Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/OKpdlvbaU0za-YShp5Izye2vHGI.roa
File: OKpdlvbaU0za-YShp5Izye2vHGI.roa (raw, json)
Hash identifier: DrebmLotEUXMyLC4nC3QeqX1Q/80FhOwIOFfk6OLCSs=
Subject key identifier: 38:AA:5D:96:F6:DA:53:4C:DA:F9:84:A1:A7:92:33:C9:ED:AF:1C:62
Certificate issuer: /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial: 12
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/OKpdlvbaU0za-YShp5Izye2vHGI.roa
Signing time: Fri 18 Aug 2023 02:32:20 +0000
ROA not before: Fri 18 Aug 2023 02:32:20 +0000
ROA not after: Sat 17 Aug 2024 02:01:09 +0000
asID: 9597
IP address blocks: 219.100.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 02:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Validity
Not Before: Aug 18 02:32:20 2023 GMT
Not After : Aug 17 02:01:09 2024 GMT
Subject: CN=38AA5D96F6DA534CDAF984A1A79233C9EDAF1C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c8:56:62:f9:64:25:18:ef:66:0e:bf:36:98:
01:3e:86:86:f3:b4:d9:c4:8d:0a:a3:19:08:a9:05:
48:c0:5a:81:2d:bf:3d:f0:38:69:e1:34:c8:59:c3:
02:4a:7a:09:7b:f2:ed:bb:3e:1d:92:a7:dc:0e:9f:
99:0d:a7:7e:6e:38:49:ba:6b:f1:f4:bf:95:f2:9a:
34:b4:d2:76:06:82:2f:f7:55:a6:a8:23:d5:53:5c:
b1:91:45:e4:2b:f3:ca:0a:40:9d:ee:cd:b1:ef:18:
56:a4:67:b2:ee:58:f4:e6:16:7a:ca:f3:0b:8f:e3:
8a:14:18:f7:88:53:50:c9:d0:3b:ee:cb:df:bc:64:
b4:be:d0:16:85:d3:5e:d7:1b:e7:e5:f4:1f:06:3c:
c0:bb:7c:ea:e9:14:a4:fd:1c:14:f8:d7:ad:b7:02:
75:9a:f1:e6:10:1a:69:d5:84:fe:44:9b:3f:9b:18:
39:c7:d4:6b:a0:af:96:a5:44:02:6d:a4:d5:82:30:
e1:0c:17:38:52:a2:67:2d:e1:c8:53:77:fc:ec:b1:
bf:bb:4a:da:e7:db:eb:33:3e:e7:31:65:fb:3a:17:
5e:19:2f:19:0c:25:d2:69:91:6d:41:03:8e:9a:62:
07:95:92:cc:80:ce:74:f7:bf:76:e6:87:81:4a:4c:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AA:5D:96:F6:DA:53:4C:DA:F9:84:A1:A7:92:33:C9:ED:AF:1C:62
X509v3 Authority Key Identifier:
keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/OKpdlvbaU0za-YShp5Izye2vHGI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.168.0/22
Signature Algorithm: sha256WithRSAEncryption
35:23:4d:dc:0f:8d:7b:94:8e:12:69:d0:b3:b0:7d:19:01:bc:
e0:ef:5d:d0:8c:7e:c8:48:fc:ac:f7:7e:a7:96:9a:23:68:e5:
a6:5b:08:c5:41:24:7a:36:cf:02:b6:df:6c:20:53:63:71:9f:
f9:5d:7d:79:71:42:57:0b:d4:26:3f:fb:e9:ce:d6:e8:e0:64:
94:2f:9e:d2:4b:20:75:ce:51:f1:a2:85:d6:39:b8:f0:6a:ce:
a5:de:52:e1:64:c3:1b:3d:eb:a7:d3:18:97:6e:e9:a1:b7:4d:
f8:ca:ae:ef:bb:c4:ef:f9:be:87:f0:b7:f4:da:28:5d:89:0c:
11:95:81:81:68:44:87:3b:35:d7:b0:ec:b3:8d:4b:fe:24:5f:
52:bc:16:e2:45:38:cb:1c:78:9e:63:6b:e7:a0:62:af:f5:80:
32:c1:f2:8a:8d:76:c8:ef:ee:69:9e:a7:5d:40:f1:c1:ee:d8:
c0:c6:75:c3:bc:0c:d2:35:a2:18:70:c7:41:1d:c1:e5:9e:e1:
5b:19:1d:59:d5:1d:d9:d2:43:3d:8a:7b:47:00:9c:35:ee:de:
63:40:cd:9e:c9:e6:be:8a:cd:5d:62:f1:fe:fa:f3:14:05:cb:
ac:cb:20:b7:99:42:00:17:4a:62:89:3a:d9:3e:4f:d2:56:d1:
3c:63:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 04:02:58 2024 by rpki-client on console-ams.rpki-client.org