Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/v7-t2FDTOPU-rvQXZ0nApp2xsEs.roa
File: v7-t2FDTOPU-rvQXZ0nApp2xsEs.roa (raw, json)
Hash identifier: Ba1X4hWEahKqFekMSqQFptjVCED+s81kudNtJTIjVYg=
Subject key identifier: BF:BF:AD:D8:50:D3:38:F5:3E:AE:F4:17:67:49:C0:A6:9D:B1:B0:4B
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0267
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v7-t2FDTOPU-rvQXZ0nApp2xsEs.roa
Signing time: Sun 01 Oct 2023 01:29:24 +0000
ROA not before: Sun 01 Oct 2023 01:29:24 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 59.128.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Oct 1 01:29:24 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=BFBFADD850D338F53EAEF4176749C0A69DB1B04B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:17:03:b1:14:a3:38:96:65:b8:cb:c9:bc:03:
22:4c:12:19:45:ee:69:b4:b1:9d:9b:55:c7:d9:85:
9f:9e:f4:f1:21:c8:d9:46:c4:34:6b:99:49:fc:2a:
22:b6:a7:06:80:5a:73:8a:30:b8:2d:38:df:98:5f:
9b:29:e0:cd:be:fe:ff:5f:81:6e:cc:71:24:ea:a1:
06:3c:de:1a:d6:ec:32:a6:3d:1e:2c:68:9b:8a:46:
3f:99:e1:bc:fa:41:b0:3f:dc:5d:56:81:ae:97:d7:
99:06:2d:24:8f:7c:c6:cc:2d:67:ed:49:75:59:6d:
b3:52:f8:4a:77:70:c6:09:82:96:c6:5b:d1:83:3b:
1c:e8:db:e7:a4:b1:c8:24:01:8c:90:5f:21:ea:f1:
60:ad:2f:fb:1d:69:fe:9f:ef:4c:75:27:87:20:4d:
be:cf:42:3d:b8:3a:92:70:0c:1d:fa:7d:5d:14:dd:
a3:85:02:92:6e:7a:a8:c1:1c:1d:69:65:6f:c5:52:
66:0e:d6:72:d3:c4:fd:e1:99:58:98:ce:af:93:eb:
9b:91:0c:2d:48:bb:f7:d2:3d:9a:9f:bd:d0:fa:1f:
34:65:00:48:6e:f8:06:db:5b:4b:06:d6:59:74:fe:
26:0b:04:a3:10:1d:90:02:64:b3:d7:df:86:fe:62:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BF:AD:D8:50:D3:38:F5:3E:AE:F4:17:67:49:C0:A6:9D:B1:B0:4B
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v7-t2FDTOPU-rvQXZ0nApp2xsEs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.128.96.0/19
Signature Algorithm: sha256WithRSAEncryption
12:4e:75:d9:24:ca:ce:f4:5b:eb:fe:cb:62:50:63:4c:7e:d7:
43:e5:f8:64:b6:71:48:35:8a:08:d8:06:cc:a7:57:c0:73:a1:
ec:38:72:af:9a:8e:a7:70:42:89:cc:82:a2:2d:e5:7e:94:d5:
8c:2f:f8:2c:94:64:a8:63:34:77:7c:e1:6f:a4:ab:3a:c7:a9:
a4:78:31:26:e1:92:70:79:99:4e:4a:e9:55:69:5a:20:fa:18:
0f:1c:de:1f:38:ff:37:a1:5e:e7:89:a5:fc:87:0c:db:60:a1:
5c:dd:8d:0c:05:1f:3c:46:f2:dc:0a:c1:e7:46:5e:2e:0a:04:
e3:6c:7f:cc:40:73:6f:ca:67:31:df:e4:3a:c4:cc:ac:3b:46:
b5:f7:fa:83:66:15:05:13:bd:d7:c2:2b:07:19:4c:bb:ba:7a:
25:62:aa:a5:5c:87:f8:6c:ff:ca:09:6c:48:03:88:7d:68:6b:
d0:a2:5e:3e:86:c6:db:6e:e8:27:89:c5:7c:d9:e3:e1:f8:fa:
c9:3b:a0:1c:b7:46:fb:bb:83:24:cd:a3:1c:6c:39:41:dd:a3:
28:6c:10:67:79:95:16:a3:5e:29:14:00:ea:93:3c:ee:b7:fd:
1b:ae:7e:79:54:1a:89:0c:f7:4a:da:af:ac:4e:ac:84:53:90:
53:38:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org