Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/N_ZFysWctbEtECCV1jzapKR80i8.roa
File: N_ZFysWctbEtECCV1jzapKR80i8.roa (raw, json)
Hash identifier: HgrrZ/eJZco1N6Hf72LzbwnY4j/XveH3B/CrODuYPd0=
Subject key identifier: 37:F6:45:CA:C5:9C:B5:B1:2D:10:20:95:D6:3C:DA:A4:A4:7C:D2:2F
Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial: 03
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/N_ZFysWctbEtECCV1jzapKR80i8.roa
Signing time: Thu 26 Jan 2023 04:16:02 +0000
ROA not before: Thu 26 Jan 2023 04:16:02 +0000
ROA not after: Fri 26 Jan 2024 04:04:30 +0000
asID: 131923
IP address blocks: 133.247.136.0/21 maxlen: 25
Validation: Failed, certificate revoked on Fri 12 Jan 2024 04:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Validity
Not Before: Jan 26 04:16:02 2023 GMT
Not After : Jan 26 04:04:30 2024 GMT
Subject: CN=37F645CAC59CB5B12D102095D63CDAA4A47CD22F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:2b:b4:6c:bf:d4:88:53:4f:dc:f3:13:0a:
9d:8f:d6:8f:0b:97:6e:f6:7b:1c:c6:9d:ee:04:2b:
dd:a0:9a:78:f2:b7:e1:62:ba:9b:ff:30:f2:52:18:
20:05:c0:d4:e9:d4:08:79:b2:19:01:21:d9:49:6d:
d7:f1:e3:b5:12:b0:1b:2f:17:57:a4:69:34:41:cd:
66:43:47:c5:c2:55:24:27:c3:8a:d5:16:d7:e3:06:
f0:30:28:99:b3:71:2a:b3:81:d7:7f:ee:e5:c1:bb:
a8:73:c7:db:77:35:8b:85:e5:f0:43:45:41:8f:41:
2e:1a:59:3b:c4:4f:34:cf:23:bf:fa:25:b0:13:c2:
ea:67:5e:7d:38:cb:7b:8a:f9:38:79:17:5d:42:19:
0d:55:97:0d:51:84:2e:5b:13:91:d6:67:ba:f6:44:
be:30:98:cb:a5:1d:c6:ed:4f:b1:54:99:f3:e6:7d:
06:55:01:ca:62:5e:38:57:ee:ce:3e:22:2c:7a:2b:
8a:29:1a:aa:3b:42:b0:b5:a1:7f:ed:95:76:58:3c:
23:0a:e1:18:87:58:19:f3:a6:d7:87:ae:f8:41:66:
f3:8c:09:ac:91:2f:7b:ed:44:8f:22:02:76:6c:7e:
8e:fa:e4:12:ae:ff:75:b3:47:be:df:0f:26:f9:3d:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F6:45:CA:C5:9C:B5:B1:2D:10:20:95:D6:3C:DA:A4:A4:7C:D2:2F
X509v3 Authority Key Identifier:
keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/N_ZFysWctbEtECCV1jzapKR80i8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.247.136.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:89:18:ea:d1:a0:51:dc:df:03:f9:0b:e9:4f:c5:60:74:44:
17:9b:1f:a1:12:bc:cc:b8:4d:ff:de:42:76:08:cb:a8:ed:f3:
8d:72:6c:c7:39:5e:27:c2:f5:6b:ea:b0:d0:19:df:fd:43:44:
86:2f:f1:00:7e:05:ce:68:f8:3d:13:ed:0a:6e:79:e7:7b:db:
e5:31:c5:31:d8:9b:73:eb:d7:b8:94:ad:42:4b:58:27:95:4b:
d9:2f:1b:c9:c5:d9:87:7c:d5:5e:61:cc:7a:a5:fb:55:d7:1a:
43:ee:2a:8a:0a:dd:be:81:31:c7:e5:3e:be:76:7d:d1:e7:4c:
e1:62:fe:f0:02:49:7b:c1:40:4f:dc:7d:9e:28:45:b6:48:a7:
9e:09:db:2f:47:e4:5b:a4:35:ad:b3:f8:7a:8d:76:3f:f3:2f:
eb:f9:e8:6d:48:66:75:c6:44:2f:32:9a:e3:97:02:cd:f8:71:
b0:e7:ec:a7:26:81:da:37:82:14:6f:f3:0e:65:52:a0:41:cb:
b5:10:a6:dc:3e:2f:3e:05:bb:41:a4:1c:eb:7e:66:d8:62:57:
a9:de:97:9d:84:b2:3c:fd:41:5d:04:2c:9f:c9:ad:48:2b:89:
c8:a1:87:d5:4a:61:3f:ca:b9:d2:c0:a7:e4:aa:81:e2:26:65:
a0:f7:d6:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 12 06:34:16 2024 by rpki-client on console-fra.rpki-client.org