Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/1sfnX_0D2qHHGy9smStSoU-WLvo.roa
File: 1sfnX_0D2qHHGy9smStSoU-WLvo.roa (raw, json)
Hash identifier: gKJH7rQ9h40WqpI4ZjvsABMAAtY/8hSi2ASkmbdOJNQ=
Subject key identifier: D6:C7:E7:5F:FD:03:DA:A1:C7:1B:2F:6C:99:2B:52:A1:4F:96:2E:FA
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: 4D
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/1sfnX_0D2qHHGy9smStSoU-WLvo.roa
Signing time: Sat 31 Aug 2024 01:30:48 +0000
ROA not before: Sat 31 Aug 2024 01:30:48 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 17941
IP address blocks: 118.67.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 01 Oct 2024 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Aug 31 01:30:48 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=D6C7E75FFD03DAA1C71B2F6C992B52A14F962EFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:72:69:c9:5f:a0:2e:f0:f0:78:0c:62:27:
ca:0f:d3:a6:66:72:a9:09:57:04:21:e3:69:d1:b2:
34:0c:fb:09:8f:d8:b3:cf:0e:0d:ff:6f:f2:b9:be:
aa:31:8d:1c:4f:3f:3a:89:d4:b5:97:7f:e6:3c:27:
74:5c:e0:ee:ff:d9:ac:53:ef:75:48:9e:10:3c:22:
ee:07:aa:df:29:67:12:9e:11:44:73:2f:02:3b:e4:
00:ce:89:46:17:bd:11:08:31:b9:12:e3:bb:c6:d8:
c4:81:67:7a:23:17:4f:48:32:ab:12:6f:a5:72:45:
fb:54:d9:38:a8:bc:38:e2:23:49:df:e1:89:50:e0:
ce:70:a4:2d:a5:24:df:48:66:86:9c:eb:5a:90:43:
f3:b3:57:96:b4:fc:2b:b7:9f:4d:fe:f9:35:f8:88:
91:16:c0:35:78:6d:a9:16:85:d3:be:d1:67:5c:ff:
76:aa:eb:5b:c2:15:6d:cf:94:25:55:1a:bf:7d:22:
82:6c:e8:43:ad:3b:39:5e:56:f9:79:12:e4:c9:3a:
15:70:5d:97:a2:6f:4a:a7:0f:83:43:2d:09:67:a4:
a5:9c:64:af:2b:ba:d2:22:d1:09:ce:17:9b:aa:24:
2c:c1:e6:1d:aa:6c:29:bd:2e:7e:3a:bb:1b:f6:83:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C7:E7:5F:FD:03:DA:A1:C7:1B:2F:6C:99:2B:52:A1:4F:96:2E:FA
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/1sfnX_0D2qHHGy9smStSoU-WLvo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.67.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:0f:00:40:e9:99:9b:e8:d8:1c:7e:59:3d:ef:1f:a9:4a:4e:
ae:f7:1f:91:5e:f1:45:6a:42:99:e4:ad:fa:3c:5c:10:97:1e:
56:4b:d3:e4:85:26:29:b1:b4:57:0a:34:4d:8a:a2:33:60:4e:
b6:80:53:f6:c7:52:23:d8:bd:93:3e:fb:08:9a:42:35:31:b3:
e8:42:2a:bd:aa:24:1a:0f:5e:ad:c4:81:8d:ae:df:ff:94:1e:
ac:51:11:3a:1e:6f:93:5e:53:24:66:2d:3a:fb:b2:18:0e:37:
e7:73:87:25:db:6e:96:0d:ec:eb:59:28:39:c2:cd:16:99:04:
a8:b6:f7:52:82:86:81:fa:6e:b2:62:95:af:5e:61:61:2b:b8:
9e:4b:ff:c8:24:80:b3:d2:55:18:cd:6d:3f:5f:d4:56:72:1a:
e1:b9:70:23:92:fc:9e:2b:b5:a0:5b:60:8c:c9:60:df:d5:b0:
81:d6:c9:66:a6:da:a8:22:40:3f:a5:89:7b:fa:c6:4d:12:89:
f2:36:7e:8d:82:1b:2b:75:03:9c:fa:ce:32:10:51:63:f5:a4:
24:75:4c:ac:a9:47:a7:d7:c2:be:32:4e:ff:cb:10:01:f0:2e:
a9:0a:15:74:0c:69:4f:73:b1:6a:22:33:d3:c5:27:ca:4a:5f:
a3:4f:50:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:05 2024 by rpki-client on console-ams.rpki-client.org