Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/F08cX1gJI0XKArzF_PtJZoXkj5A.roa
File: F08cX1gJI0XKArzF_PtJZoXkj5A.roa (raw, json)
Hash identifier: J8jZ7m0fKo7ZvzagYpMgH+gXqwQ5kBE7OR7kmzpOqwQ=
Subject key identifier: 17:4F:1C:5F:58:09:23:45:CA:02:BC:C5:FC:FB:49:66:85:E4:8F:90
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 14
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/F08cX1gJI0XKArzF_PtJZoXkj5A.roa
Signing time: Wed 06 Dec 2023 01:44:29 +0000
ROA not before: Wed 06 Dec 2023 01:44:29 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 2514
IP address blocks: 107.153.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 31 Oct 2024 01:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Dec 6 01:44:29 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=174F1C5F58092345CA02BCC5FCFB496685E48F90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:7a:c9:20:38:0d:dd:71:d2:b9:d6:ca:48:
cf:cf:10:8e:9c:ed:b9:ce:cc:92:7c:8c:08:c3:13:
27:09:24:b4:fc:08:eb:9a:1b:4d:08:ea:71:94:c7:
dd:ba:59:50:f9:87:2f:9e:42:36:ac:db:c5:5b:03:
cf:24:be:ca:53:76:2f:f9:bd:63:9f:c7:74:b9:97:
c9:d2:a5:a5:da:15:6f:77:f0:1c:7a:33:32:15:b5:
cf:f1:42:72:26:f8:62:80:41:f8:b8:db:ac:b7:91:
01:38:d8:c1:db:57:02:54:cf:0a:87:0c:b6:d8:1b:
ce:79:fb:f9:db:33:32:32:37:06:8f:b8:50:8d:11:
de:85:f6:25:57:db:d9:be:9d:9c:5f:b1:ce:80:e2:
97:49:85:4c:fd:08:ad:5a:e4:a5:6c:ef:ca:6f:c4:
7f:7a:15:b2:48:7b:48:ed:b5:36:df:ac:4e:e1:2a:
01:f7:bf:47:dd:2d:3c:b3:bc:b6:95:34:9a:5c:63:
b2:9c:e9:b2:5d:55:d0:84:e8:8a:a8:2d:30:6d:ec:
20:a2:dc:ed:ce:01:8f:95:ed:2c:17:f0:b3:2c:e0:
35:a8:19:95:88:da:be:bb:7a:11:f1:94:4b:c8:95:
46:de:1d:ba:89:37:7a:7c:3d:d9:29:15:03:55:c0:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4F:1C:5F:58:09:23:45:CA:02:BC:C5:FC:FB:49:66:85:E4:8F:90
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/F08cX1gJI0XKArzF_PtJZoXkj5A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
107.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:3d:93:c6:f3:9b:3d:eb:76:9c:89:c4:31:75:18:de:80:b0:
f0:bb:f3:80:ed:ad:f7:b6:24:53:4f:79:a9:2e:af:ff:a9:b7:
05:38:c3:40:69:ab:af:6b:28:88:4c:0b:74:c1:e7:77:c9:7f:
8d:0f:9e:cc:ba:87:30:ea:f9:5d:9d:eb:ca:22:db:3c:56:41:
40:92:16:35:95:8d:52:30:fe:14:ca:c9:c6:56:86:7c:59:c1:
be:8f:f5:ed:46:3a:e5:14:11:cc:04:8c:77:0e:8c:a0:8e:c1:
92:f8:e5:8e:ca:e6:87:d2:3e:f7:f3:1e:a8:d0:bc:9f:2c:a3:
4f:85:92:1e:84:77:ad:90:ce:41:9c:77:f8:d0:55:af:93:8c:
1a:aa:c2:b0:a6:11:a5:0d:0b:69:05:1d:b1:0e:f4:d3:16:03:
d8:5e:ff:39:6b:f2:36:57:bf:52:cf:95:41:2c:25:ab:65:cb:
2e:6e:87:01:90:41:73:76:96:5d:3e:63:78:a4:85:2f:f3:32:
10:a2:67:de:85:c7:2e:d9:0e:4e:22:cb:2d:20:1e:f7:1a:95:
cc:bd:0b:9c:87:a8:56:16:2e:5e:25:fc:08:9a:63:f6:92:f7:
00:4d:e9:33:42:a0:46:f0:a2:d7:89:12:63:54:6c:c7:58:54:
43:62:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:34 2024 by rpki-client on console-fra.rpki-client.org