Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZjBGMeKVPZup7it-ewcXnMULnIU.roa
File: ZjBGMeKVPZup7it-ewcXnMULnIU.roa (raw, json)
Hash identifier: +EcVC5nF3Th/46Z1VeEoDiAnZE9SwNoYjKA2qrBdgwY=
Subject key identifier: 66:30:46:31:E2:95:3D:9B:A9:EE:2B:7E:7B:07:17:9C:C5:0B:9C:85
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 017B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZjBGMeKVPZup7it-ewcXnMULnIU.roa
Signing time: Mon 01 May 2023 01:28:49 +0000
ROA not before: Mon 01 May 2023 01:28:49 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 27.94.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:28:49 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=66304631E2953D9BA9EE2B7E7B07179CC50B9C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:be:1c:52:8c:f4:b9:56:2e:3e:88:8d:aa:
bc:de:77:83:9d:88:cb:13:08:28:01:df:42:1b:0e:
89:0b:21:d5:19:7d:c5:b9:b4:90:3c:d9:6f:89:72:
a0:e9:88:3a:c7:00:7e:4d:dd:6b:4d:e7:c2:fb:9d:
e4:fa:2a:93:67:83:8f:fc:88:f9:fd:ff:01:85:bf:
83:b2:42:7f:12:fe:9d:39:06:77:f4:dc:33:df:13:
14:22:4a:90:b9:8a:61:97:69:7b:11:1f:9d:94:50:
0b:52:c3:3f:a6:9d:2a:b5:6a:41:0b:2a:a8:e8:57:
d2:d3:10:13:87:c2:3e:47:92:f9:bf:26:2a:a8:d9:
bf:5d:e1:eb:5d:da:d3:c3:59:f8:b1:39:4d:24:8d:
c1:0b:d7:e5:e3:34:fb:f3:76:3a:0e:04:0d:f7:77:
1b:31:f3:c8:a5:20:2b:db:b3:ba:df:1a:ed:c0:8c:
cb:6c:c3:ab:1f:02:3a:3c:ce:f0:f5:08:ef:90:03:
ef:d6:2e:dc:fe:e2:ae:ec:c9:0e:b1:3e:aa:c7:c9:
a3:52:24:e4:23:73:d6:33:97:e4:ef:78:f9:8f:2e:
5e:8a:f1:e4:64:b9:95:62:de:16:8c:d6:e6:85:27:
7f:2d:0c:38:12:4e:4c:a8:1e:b9:11:09:f1:e3:93:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:46:31:E2:95:3D:9B:A9:EE:2B:7E:7B:07:17:9C:C5:0B:9C:85
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZjBGMeKVPZup7it-ewcXnMULnIU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:ed:fd:25:5d:29:98:f5:17:28:c5:29:f2:92:4d:52:00:7c:
b7:ba:a1:35:bf:4a:87:ee:4d:d6:a3:d0:2c:33:a7:e1:fc:d6:
be:4d:6f:2a:5b:cb:59:54:4a:05:98:ce:2b:2f:e9:a5:7d:c0:
58:70:6d:2e:92:2b:45:91:1d:de:d0:35:cb:da:f5:b9:90:61:
1a:11:1f:b7:f4:3b:d3:42:24:b7:64:34:3b:9f:c2:30:03:92:
70:9a:22:4b:2b:90:b7:99:5b:57:cd:4d:c3:67:82:77:a0:e5:
13:d7:4c:fd:ea:a4:2a:bb:5b:25:5f:ab:a7:5f:73:90:60:23:
97:d1:f9:6e:d5:d9:a2:c1:2e:c6:bd:48:0e:9c:41:0f:52:b0:
19:bc:5d:65:c9:00:06:f1:9c:a2:e1:0f:13:4f:40:f5:fd:e2:
e1:a7:14:62:85:21:0f:b9:5c:08:0c:fa:72:38:b6:0a:7e:80:
5e:a4:0d:1b:97:1e:86:da:a6:1c:9c:d5:ff:64:0a:13:8d:57:
19:b8:c8:bc:d0:87:92:15:33:ec:b7:27:50:cd:44:75:f4:d5:
8e:22:01:38:72:b4:55:33:13:fe:9f:d7:cc:3c:df:60:b2:02:
94:d9:af:d8:81:e1:f2:25:48:0a:e1:1c:0a:ba:cc:e4:7b:bf:
25:80:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org