Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/oQw3jerejKnoNH6JCVYFJj3ZC1Y.roa
File: oQw3jerejKnoNH6JCVYFJj3ZC1Y.roa (raw, json)
Hash identifier: Ef+T1lLaMzBYGCCc7zp796e2opUU03dKePcKifT4tnY=
Subject key identifier: A1:0C:37:8D:EA:DE:8C:A9:E8:34:7E:89:09:56:05:26:3D:D9:0B:56
Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial: 6F
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/oQw3jerejKnoNH6JCVYFJj3ZC1Y.roa
Signing time: Tue 01 Aug 2023 01:30:26 +0000
ROA not before: Tue 01 Aug 2023 01:30:26 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 7521
IP address blocks: 210.173.160.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
Validity
Not Before: Aug 1 01:30:26 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=A10C378DEADE8CA9E8347E89095605263DD90B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:6a:b4:35:6d:74:98:2e:94:93:f1:36:11:
e3:30:57:96:2f:14:1b:ae:dc:b7:d7:04:ab:88:3c:
4a:e8:f6:17:37:91:cd:9f:75:99:e9:61:22:61:0e:
10:82:ab:bc:86:7f:a6:32:2d:ad:eb:c5:11:51:de:
f3:f8:21:31:01:4c:79:6f:70:c4:00:28:94:ab:0d:
5a:64:90:cd:43:b2:c8:52:38:64:26:a5:9e:1f:87:
ec:43:8c:fa:89:19:75:58:d2:c8:c1:bc:5c:c7:53:
dc:df:c8:7f:84:9c:a8:71:85:4e:87:ca:cc:ab:26:
dd:f2:7d:3b:c5:9b:85:d3:96:81:b8:83:04:33:12:
1e:c9:bd:80:fd:5c:36:86:74:c7:67:ed:ba:03:a0:
34:9b:67:0a:9c:b5:cd:a0:7b:c3:0d:1c:ec:79:db:
be:48:7b:b0:ed:49:3f:f9:cb:b9:8d:77:cb:52:f2:
2e:31:0b:ab:3f:f1:8d:e6:07:2a:3e:a7:47:1c:e4:
93:59:8e:58:35:a6:e0:70:1b:c3:58:2a:80:30:3c:
e4:45:b5:87:bd:49:10:c7:4d:41:7b:76:41:a1:88:
27:e2:58:08:0d:90:de:33:45:d1:de:6d:ad:02:91:
de:eb:8d:e5:c1:47:e7:2b:bf:57:fb:ad:41:89:13:
7a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0C:37:8D:EA:DE:8C:A9:E8:34:7E:89:09:56:05:26:3D:D9:0B:56
X509v3 Authority Key Identifier:
keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/oQw3jerejKnoNH6JCVYFJj3ZC1Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.173.160.0/21
Signature Algorithm: sha256WithRSAEncryption
40:12:87:6d:35:b1:29:eb:a3:cc:a8:16:d6:88:55:03:20:c1:
cc:5a:df:17:eb:e5:86:66:40:35:2b:73:19:64:70:2a:6b:b2:
28:7a:d3:16:75:76:8e:4e:b9:2e:c4:88:62:b2:94:69:f1:b7:
a5:1d:ea:1f:2c:48:92:a8:f1:75:69:8a:13:3d:ae:bc:d0:75:
4c:af:d1:14:7b:a1:86:39:8c:ce:60:f6:f7:45:94:b7:c3:c8:
ef:88:82:5c:b4:7e:ea:6e:21:09:17:b2:6a:31:70:e2:66:58:
6b:d4:af:bf:21:94:4a:bb:8d:d2:2a:8a:f1:3f:82:7a:34:49:
bd:1e:93:4f:94:b6:ec:ac:a9:43:de:36:00:94:89:16:ba:70:
25:1d:a8:ee:0d:f4:b2:80:8b:f8:db:3e:be:f3:ee:6a:65:e2:
1d:ff:90:5b:d7:c4:be:34:6a:5f:bf:d1:2a:b5:f3:cf:bd:50:
b1:53:5c:b3:71:e6:9e:d7:13:69:fa:1b:56:8f:80:b6:84:33:
3a:11:d7:6b:ac:99:c9:b4:a1:1a:4c:8c:cb:1e:54:ea:c7:1f:
fc:10:df:51:79:ac:78:7d:b4:7c:e9:67:cc:66:24:55:5f:a1:
35:55:da:e7:4f:0f:49:32:b8:89:a5:7b:11:c3:58:07:cc:3f:
e3:f2:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:41 2024 by rpki-client on console-ams.rpki-client.org