Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/qbs5IEClU7EwinHM4PIga9PeIRo.roa
File: qbs5IEClU7EwinHM4PIga9PeIRo.roa (raw, json)
Hash identifier: OWWSQXbkPI8r2smwMMZhad2LxY8XPiW270uiZnbp+IY=
Subject key identifier: A9:BB:39:20:40:A5:53:B1:30:8A:71:CC:E0:F2:20:6B:D3:DE:21:1A
Certificate issuer: /CN=C0EDE8C3879081138F9495306BE79EF7340A9451
Certificate serial: 3B
Authority key identifier: C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/qbs5IEClU7EwinHM4PIga9PeIRo.roa
Signing time: Thu 13 Apr 2023 09:52:34 +0000
ROA not before: Thu 13 Apr 2023 09:52:34 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 7667
IP address blocks: 192.26.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0EDE8C3879081138F9495306BE79EF7340A9451
Validity
Not Before: Apr 13 09:52:34 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=A9BB392040A553B1308A71CCE0F2206BD3DE211A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:05:cc:02:d8:07:1e:eb:99:3c:ab:fc:dd:
90:a9:11:82:6c:fa:89:5d:27:e4:8b:a4:62:d3:37:
e9:04:e5:04:9a:f7:2d:09:5d:bb:7a:37:96:f7:39:
27:7a:1e:62:c8:3e:f8:db:cb:7f:93:ab:e8:34:0f:
5a:a7:06:99:67:2e:42:7d:00:e4:94:ec:aa:d1:6e:
c3:a9:64:6e:1b:4e:c5:97:81:02:51:4c:7d:71:f6:
69:82:03:f4:c9:19:ee:76:00:c2:e4:38:bd:3b:ed:
e6:cd:63:b0:73:05:e3:ce:61:bc:b7:2e:90:75:98:
a5:86:6e:5f:05:e0:b2:54:22:28:84:80:b2:07:3c:
b4:9c:6d:a4:8c:0d:87:c7:a7:5b:c7:41:f4:19:e2:
3e:db:7c:07:31:3b:8f:7c:1a:ff:c8:41:99:10:bc:
a5:6a:c8:7f:c1:94:16:f5:62:d9:dc:bb:aa:89:2c:
fd:e2:c3:9e:ec:11:9a:77:e7:4e:5c:5d:08:1a:78:
9a:c3:ce:ef:8e:10:d2:6f:33:9d:0e:46:f5:f5:39:
e1:4a:85:8f:80:48:a1:42:ba:d2:99:b3:d8:24:52:
c7:66:9d:53:c1:d2:00:77:47:89:d6:da:98:d6:f6:
90:1f:7a:b0:cf:dc:01:0e:14:f8:2f:7b:1e:27:0a:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BB:39:20:40:A5:53:B1:30:8A:71:CC:E0:F2:20:6B:D3:DE:21:1A
X509v3 Authority Key Identifier:
keyid:C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/qbs5IEClU7EwinHM4PIga9PeIRo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.26.91.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5b:50:4e:d4:af:4f:28:cb:7c:04:88:67:03:16:b1:8c:24:
3c:c1:fc:27:46:f3:47:17:81:78:ce:94:75:9b:27:39:be:0a:
4c:40:30:e2:ce:ef:ab:2e:e2:f7:b9:81:41:ae:9b:d7:19:78:
ee:5e:2e:1a:92:a9:a2:78:98:e9:73:b4:0a:f7:07:30:88:7d:
72:98:d7:79:0e:8f:7f:f8:d3:0f:66:9f:59:59:95:27:49:fb:
14:4a:53:1a:e4:f6:50:bf:f1:ae:10:30:32:23:90:e8:07:66:
7d:40:88:89:c4:4e:96:d0:b7:a4:04:c1:1d:9c:e9:ec:66:59:
c3:e1:3c:a2:22:0e:3a:81:4d:8e:3b:89:d1:e6:ca:85:48:bd:
bb:03:14:f4:35:e9:cd:0a:35:f0:a7:b2:fa:07:62:f1:bb:ac:
e9:e5:9b:db:bd:d5:aa:9f:1b:2b:b1:87:9b:81:49:be:2f:67:
48:96:60:3a:ef:d0:67:19:32:54:5d:ef:58:eb:c0:b6:9f:47:
58:87:1d:6f:28:c9:54:52:4d:f1:ee:0c:d4:cd:d5:b1:49:80:
ce:dd:ef:1e:ab:2a:61:74:fe:d8:62:5d:fc:5f:e6:d4:a1:5d:
c9:ea:ef:6e:b0:2a:ba:8f:b2:84:8d:0f:71:3f:57:ad:fc:c5:
ed:65:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org