:49:8b:fe:48:c8:da:82:48:e9:e0:
6d:b5:ec:8e:35:db:81:62:15:64:4b:10:66:71:f9:25:7f:7c:
c9:18:88:9d:88:de:d8:26:b6:5d:a9:ab:d8:3c:7d:94:b9:69:
a2:a6:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org