Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2787/yU0cZatAsb6jevpjPzQtnQs9ZZY.roa
File: yU0cZatAsb6jevpjPzQtnQs9ZZY.roa (raw, json)
Hash identifier: KFWvIhMtMBRarx8+x3dc0iPVtT1mqEoE1HXKu2jbSV4=
Subject key identifier: C9:4D:1C:65:AB:40:B1:BE:A3:7A:FA:63:3F:34:2D:9D:0B:3D:65:96
Certificate issuer: /CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65
Certificate serial: 37
Authority key identifier: FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/yU0cZatAsb6jevpjPzQtnQs9ZZY.roa
Signing time: Thu 13 Apr 2023 09:53:21 +0000
ROA not before: Thu 13 Apr 2023 09:53:21 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 59128
IP address blocks: 192.50.220.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65
Validity
Not Before: Apr 13 09:53:21 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=C94D1C65AB40B1BEA37AFA633F342D9D0B3D6596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:68:ba:4c:49:07:0a:fe:21:c8:3a:bf:48:
10:b6:ff:cd:c1:5b:60:0b:c9:3a:21:da:96:e2:92:
77:05:22:30:65:cc:18:e1:c8:4e:c3:42:fb:4c:19:
ee:b6:86:67:87:66:ba:dd:25:60:ae:57:0d:65:e3:
cb:2b:3b:cd:ff:2e:d0:61:21:60:49:27:ca:b8:41:
c2:2a:07:3d:f2:19:89:0b:12:12:ff:5c:e7:11:25:
4d:42:a3:3a:ba:c0:34:2b:0f:48:c0:5a:e2:0e:cd:
db:f4:6c:19:7e:16:dc:91:12:2e:41:7b:d5:60:be:
0f:5c:ae:63:09:b7:3e:57:cc:80:92:c4:4e:b7:11:
a8:82:86:22:d8:42:1f:c0:fc:eb:f2:d4:9e:f1:ca:
f3:0a:c1:03:49:ca:f5:0a:59:c8:c5:40:55:ce:9d:
eb:a0:42:fc:ae:f6:9e:3a:f5:07:70:27:c3:8a:52:
f7:13:33:d0:77:94:c8:9d:22:f4:ed:09:08:c4:7e:
39:29:29:71:8f:9a:92:f7:6f:23:a1:af:17:98:d1:
3a:29:21:da:e3:52:88:b7:d8:8f:21:a8:c9:ac:12:
a2:51:2f:fe:0d:4a:d3:c5:f8:c3:6a:4d:bf:b9:75:
02:2c:ef:92:1d:d8:e3:30:63:ad:40:11:ed:aa:3e:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4D:1C:65:AB:40:B1:BE:A3:7A:FA:63:3F:34:2D:9D:0B:3D:65:96
X509v3 Authority Key Identifier:
keyid:FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/yU0cZatAsb6jevpjPzQtnQs9ZZY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.50.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b3:ed:61:fe:78:ed:c3:21:e6:e3:cc:25:ec:d8:9c:a4:6b:
ad:03:e9:c7:6c:95:06:98:6e:41:df:9e:9e:2b:98:8a:a1:e7:
17:25:90:4e:26:22:63:5b:58:b2:7b:de:af:aa:77:24:73:3a:
ab:b7:a6:5b:5a:f8:05:0f:0f:64:88:9f:6d:6e:c0:75:1a:13:
db:2c:42:51:97:7a:d0:43:d0:1a:0e:db:73:3a:6c:4b:23:a4:
04:7a:0d:90:dd:68:67:4c:fd:bb:67:ca:1a:4f:8b:48:69:9a:
55:e0:06:b6:16:15:9d:c0:a9:e1:45:3f:0c:5d:d0:10:68:05:
0e:5b:0b:dd:e4:89:79:6e:e3:ce:ee:d2:3f:18:f2:a4:10:f1:
6d:21:8d:c9:28:a9:76:34:a4:f3:20:dc:06:e7:6f:7e:64:f6:
1a:04:f1:30:b7:83:0f:73:58:f5:05:0d:f4:d9:10:f1:1e:a6:
90:d2:55:a2:4f:b1:60:2b:cb:e4:f6:24:d7:d2:dc:a8:bd:f1:
d9:23:ae:80:87:65:10:9a:e3:95:36:ee:d5:d0:63:d4:80:b6:
a8:5c:0a:8c:8e:7d:91:c6:1d:ab:66:4d:33:41:e2:20:6a:99:
45:9a:91:cd:cf:fb:5c:e9:0a:ae:97:04:6a:58:e2:b2:69:55:
a3:03:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org