Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/bmxObCEzUEnvhKso7wc9PicPpEk.roa
File: bmxObCEzUEnvhKso7wc9PicPpEk.roa (raw, json)
Hash identifier: T+hoowe2S21WZjYzWDSuS4fc4yqShYL3Km6bPlHyA9A=
Subject key identifier: 6E:6C:4E:6C:21:33:50:49:EF:84:AB:28:EF:07:3D:3E:27:0F:A4:49
Certificate issuer: /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial: 07
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/bmxObCEzUEnvhKso7wc9PicPpEk.roa
Signing time: Mon 01 Apr 2024 23:53:03 +0000
ROA not before: Mon 01 Apr 2024 23:53:03 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2497
IP address blocks: 157.8.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 19 Jul 2024 09:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Validity
Not Before: Apr 1 23:53:03 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=6E6C4E6C21335049EF84AB28EF073D3E270FA449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:ee:65:02:05:2a:11:29:e1:b7:f6:0d:ce:
34:1b:ba:99:22:d9:52:88:3e:1b:40:8a:a6:37:ec:
8c:6c:54:79:eb:d3:ee:f3:19:f4:42:39:0a:26:c1:
38:19:c0:a6:d5:eb:1d:35:8b:cf:e4:d3:0d:c8:fb:
cf:4e:fd:14:77:3f:ba:da:81:0f:90:ed:67:75:cf:
49:16:26:ed:ef:e1:41:5c:7c:ef:fb:c8:27:89:ad:
34:dc:63:3e:96:8a:1c:a6:96:5b:82:53:fe:62:0e:
b5:c4:5d:58:4c:43:5d:67:30:15:e9:b6:21:8f:19:
8e:3d:81:2d:36:95:49:d2:66:58:a3:41:c6:d3:85:
37:5f:05:e0:31:f1:a2:65:90:a2:ea:2a:9b:98:e4:
fe:99:20:5f:24:ef:14:90:77:07:9b:fd:31:f0:83:
d0:25:58:a2:db:6f:1a:8f:e5:fe:e3:c2:cb:5f:6b:
70:b1:f7:6e:e8:80:13:68:b1:4c:26:9e:4c:79:08:
15:b6:ac:1e:32:85:d1:14:1d:44:d7:f7:2e:03:d5:
e1:43:36:52:7b:d6:fc:3b:92:46:4d:b4:8b:c6:b5:
03:ea:01:c9:7d:40:dc:ae:4f:9d:7e:c8:0f:e5:da:
b6:5e:b7:bd:e5:c2:4a:6f:2a:e4:22:0f:80:7b:d3:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6C:4E:6C:21:33:50:49:EF:84:AB:28:EF:07:3D:3E:27:0F:A4:49
X509v3 Authority Key Identifier:
keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/bmxObCEzUEnvhKso7wc9PicPpEk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.8.88.0/21
Signature Algorithm: sha256WithRSAEncryption
16:68:90:e1:ef:87:8b:62:c6:74:97:af:c1:91:ee:e2:e2:a2:
d7:b5:47:b9:93:82:05:6d:bd:e9:c5:4e:22:1c:25:a3:05:53:
5e:ff:39:65:c3:37:e2:94:4b:fa:7a:bb:50:cb:09:41:ff:2c:
c3:9d:e4:e2:1c:4d:49:3c:eb:22:90:ca:2c:f1:e4:fe:cc:8d:
7c:28:bc:3c:25:f3:57:4c:55:b2:4f:20:8b:16:de:a1:a6:55:
e6:e3:16:db:f4:a9:0a:87:e7:42:31:a3:6a:dc:82:86:03:62:
cb:4f:65:c9:04:29:17:f6:4b:c7:08:25:60:cc:4e:cb:a8:48:
f6:62:9a:0d:ab:1d:67:ae:6c:16:37:ac:d2:e5:68:e0:f8:da:
a6:ca:d5:86:db:d8:41:c5:f8:ae:87:e4:c6:73:a8:6b:e1:de:
31:e1:e5:f1:66:11:14:1f:3b:a2:47:23:86:19:88:a9:2a:4d:
fc:05:24:46:ea:84:a1:35:61:a7:f5:87:8d:81:d8:7e:9c:22:
73:2b:a3:60:36:04:71:cf:76:ef:8f:f6:2a:be:2a:b9:d3:6b:
ce:72:5c:4e:b6:ae:6a:a5:ca:7c:7f:22:e5:b7:fc:5a:23:bc:
04:18:19:ea:68:70:e2:fd:9f:56:8f:bf:5a:78:d7:6a:e9:db:
50:d2:c8:ec
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTkx
Q0I5RjRDNDIyRDNCM0Q2NzUzNzFCMThBOERBRERBRTg3OThEMB4XDTI0MDQwMTIz
NTMwM1oXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNkU2QzRFNkMyMTMzNTA0
OUVGODRBQjI4RUYwNzNEM0UyNzBGQTQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANG+7mUCBSoRKeG39g3ONBu6mSLZUog+G0CKpjfsjGxUeevT7vMZ
9EI5CibBOBnAptXrHTWLz+TTDcj7z079FHc/utqBD5DtZ3XPSRYm7e/hQVx87/vI
J4mtNNxjPpaKHKaWW4JT/mIOtcRdWExDXWcwFem2IY8Zjj2BLTaVSdJmWKNBxtOF
N18F4DHxomWQouoqm5jk/pkgXyTvFJB3B5v9MfCD0CVYottvGo/l/uPCy19rcLH3
buiAE2ixTCaeTHkIFbasHjKF0RQdRNf3LgPV4UM2UnvW/DuSRk20i8a1A+oByX1A
3K5PnX7ID+Xatl63veXCSm8q5CIPgHvTKUMCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBRubE5sITNQSe+EqyjvBz0+Jw+kSTAfBgNVHSMEGDAWgBRxkcufTEItOz1nU3Gx
io2t2uh5jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy9jWkhMbjB4Q0xUczlaMU54c1lxTnJkcm9lWTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jWkhMbjB4Q0xUczlaMU54c1lxTnJk
cm9lWTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTkzNy9ibXhPYkNFelVFbnZoS3NvN3djOVBpY1BwRWsucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQDnQhYMA0GCSqGSIb3DQEBCwUAA4IBAQAWaJDh74eLYsZ0l6/Bke7i4qLX
tUe5k4IFbb3pxU4iHCWjBVNe/zllwzfilEv6ertQywlB/yzDneTiHE1JPOsikMos
8eT+zI18KLw8JfNXTFWyTyCLFt6hplXm4xbb9KkKh+dCMaNq3IKGA2LLT2XJBCkX
9kvHCCVgzE7LqEj2YpoNqx1nrmwWN6zS5Wjg+NqmytWG29hBxfiuh+TGc6hr4d4x
4eXxZhEUHzuiRyOGGYipKk38BSRG6oShNWGn9YeNgdh+nCJzK6NgNgRxz3bvj/Yq
viq502vOclxOtq5qpcp8fyLlt/xaI7wEGBnqaHDi/Z9Wj79aeNdq6dtQ0sjs
-----END CERTIFICATE-----
Generated at Fri Jul 19 12:04:49 2024 by rpki-client on console-ams.rpki-client.org