Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Wx-mXdMpC5Q8wArd9TqkyrS1EbQ.roa
File: Wx-mXdMpC5Q8wArd9TqkyrS1EbQ.roa (raw, json)
Hash identifier: R7sdQFN0DiCpyJJJX5dqrTrAZI+IcKQdx0M6cnRLYOU=
Subject key identifier: 5B:1F:A6:5D:D3:29:0B:94:3C:C0:0A:DD:F5:3A:A4:CA:B4:B5:11:B4
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 038E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Wx-mXdMpC5Q8wArd9TqkyrS1EbQ.roa
Signing time: Fri 31 May 2024 01:28:56 +0000
ROA not before: Fri 31 May 2024 01:28:56 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.88.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 27 Jun 2024 04:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: May 31 01:28:56 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=5B1FA65DD3290B943CC00ADDF53AA4CAB4B511B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:fb:43:e2:83:6c:2d:73:09:a3:1f:8f:a8:
99:e6:8c:07:07:05:75:51:96:6c:85:79:33:78:37:
5f:7c:3e:65:f9:8a:f9:d1:bf:9d:eb:69:85:85:cf:
09:1b:99:a8:e1:69:18:80:a8:90:41:96:39:52:8f:
fc:45:69:3c:05:aa:3e:61:51:9b:35:c7:e7:10:f6:
dc:6b:ec:e2:23:ea:93:77:fe:28:27:88:3a:76:1f:
39:b3:a7:df:a3:4e:d7:9c:75:58:36:98:97:a2:d8:
ad:02:c0:31:ed:86:e4:50:35:5c:7f:7f:cb:06:02:
ea:20:3c:18:c7:83:64:10:32:c7:f0:dd:96:23:bc:
5a:8f:a4:a9:e4:bf:5e:e2:9c:64:04:d0:4b:a7:b5:
a9:e2:81:18:4c:ab:33:30:fe:05:35:66:3c:7a:d0:
21:eb:37:48:45:31:e7:85:ef:dd:35:dc:45:2a:11:
ce:96:01:9f:6f:1e:a6:71:d6:e4:ca:eb:09:09:f4:
9a:f0:b3:37:6f:e2:05:ff:cd:67:45:5a:c8:35:6c:
3b:b0:f1:7c:cc:3f:3d:26:6a:0a:7d:16:36:31:a8:
28:2f:6b:e0:47:0b:91:ed:ab:7e:90:3d:24:94:9f:
95:a8:ff:01:f2:16:fe:93:c0:0a:51:8a:d6:0e:72:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1F:A6:5D:D3:29:0B:94:3C:C0:0A:DD:F5:3A:A4:CA:B4:B5:11:B4
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Wx-mXdMpC5Q8wArd9TqkyrS1EbQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.88.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3a:14:70:e4:e6:b7:45:7a:09:88:2f:7a:5c:4c:64:9b:e2:
d6:82:58:2b:47:7e:57:87:40:29:f4:f7:b4:c5:02:5c:e8:c4:
00:92:b5:8c:db:5d:f6:8f:70:7f:6d:3e:1e:da:cb:e7:a8:ce:
3b:e2:d8:8a:20:be:06:85:db:df:85:15:04:c6:4d:77:7e:13:
4c:82:62:e2:e0:61:68:4b:cd:0b:d3:e4:34:db:ff:fa:f3:4f:
9a:86:b1:79:c6:3e:2a:97:f1:bb:c3:e4:91:a6:4a:da:1c:b9:
70:64:a0:b4:74:41:a7:ce:db:a5:19:10:b8:21:14:f8:3c:a3:
06:80:24:a5:82:be:9e:c7:a4:bc:07:a5:90:de:26:9d:ac:cb:
4f:0b:07:ff:18:32:e0:2a:38:bd:4c:d0:d8:e8:62:d2:1b:e1:
de:d1:b1:02:f6:54:06:bb:f1:34:34:7c:ba:16:7b:dd:bf:c2:
9f:da:1f:64:ba:ce:83:95:12:cc:72:03:2c:0c:7f:5e:3e:0f:
f6:50:bf:cb:3d:75:a0:37:77:72:fa:bb:83:39:07:a3:c2:09:
d8:c8:83:82:ee:7a:22:52:d6:a4:95:9e:36:96:0b:f7:b2:29:
67:71:75:9a:6a:3a:93:d1:06:7f:f5:7a:42:95:e5:fe:0c:a4:
35:cb:dc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 07:00:50 2024 by rpki-client on console-fra.rpki-client.org