Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/LMvCPAmKCgNmnlcpLXQnqRbd-_k.roa
File: LMvCPAmKCgNmnlcpLXQnqRbd-_k.roa (raw, json)
Hash identifier: 9xStmtOCzqApu2rBqu8pH5gpr5m+MhjaDM7f+fgsz8c=
Subject key identifier: 2C:CB:C2:3C:09:8A:0A:03:66:9E:57:29:2D:74:27:A9:16:DD:FB:F9
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: 59
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/LMvCPAmKCgNmnlcpLXQnqRbd-_k.roa
Signing time: Sat 31 Aug 2024 01:30:52 +0000
ROA not before: Sat 31 Aug 2024 01:30:52 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 17941
IP address blocks: 218.219.64.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 01 Oct 2024 06:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Aug 31 01:30:52 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=2CCBC23C098A0A03669E57292D7427A916DDFBF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:b1:03:e3:bf:82:d6:9a:70:9c:77:4d:31:
dd:68:49:30:85:1a:01:65:34:cb:01:04:8f:0c:47:
67:87:24:1f:8d:ba:d0:2f:f0:fa:1e:68:e5:af:29:
52:ae:1e:f5:fd:94:5a:92:69:d9:4f:5c:e6:7f:07:
d6:5a:25:48:86:e3:d3:f9:6b:a2:d8:8a:1e:28:41:
77:64:e0:05:b0:48:03:32:a0:52:93:51:eb:00:f4:
ce:96:e0:bd:c8:ae:15:5d:a5:6a:bf:c9:c6:1d:7c:
07:6e:be:35:bf:fa:cd:d4:c6:2b:fb:4a:dc:72:9f:
d1:e5:49:f9:8b:cf:21:16:63:97:e5:d4:81:96:1c:
58:3d:17:80:2c:e5:3d:2a:a2:41:57:f0:86:d2:03:
67:d4:c1:84:60:7b:e2:a7:aa:d8:91:6f:a8:f3:61:
ad:8d:e6:b4:82:b8:34:e7:53:3d:ed:0a:83:e6:0d:
23:94:83:c7:81:2f:be:e6:79:06:42:49:70:0e:3d:
95:26:b7:70:25:08:26:60:33:ba:56:b1:7d:9b:4e:
05:3e:cf:18:d7:78:d3:68:c8:a6:c5:b8:d9:ee:d3:
3d:75:db:c3:9e:f2:ce:04:8e:9e:9c:4f:aa:72:a3:
3d:64:3e:2b:e6:d2:3b:d3:8f:f8:7d:a7:50:8f:6e:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:C2:3C:09:8A:0A:03:66:9E:57:29:2D:74:27:A9:16:DD:FB:F9
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/LMvCPAmKCgNmnlcpLXQnqRbd-_k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.219.64.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:b4:da:92:5c:f2:ce:e5:ba:00:7a:a4:0b:ca:8f:42:b5:74:
56:11:e0:6e:38:fa:70:ae:6c:8e:24:d9:f9:7c:81:65:04:49:
65:ca:0d:c4:df:a8:bd:6f:bb:c0:6f:55:f3:ae:4c:8e:aa:af:
eb:17:36:1f:57:f0:c7:ac:e8:e4:a8:2f:42:a3:21:bb:a7:04:
ad:a5:c5:cd:63:2a:25:35:19:e5:39:f4:ea:b8:57:26:ef:ba:
2a:b6:a5:dd:05:eb:6e:ad:77:8f:7a:e3:2f:75:ad:14:f3:66:
24:9b:cd:f6:3a:1f:e5:84:f6:6d:dc:a7:43:2f:cb:5d:7a:59:
60:e2:be:41:be:80:7a:06:f6:5b:67:0d:c4:a6:ae:d9:8f:ec:
23:03:36:4c:23:6d:a1:22:e5:fd:72:b1:f5:7a:d9:87:78:78:
31:b2:5c:53:2d:15:89:1d:49:eb:4c:cd:aa:df:45:4d:c4:67:
41:d5:d2:ec:e6:d1:16:de:84:9f:f2:b6:0a:b2:83:ed:76:1d:
67:fc:3e:55:32:e8:cf:3c:7a:ef:98:ac:ec:32:c6:8c:8e:0f:
69:b3:37:55:be:57:ac:0a:36:fa:70:48:db:55:99:cd:29:d6:
41:e3:77:81:d0:73:e2:2c:e4:34:20:a9:ab:48:41:a1:48:de:
3b:bc:4f:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:05 2024 by rpki-client on console-ams.rpki-client.org