Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/TFJI84jaXLxRWEERbTQMUejLObc.roa
File: TFJI84jaXLxRWEERbTQMUejLObc.roa (raw, json)
Hash identifier: BJaMcq6UyocJTEINR8/y64KqiRHommrzz8IiBdP5Zrk=
Subject key identifier: 4C:52:48:F3:88:DA:5C:BC:51:58:41:11:6D:34:0C:51:E8:CB:39:B7
Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial: 2A
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/TFJI84jaXLxRWEERbTQMUejLObc.roa
Signing time: Tue 26 Sep 2023 06:27:19 +0000
ROA not before: Tue 26 Sep 2023 06:27:19 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 23637
IP address blocks: 112.137.184.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Validity
Not Before: Sep 26 06:27:19 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=4C5248F388DA5CBC515841116D340C51E8CB39B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:b8:f3:51:1a:e5:3f:91:12:5a:48:70:b1:
cf:9f:e9:89:1f:a1:0a:d2:11:7a:52:5f:9e:c9:fc:
02:59:29:f5:0b:fb:6b:03:0f:f8:47:19:15:76:7e:
bb:94:04:40:5f:18:bc:33:86:8d:e7:68:20:4b:c2:
bd:bb:30:9b:d0:95:6c:d7:b7:f0:58:79:c5:4b:16:
ae:b7:87:f5:74:f5:d5:38:a5:27:97:b7:83:29:d3:
ba:6f:a5:45:e9:e7:14:5e:eb:d8:b4:71:b6:c2:d5:
ce:bf:90:5c:dc:28:2b:25:7d:29:cb:ca:1d:a2:f3:
98:f2:e6:d2:a2:d4:38:33:fb:dd:e3:9e:04:a0:6f:
c4:e7:0c:97:b3:4e:6e:76:a3:ed:2a:71:2b:ff:47:
eb:2a:fa:4b:ac:e4:c2:41:e2:6a:36:17:a1:c8:6a:
90:4d:13:5e:2a:9d:25:68:36:c1:8b:b9:73:a6:05:
36:c9:7e:02:5f:85:d6:b5:24:13:82:d8:3a:6f:ec:
ea:9c:0c:c2:f7:5a:74:ba:72:54:d7:46:ca:b6:eb:
78:0d:11:82:70:c1:b8:c4:65:e4:49:20:48:44:e2:
ca:4e:bd:26:29:d9:b3:66:34:e8:83:08:83:ce:83:
e4:2c:28:48:66:81:41:a7:63:44:da:2a:6d:3d:dd:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:48:F3:88:DA:5C:BC:51:58:41:11:6D:34:0C:51:E8:CB:39:B7
X509v3 Authority Key Identifier:
keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/TFJI84jaXLxRWEERbTQMUejLObc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.137.184.0/21
Signature Algorithm: sha256WithRSAEncryption
21:17:df:d5:63:87:4e:32:46:34:4f:d8:78:8c:23:28:a9:1c:
4b:1a:e8:7a:a3:f8:02:84:02:39:49:a6:12:70:94:3d:b3:2b:
c3:98:db:ba:dc:50:42:50:89:5b:8d:89:a3:63:f8:17:bf:e8:
ca:fb:7d:96:13:b3:4b:38:fa:5b:b2:59:ee:cf:01:14:0d:79:
dd:c0:f5:2f:16:6f:17:f9:2a:a2:09:d9:74:db:c1:25:56:d4:
8a:07:84:86:50:ca:3f:82:1f:a4:bd:d3:7a:c9:33:fc:7e:f8:
68:73:84:37:42:21:44:71:20:74:f4:b7:35:b9:82:16:c0:60:
86:6d:41:50:20:d7:b1:28:23:dc:ce:72:ad:ca:7d:51:f8:24:
f7:b2:54:90:a9:dc:59:e8:dd:70:20:c9:e3:2b:f1:da:d4:f0:
bc:e2:ad:64:1c:d8:84:d5:c9:d3:e5:b3:a9:4e:2d:eb:dd:41:
c6:d9:60:30:ca:86:c4:8c:86:de:b3:72:20:cb:b6:76:ef:37:
ba:e9:d4:84:d3:de:d0:86:3e:48:ca:01:74:97:f1:b4:98:68:
21:b3:db:35:7a:b2:25:f5:01:a9:09:36:f4:93:7a:d5:dc:ab:
b3:48:8b:96:f7:dc:c2:59:76:e5:27:7a:ef:17:0b:d7:20:c7:
b3:e6:b2:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org