Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2154/6DZPms83N77LRyV8XOMXgCJarnc.roa
File: 6DZPms83N77LRyV8XOMXgCJarnc.roa (raw, json)
Hash identifier: C1iogtioG8wn4JpEWBlHr4XPMLDfw5sshXsfsDqTlWU=
Subject key identifier: E8:36:4F:9A:CF:37:37:BE:CB:47:25:7C:5C:E3:17:80:22:5A:AE:77
Certificate issuer: /CN=35892143C493B9B2CC1E79133F5231C72E152685
Certificate serial: 1F
Authority key identifier: 35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/6DZPms83N77LRyV8XOMXgCJarnc.roa
Signing time: Sun 01 Jan 2023 01:30:05 +0000
ROA not before: Sun 01 Jan 2023 01:30:05 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 396982
IP address blocks: 202.250.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35892143C493B9B2CC1E79133F5231C72E152685
Validity
Not Before: Jan 1 01:30:05 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=E8364F9ACF3737BECB47257C5CE31780225AAE77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:c4:78:a7:c4:b8:4a:08:ab:4b:f8:0e:02:
0b:6d:00:fa:d8:73:e6:9e:e9:3e:ce:32:95:a2:d9:
b8:62:43:d8:89:2d:c5:b4:94:de:c7:de:f3:e8:b3:
16:95:9f:22:b8:76:db:97:73:df:cf:9e:b7:ed:21:
0a:41:59:19:41:71:04:2e:39:5c:de:8c:a0:ce:f9:
97:ec:e6:d1:06:8a:7d:3e:f0:13:34:88:3f:cf:47:
f2:cc:27:7e:92:a1:b1:cc:74:47:06:b5:5f:fb:85:
22:58:45:98:24:ab:56:b5:ca:00:b1:97:ce:8f:74:
06:e5:ad:76:08:d2:02:2e:a6:2b:c8:8b:64:ce:76:
7e:b8:94:a9:b8:c1:51:4e:49:9c:e1:86:0a:6a:fd:
be:74:72:1e:1e:ff:70:ff:cf:92:4f:7c:a0:62:20:
5a:2f:1a:b5:d7:be:fb:e2:a1:9a:9b:d9:31:8d:f4:
c0:28:94:21:2f:91:41:9e:0f:6c:26:68:b5:ea:31:
d4:79:77:12:b5:85:5d:9a:55:3d:56:73:00:b7:55:
59:cd:f1:49:95:4f:4a:ed:f8:f0:88:bd:c3:d6:f3:
2a:6f:b3:c2:00:21:94:dd:21:c1:54:02:a1:bc:9b:
f3:f0:9a:b9:b4:63:ac:86:51:05:67:0b:f5:d7:a6:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:36:4F:9A:CF:37:37:BE:CB:47:25:7C:5C:E3:17:80:22:5A:AE:77
X509v3 Authority Key Identifier:
keyid:35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/NYkhQ8STubLMHnkTP1Ixxy4VJoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/6DZPms83N77LRyV8XOMXgCJarnc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.250.28.0/24
Signature Algorithm: sha256WithRSAEncryption
28:bf:c9:a3:e6:c2:02:9a:be:03:7b:32:be:f8:22:9c:c3:a9:
35:bf:0d:04:eb:c3:3b:9d:d7:0f:a7:e3:27:86:04:e2:a0:37:
22:60:a8:bf:de:ca:1c:2f:45:12:ab:d6:51:f8:fd:9d:fa:9b:
b3:49:f5:e2:27:3a:11:bb:74:ab:9a:78:52:e3:72:38:d3:85:
b2:1b:6c:db:fd:b9:1e:fb:6a:42:f7:1c:27:b2:03:0c:79:af:
07:0b:36:2a:84:6a:98:bd:3a:51:a7:4b:ee:a3:72:71:fa:da:
14:e7:38:3a:a1:4a:5e:6e:88:cd:8b:ae:be:35:5c:d4:3e:1a:
73:25:03:56:80:c8:07:14:96:8b:e5:6c:f1:9f:d0:ea:2d:58:
4f:c0:58:ad:41:aa:4f:37:10:4a:5d:28:69:4a:32:d1:c2:25:
5a:53:4b:8a:2e:57:8f:eb:cc:b1:11:ff:9e:63:6d:bc:08:df:
70:dc:86:04:c5:6f:e8:b9:b8:c8:39:bf:31:84:4d:35:f9:ba:
75:4a:31:90:f3:ab:2a:a3:9b:c9:32:b8:d4:45:2f:2b:19:bf:
c1:d1:5b:a6:44:46:b8:81:24:4d:27:58:50:58:c8:c3:e5:56:
55:cb:3e:99:00:01:e6:d5:11:14:c5:73:4f:a8:7e:38:9b:1d:
25:64:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 02:02:47 2023 by rpki-client on console-fra.rpki-client.org