Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/epA8mVupIlyZjDVyr8pm_kR18-0.roa
File: epA8mVupIlyZjDVyr8pm_kR18-0.roa (raw, json)
Hash identifier: ahdX1kk2xDgV39tdzkHH6AL+yv8az+BM3WjcAqPGXEI=
Subject key identifier: 7A:90:3C:99:5B:A9:22:5C:99:8C:35:72:AF:CA:66:FE:44:75:F3:ED
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: 51
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/epA8mVupIlyZjDVyr8pm_kR18-0.roa
Signing time: Sat 31 Aug 2024 01:30:49 +0000
ROA not before: Sat 31 Aug 2024 01:30:49 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 17941
IP address blocks: 180.148.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 01 Oct 2024 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Aug 31 01:30:49 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=7A903C995BA9225C998C3572AFCA66FE4475F3ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:0f:80:1e:11:66:b9:82:38:1a:9d:0e:34:
60:5e:50:46:6a:1d:ac:0c:4c:e4:65:cb:ee:7b:77:
29:40:a0:3e:88:a6:20:b8:7d:30:f1:8e:4b:30:82:
97:06:05:24:1b:2a:82:9f:aa:03:cc:99:2d:09:22:
de:76:a9:7b:a6:36:78:40:5c:fb:82:df:d6:96:c1:
1c:eb:cd:35:e7:41:a1:0d:6d:d3:96:3f:83:89:3f:
47:a4:87:e3:0b:d4:5c:08:65:a2:0f:f5:b6:7e:87:
e6:22:8a:6d:77:6e:e4:5c:9a:98:22:3d:78:0e:a0:
37:b4:7c:42:8e:33:3d:74:f8:eb:61:fc:6d:40:e9:
16:48:16:83:68:84:83:9f:82:30:94:6d:02:86:74:
4b:46:d0:01:27:8f:a8:f5:19:f3:cc:60:d0:c3:20:
bf:a1:8d:b9:0a:ec:9c:df:e2:f1:6c:fa:c0:35:79:
55:b9:99:35:29:ed:7a:12:cd:cf:56:41:8b:ae:2d:
ae:46:0d:84:73:f2:6b:6e:46:c2:8a:b4:c6:9b:3f:
4e:54:0d:27:27:0f:a4:b4:3c:ec:e3:7d:1f:02:f8:
cb:5f:99:e7:82:b2:27:04:35:42:d3:e9:07:3d:9e:
0a:96:ce:f0:bd:ba:ee:8c:10:5c:af:d0:a9:2c:ac:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:90:3C:99:5B:A9:22:5C:99:8C:35:72:AF:CA:66:FE:44:75:F3:ED
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/epA8mVupIlyZjDVyr8pm_kR18-0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.148.160.0/20
Signature Algorithm: sha256WithRSAEncryption
20:a6:7d:82:05:b4:ed:1f:9a:82:1f:b9:e4:e3:23:e3:92:04:
b3:25:2b:a2:b3:5a:d1:7f:78:81:85:d6:f2:87:d1:19:24:53:
bd:ef:ad:9e:77:86:69:b2:10:28:74:62:ae:a4:48:43:90:72:
a5:e7:d1:bc:d9:44:e5:61:85:bb:a2:10:4c:42:d5:7a:ad:64:
4d:61:0a:37:d8:40:f6:f8:0c:83:3c:6e:39:4a:11:fa:87:dc:
b9:a4:76:32:df:f5:86:dc:71:f2:93:8b:30:2c:e7:a6:4e:30:
cc:5b:eb:9f:2e:a5:9c:87:18:6f:28:da:78:a7:11:0b:fc:dd:
4b:ff:50:53:45:c9:6f:94:49:64:88:84:2d:fa:14:9f:00:3c:
1b:0d:12:3a:0d:72:d0:c1:46:ca:cf:e5:78:bd:db:11:db:15:
3b:4f:24:33:be:72:52:db:04:eb:3e:2b:1b:73:13:05:3c:ad:
e8:65:b4:93:11:7a:a9:9a:79:02:c0:e9:3a:a4:58:37:9a:b7:
62:58:2d:29:6b:36:d5:74:d4:d1:49:68:b8:7b:c4:3d:f7:70:
9b:8a:cc:2a:d0:eb:91:71:1c:39:37:1a:48:41:63:28:20:16:
6f:d8:fc:90:e4:20:91:a3:21:9a:26:02:5e:61:e5:18:29:7e:
9f:c8:f9:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 1 08:29:41 2024 by rpki-client on console-fra.rpki-client.org