Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/D_rRP5TtT7Pc6L97b6JtIFEfeA0.roa
File: D_rRP5TtT7Pc6L97b6JtIFEfeA0.roa (raw, json)
Hash identifier: QM4RIMaWLKUkXiC0KHQIOAPEEUhNHRPaKB8wqaHukOs=
Subject key identifier: 0F:FA:D1:3F:94:ED:4F:B3:DC:E8:BF:7B:6F:A2:6D:20:51:1F:78:0D
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: 56
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/D_rRP5TtT7Pc6L97b6JtIFEfeA0.roa
Signing time: Sat 31 Aug 2024 01:30:51 +0000
ROA not before: Sat 31 Aug 2024 01:30:51 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 17941
IP address blocks: 202.144.224.0/19 maxlen: 20
Validation: Failed, certificate revoked on Tue 01 Oct 2024 06:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Aug 31 01:30:51 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=0FFAD13F94ED4FB3DCE8BF7B6FA26D20511F780D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b7:7e:3b:59:0e:17:5c:72:0f:cc:47:53:32:
ac:9c:79:2f:ed:2d:60:81:08:a6:2a:94:2b:8b:8f:
e5:ce:4e:24:3b:86:f7:2e:2c:ba:ea:67:d6:cc:0f:
07:a2:51:6f:e9:8f:32:7e:0c:9b:ef:9e:81:6c:0d:
d4:f1:59:fc:54:fc:e6:69:80:f7:25:16:33:38:89:
1b:00:da:e7:03:64:1f:f0:25:0b:79:cb:95:e5:d9:
f7:09:0b:8f:09:f1:6c:f7:06:e5:81:6e:8c:a6:02:
66:a3:af:b4:c7:9d:7b:02:ad:b1:a7:a0:8d:dc:7e:
73:30:83:aa:60:24:b7:22:06:23:46:29:1f:b7:5f:
f9:91:e3:cc:01:4b:50:84:76:3c:49:6b:82:14:c6:
7a:57:0c:82:d9:c9:0c:cb:91:50:cb:c4:1f:3c:43:
98:8b:7b:7d:f7:ca:5d:d4:6c:f1:23:eb:c2:07:51:
96:b5:2d:76:93:dd:09:a7:ff:ae:ff:60:16:41:98:
ef:89:8a:d8:fb:6d:79:37:70:98:9a:62:fe:f0:f1:
cc:08:33:5e:ca:d3:4a:ca:8f:ae:96:2d:e9:9e:9c:
e0:3a:6d:cd:ea:2a:18:ef:b7:b2:74:24:e9:e9:3a:
55:c9:63:2a:e3:d8:9a:e4:aa:f0:df:e0:41:e3:20:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:D1:3F:94:ED:4F:B3:DC:E8:BF:7B:6F:A2:6D:20:51:1F:78:0D
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/D_rRP5TtT7Pc6L97b6JtIFEfeA0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.144.224.0/19
Signature Algorithm: sha256WithRSAEncryption
41:f8:64:e8:62:e3:a3:2b:55:00:c9:28:e4:59:be:f8:e2:87:
22:42:f6:7b:71:fe:c6:21:45:9d:d4:ac:fa:ec:d0:46:3c:2f:
b8:28:43:1c:1b:c1:77:f7:97:a7:82:e6:37:f8:b2:78:f6:6c:
56:c0:24:fe:f9:6a:71:60:bc:c3:37:db:b8:9f:b4:52:bd:ba:
d0:fa:7e:82:4f:18:5a:18:f3:c7:5b:65:7b:8d:08:46:c2:59:
e4:d6:be:a4:5c:d2:1c:af:c5:24:45:c4:73:7f:a0:6c:f8:05:
37:1b:63:73:6f:ea:fc:53:82:6e:e6:3a:8b:dd:18:da:8b:5e:
0e:85:8b:c1:ef:95:9a:16:6a:3f:0c:6d:91:b1:a5:ea:58:8a:
06:1e:5b:90:7c:f2:92:97:1e:41:cd:21:58:5d:18:93:70:38:
5a:68:59:99:b1:e8:d7:42:4d:c8:37:60:8e:8d:d7:c0:1a:a8:
14:9f:79:91:dc:56:d9:2f:2a:7d:34:88:f4:5b:ab:d2:67:02:
f0:b7:c3:1e:ca:e4:33:c0:aa:35:f0:47:8d:01:55:34:b1:cb:
d0:c6:0d:c0:11:a1:f7:4b:8f:ec:90:86:8b:cf:4e:9a:09:9e:
27:f6:72:46:0f:17:44:3f:64:6f:94:5d:af:f2:5b:36:47:68:
fb:72:65:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 08:29:41 2024 by rpki-client on console-fra.rpki-client.org