Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/aFDE5zZ9JK6wKL5lH68MfvdClzY.roa
File: aFDE5zZ9JK6wKL5lH68MfvdClzY.roa (raw, json)
Hash identifier: iZbgo1igljNQqUS9SNi8DX+5c2MyFNYsfq4m/5TqZ1k=
Subject key identifier: 68:50:C4:E7:36:7D:24:AE:B0:28:BE:65:1F:AF:0C:7E:F7:42:97:36
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: 30
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/aFDE5zZ9JK6wKL5lH68MfvdClzY.roa
Signing time: Tue 26 Sep 2023 06:55:12 +0000
ROA not before: Tue 26 Sep 2023 06:55:12 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 17941
IP address blocks: 202.143.64.0/19 maxlen: 20
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Sep 26 06:55:12 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=6850C4E7367D24AEB028BE651FAF0C7EF7429736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:40:eb:e6:7c:b5:ce:f4:8a:17:cc:c5:b8:
d5:ed:d2:46:66:cf:c0:86:c6:86:d6:b5:b4:c2:d9:
29:5a:b7:3b:8e:a1:2d:94:86:80:27:05:4d:76:f2:
9a:37:c4:0b:7d:96:a2:7e:74:2e:23:0d:ba:2e:d2:
f5:34:df:79:59:3f:ca:ce:14:57:3a:50:42:7a:a0:
1d:83:d1:29:a5:4a:bc:07:b3:dc:be:d7:34:6f:32:
9d:69:e1:4e:30:52:66:86:16:16:36:01:59:0e:25:
2e:38:4c:b2:f5:e2:f8:04:92:a5:d5:c3:c0:65:23:
80:43:33:29:24:a8:46:07:e3:36:58:e8:97:f3:92:
39:06:91:ba:37:61:0a:28:ed:a0:67:85:57:33:0f:
e4:8f:f6:2f:d5:aa:b5:ad:ca:45:37:ff:ea:d3:81:
47:38:8b:6a:c3:38:03:d2:60:44:06:90:a1:6a:66:
b6:9a:cf:1d:95:8f:92:a9:96:c6:de:f7:a5:8d:33:
e4:4f:7c:92:d9:00:1d:57:89:7d:bf:79:01:80:d6:
6a:97:fa:be:57:85:dd:2a:95:57:fb:ea:6b:5d:cf:
da:84:f1:f7:cf:f8:d2:01:7a:2d:15:5c:e6:fb:ee:
43:52:d4:7e:c3:37:92:5b:80:36:a5:b7:80:05:76:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:50:C4:E7:36:7D:24:AE:B0:28:BE:65:1F:AF:0C:7E:F7:42:97:36
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/aFDE5zZ9JK6wKL5lH68MfvdClzY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.143.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:c7:22:fd:f7:63:c7:b1:5a:91:3e:c2:0e:11:64:4a:64:c9:
d4:e7:88:58:44:6b:d4:1f:e4:38:f9:14:c7:1a:b3:b4:3e:63:
28:de:9e:5b:14:8d:d2:74:26:90:4b:29:3b:9c:c3:76:1a:4b:
33:a8:a6:a0:69:9b:fa:ce:9c:5b:9c:66:58:69:7f:66:52:d4:
33:5a:e5:89:c0:6f:b8:6b:ea:bf:58:df:3b:c9:d4:ac:a9:80:
89:ea:6f:83:72:9b:a2:fc:4c:e6:13:20:b7:b2:de:76:64:b3:
25:ab:94:31:91:9e:10:5b:0c:10:7c:e7:98:5d:a2:dc:f0:42:
c0:7a:e8:c8:31:a7:33:90:47:02:4f:a5:61:71:75:1a:33:63:
ab:0d:2a:5f:37:0b:97:aa:cd:de:6a:68:6c:41:6a:8c:2b:16:
a8:87:ae:61:71:b7:20:c3:f2:25:8f:2c:5a:59:53:ad:97:aa:
5a:23:b6:0e:a7:79:95:06:ce:a0:fb:8c:f9:36:37:bd:8e:d0:
ef:7f:ce:8b:8a:13:94:59:76:11:df:5f:da:f8:f8:b6:8f:fd:
8b:28:2a:6f:87:19:6d:82:28:f3:40:52:b4:fc:fc:d5:bc:18:
57:5a:86:71:81:b1:b5:82:23:68:18:cb:91:a4:e4:e0:39:62:
c9:58:14:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org