Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/nrGkD9BKoGmcd8Vf7ZGH3X7nbUM.roa
File: nrGkD9BKoGmcd8Vf7ZGH3X7nbUM.roa (raw, json)
Hash identifier: 1YE+DFRr/MvQjZgns9rjk6z3Z1qM7gdPp6RjFys8jR8=
Subject key identifier: 9E:B1:A4:0F:D0:4A:A0:69:9C:77:C5:5F:ED:91:87:DD:7E:E7:6D:43
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: B1
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/nrGkD9BKoGmcd8Vf7ZGH3X7nbUM.roa
Signing time: Sat 01 Jul 2023 01:31:13 +0000
ROA not before: Sat 01 Jul 2023 01:31:13 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 9370
IP address blocks: 163.43.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 01:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Jul 1 01:31:13 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=9EB1A40FD04AA0699C77C55FED9187DD7EE76D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:63:81:ed:46:5f:e9:e9:29:de:0d:74:fd:
a3:70:51:d2:eb:41:d6:03:e4:55:97:e4:a1:4f:03:
f2:12:b4:bc:b2:6c:6b:a2:bc:62:ef:40:56:3b:f6:
0c:a7:98:c8:65:c1:ba:3d:32:38:5d:2c:c9:68:2e:
40:31:6e:c5:d7:53:b9:68:f6:e5:c8:b0:07:58:c2:
f1:bf:33:24:34:23:59:24:6e:03:68:5f:3b:55:d3:
0a:0d:8a:69:0b:e0:7b:9c:45:79:f9:47:5e:80:97:
63:cc:32:9f:18:78:28:3f:9f:c1:67:20:0e:f5:c9:
73:20:9a:79:92:67:6a:7d:9e:d3:1e:cc:4c:f5:e1:
02:d7:86:fc:7d:5d:fa:ca:64:90:a2:2e:44:d4:a0:
59:ba:01:6d:f8:b7:cc:dc:cf:f1:98:fe:83:42:49:
92:77:9d:c5:e5:8f:52:f8:0d:fb:78:3f:aa:a7:20:
23:fc:d7:49:da:f9:17:33:da:7c:ce:96:78:8f:b3:
b8:ef:dd:5d:8a:de:00:97:9d:2f:bb:4a:e7:63:e9:
5c:f6:c0:cd:5b:8e:9d:b2:8a:9f:cb:be:6a:63:fd:
e9:9f:c5:5d:a9:15:fc:fd:45:58:5f:b6:a8:b5:f3:
54:b8:e4:cc:13:45:cf:b7:b6:b2:a9:a6:24:f3:56:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B1:A4:0F:D0:4A:A0:69:9C:77:C5:5F:ED:91:87:DD:7E:E7:6D:43
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/nrGkD9BKoGmcd8Vf7ZGH3X7nbUM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:78:27:e6:49:f1:ca:10:b6:96:7a:8f:43:88:a8:5c:7e:9f:
d9:ac:18:98:e0:62:04:3e:13:c0:e4:d5:f8:98:aa:16:73:b4:
b6:96:ff:4d:39:bd:96:b0:6c:ac:93:cd:d4:e7:6b:a6:03:04:
a5:e2:96:8e:94:25:ff:65:e4:0b:61:70:fb:96:53:76:0d:68:
32:8a:1e:2c:36:4e:e0:5f:3f:3e:1d:df:c4:2e:aa:4a:ce:9f:
ea:a8:91:08:f9:78:39:ce:b1:88:e8:08:d7:3c:8a:bc:0d:38:
8e:3c:60:de:db:76:de:b5:40:34:e3:71:84:46:21:72:f1:85:
8c:cb:56:02:d3:21:da:59:c6:93:7c:9a:23:ec:db:68:1d:dd:
c7:cc:c7:4c:9c:d9:bd:5f:5c:8e:03:a9:dd:e4:0c:53:3d:69:
6e:4d:ea:5d:ab:dd:91:32:dd:77:bc:be:d2:1e:f7:61:e8:97:
1b:64:25:c1:b3:0f:dd:05:4c:cd:b2:5c:7f:c2:8d:38:a0:b9:
a6:56:a2:0e:39:6e:42:6e:8b:33:11:78:11:fd:ac:18:51:84:
2b:6a:66:bf:71:8e:4e:8c:d2:dc:c4:b5:84:ae:35:0e:d7:5c:
c3:45:6c:92:ba:ee:45:9c:c5:68:3e:5a:da:67:a3:af:92:f4:
14:6a:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org