Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/_8xO0ZQjMlHdJdCtoZNI7EkfPwQ.roa
File: _8xO0ZQjMlHdJdCtoZNI7EkfPwQ.roa (raw, json)
Hash identifier: BBqGTKZ9YNN99JuviRqJDvCp6soBREgV2gHY2CevSm0=
Subject key identifier: FF:CC:4E:D1:94:23:32:51:DD:25:D0:AD:A1:93:48:EC:49:1F:3F:04
Certificate issuer: /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial: 03
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/_8xO0ZQjMlHdJdCtoZNI7EkfPwQ.roa
Signing time: Fri 18 Aug 2023 02:20:18 +0000
ROA not before: Fri 18 Aug 2023 02:20:18 +0000
ROA not after: Sat 17 Aug 2024 02:01:09 +0000
asID: 9597
IP address blocks: 27.34.160.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 02:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Validity
Not Before: Aug 18 02:20:18 2023 GMT
Not After : Aug 17 02:01:09 2024 GMT
Subject: CN=FFCC4ED194233251DD25D0ADA19348EC491F3F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:0c:2e:ee:77:83:a1:23:71:a6:1f:4f:f8:
d0:0e:ac:a5:91:ac:3f:47:87:25:e7:9e:6f:ec:6d:
a6:b7:3f:a1:e0:36:28:44:cb:c4:95:14:e8:e4:ba:
70:80:e6:35:f5:cd:60:3a:c1:b3:37:1e:66:6d:cb:
27:6a:4a:fc:62:30:22:1d:f2:8d:df:f7:df:30:53:
02:60:6f:a4:90:15:75:e0:ca:13:d3:68:6e:10:61:
ce:5a:b2:74:35:17:9d:1d:7e:10:00:b9:5d:91:db:
56:de:1f:63:f5:34:06:b7:82:db:9c:ec:95:05:f1:
3f:11:41:e5:52:61:7c:b6:5a:5c:40:ec:c9:db:60:
c2:ec:3f:58:74:e9:69:1f:d1:9a:ec:9e:99:28:9e:
16:d1:5f:7b:c7:e9:2b:69:12:fb:d7:6f:53:44:a6:
fc:42:5f:93:29:e2:ab:f1:f2:28:44:01:dc:15:75:
84:61:3b:28:ea:eb:b8:e3:c2:79:f0:21:50:1e:a6:
c9:8e:8f:be:a7:26:6a:9b:ac:8f:61:2c:08:2b:7d:
fa:e3:cb:74:42:3f:fc:5c:66:39:dc:ec:1f:3f:7f:
e7:bb:2a:55:5d:05:37:96:a7:69:03:c6:a3:b2:08:
8d:d3:5e:16:25:fd:6e:2c:d7:e5:f3:3a:a7:e5:3d:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:4E:D1:94:23:32:51:DD:25:D0:AD:A1:93:48:EC:49:1F:3F:04
X509v3 Authority Key Identifier:
keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/_8xO0ZQjMlHdJdCtoZNI7EkfPwQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.34.160.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:20:af:3c:8c:82:0d:56:4a:a1:9e:de:28:e2:cc:13:8b:1b:
1e:83:f8:67:98:8c:4a:39:06:e0:ef:25:bf:ea:36:3e:9c:23:
bd:8f:e8:60:65:60:d8:74:8f:ff:b4:9d:66:81:90:24:6a:ab:
58:36:8d:b3:80:c0:e4:b4:92:c3:58:10:7a:bd:4a:6f:cf:05:
cd:9d:29:fe:64:6f:de:32:84:c9:2f:97:78:47:cd:98:b8:e7:
d5:a5:d5:3c:df:33:03:dc:f4:8e:25:bf:6b:9b:21:1b:f7:8a:
16:7a:ee:2f:a2:b4:26:1d:6a:43:90:bc:e3:59:90:3e:1b:77:
73:18:74:ff:a6:2a:9d:3e:fa:f0:2e:57:3c:2a:91:c7:20:db:
d1:1e:55:a1:a1:2c:25:a1:f7:61:87:2e:cd:e1:ec:f1:22:ec:
01:27:68:02:13:91:da:65:92:53:c4:76:76:5d:62:7d:10:e3:
01:e5:8d:3f:5e:ea:cc:0f:e3:82:c0:11:3e:6b:d0:bf:cc:7f:
b8:a5:9f:e6:b4:19:d7:3d:cb:68:4f:13:ca:74:1b:b2:47:c1:
de:17:62:bd:05:ce:66:ed:51:0d:7e:09:05:bf:a9:1b:4e:09:
24:47:33:45:02:84:e7:c9:d1:9b:c1:ce:6b:a2:0a:c0:31:71:
71:4c:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 04:43:56 2024 by rpki-client on console-fra.rpki-client.org