Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30043/vqm2RIOHgVjrurzJ3b3ri409KDs.roa
File: vqm2RIOHgVjrurzJ3b3ri409KDs.roa (raw, json)
Hash identifier: olmCPSTUn/rz+9tbqsdlZNpizBuxUt3lYaPjxVyq16A=
Subject key identifier: BE:A9:B6:44:83:87:81:58:EB:BA:BC:C9:DD:BD:EB:8B:8D:3D:28:3B
Certificate issuer: /CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
Certificate serial: 20
Authority key identifier: 7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/vqm2RIOHgVjrurzJ3b3ri409KDs.roa
Signing time: Fri 01 Sep 2023 01:30:14 +0000
ROA not before: Fri 01 Sep 2023 01:30:14 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 9621
IP address blocks: 2001:d28::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jul 2024 01:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
Validity
Not Before: Sep 1 01:30:14 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=BEA9B64483878158EBBABCC9DDBDEB8B8D3D283B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:36:e0:2b:61:83:bc:64:32:69:cb:1f:87:
56:8d:26:15:52:e4:7c:5f:1c:17:ec:8c:cc:82:90:
08:8f:da:32:94:3e:dd:54:13:2c:38:5b:cf:35:b3:
78:e5:41:46:6f:7b:64:7c:e7:11:68:59:ba:97:61:
0b:10:58:67:7d:f6:53:31:ea:fb:77:db:6d:d8:e1:
f0:d8:3b:36:18:7e:25:bb:b6:4d:77:f8:94:e1:09:
72:cc:8f:f2:8c:ca:8e:0f:5a:14:35:eb:47:1f:57:
31:94:40:3a:d9:49:82:ac:d6:bd:37:fc:5a:5d:b5:
43:9d:9b:0a:92:1f:c5:5a:d3:60:21:c4:fa:bc:9f:
c2:44:c6:68:06:64:c8:07:48:10:87:9b:a5:b0:66:
58:0c:28:32:09:e0:3b:b8:3e:36:b3:c2:ce:9d:cb:
e3:47:36:f0:83:04:d8:a5:89:57:7a:74:7e:93:35:
32:7f:5c:54:a7:bf:6d:71:48:c6:6f:af:18:23:b1:
df:6d:b7:dd:f8:b5:b9:fa:54:a9:08:2c:9f:47:a5:
df:e1:e8:51:43:61:5a:77:9a:3f:11:26:fb:09:83:
d1:73:51:dd:1d:58:68:f3:99:0e:74:ee:14:43:8f:
0e:f8:f5:6a:6c:a7:e6:f8:e7:59:d0:22:fd:12:99:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A9:B6:44:83:87:81:58:EB:BA:BC:C9:DD:BD:EB:8B:8D:3D:28:3B
X509v3 Authority Key Identifier:
keyid:7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/vqm2RIOHgVjrurzJ3b3ri409KDs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:d28::/32
Signature Algorithm: sha256WithRSAEncryption
21:23:19:51:36:5c:9b:9c:f9:ee:21:9c:37:e2:35:b4:1b:37:
55:3f:5a:3e:1a:ea:8c:c4:37:79:ea:07:4b:ce:63:e2:be:26:
9b:72:63:32:87:38:bb:ab:9e:b6:82:a6:f0:26:86:58:51:db:
66:fe:66:9c:52:a2:a4:5b:b9:04:9b:30:69:d2:ab:38:72:ec:
89:89:4e:74:44:f1:bc:bd:b2:52:21:98:df:c0:57:88:ed:70:
2d:16:f0:f3:f6:15:63:d1:04:65:eb:dc:b0:8f:78:e4:64:09:
32:e6:f9:f2:98:f4:05:67:ff:f6:de:2c:b4:24:e4:3a:55:72:
be:48:c3:6f:10:3b:5f:e5:0e:57:54:69:b3:76:28:fc:35:44:
ae:f1:29:ba:e9:0c:94:e3:03:de:e3:da:9c:11:ae:30:8c:22:
2b:cc:a7:39:b9:ca:4f:c3:8e:00:39:51:88:a1:57:02:72:b9:
b8:7d:25:80:2b:93:9c:ab:61:f7:9c:57:15:5f:2c:f4:0c:72:
ee:5a:1b:3e:1d:d2:81:7d:d9:a6:a0:79:63:ef:bf:17:1c:d7:
a4:71:93:80:16:da:c6:6c:38:20:c3:50:e2:cf:ba:12:4e:a5:
d3:00:b1:13:0f:1a:f8:ec:8c:fc:8d:5c:d9:f3:e8:c4:3b:7f:
d0:42:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org