Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30058/navPFDwxxY59KSYK9UM5_DfKb4I.roa
File: navPFDwxxY59KSYK9UM5_DfKb4I.roa (raw, json)
Hash identifier: mgQ25CSRTD/lrzCjraKI94mTE9VQe657T6A6iRm2+bM=
Subject key identifier: 9D:AB:CF:14:3C:31:C5:8E:7D:29:26:0A:F5:43:39:FC:37:CA:6F:82
Certificate issuer: /CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
Certificate serial: 37
Authority key identifier: A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/navPFDwxxY59KSYK9UM5_DfKb4I.roa
Signing time: Thu 13 Apr 2023 09:52:47 +0000
ROA not before: Thu 13 Apr 2023 09:52:47 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 18126
IP address blocks: 2001:f58::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
Validity
Not Before: Apr 13 09:52:47 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=9DABCF143C31C58E7D29260AF54339FC37CA6F82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:5c:f3:61:1a:ae:f6:db:d9:ec:e0:04:f2:
45:cd:59:79:6b:d3:23:cc:01:3a:7f:31:ce:f1:25:
6d:19:5a:51:08:f9:cc:48:fb:1f:60:b6:0d:e2:38:
d0:51:84:06:d5:f0:b9:bb:9a:86:da:47:91:6f:63:
3c:73:b6:54:2d:67:98:28:0d:95:c9:14:85:b1:38:
c0:0b:86:77:c9:88:54:b7:35:4f:02:db:c9:13:71:
d1:8e:3a:3c:c1:c4:04:da:cd:52:5c:58:09:0b:e0:
a0:55:6a:8a:7f:af:8d:1d:5e:3b:aa:6d:62:71:f8:
8b:86:24:46:bf:ee:36:2b:50:16:6f:f0:02:eb:bd:
86:c8:3c:58:08:b1:96:ce:1b:31:98:80:e2:39:5d:
57:76:59:0d:ba:46:10:ce:ef:66:d9:ae:f2:27:e9:
48:4f:1e:94:c4:60:86:12:46:f1:68:52:73:28:22:
0c:84:67:38:96:6b:54:44:e1:8c:28:bd:e8:a0:8a:
3e:2c:20:95:91:68:22:f3:43:51:75:d0:32:2d:b8:
1e:46:9a:c4:89:33:b9:97:8a:19:3b:87:d9:1f:aa:
e7:ef:a9:b1:20:02:b6:9c:7e:9d:cb:13:7e:86:80:
28:52:ef:2f:51:c9:68:9b:0b:4f:52:aa:b3:d0:1d:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:CF:14:3C:31:C5:8E:7D:29:26:0A:F5:43:39:FC:37:CA:6F:82
X509v3 Authority Key Identifier:
keyid:A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/navPFDwxxY59KSYK9UM5_DfKb4I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:f58::/32
Signature Algorithm: sha256WithRSAEncryption
a9:db:b8:f7:32:5f:c9:90:33:c6:d5:13:f8:21:f9:0d:08:db:
62:f9:c6:7d:69:24:21:7c:b6:a6:f2:05:30:34:5a:e5:68:23:
bd:f4:71:c4:3a:62:76:d2:2e:d9:9c:09:d0:b0:f1:58:21:97:
ae:db:a4:ef:a4:bc:66:48:fa:f2:d6:97:de:cf:d0:9e:cc:f7:
5d:7b:44:da:b5:c8:2f:5a:44:93:e3:e9:ed:c5:ef:c8:ec:1c:
4c:12:e9:77:a1:9d:9f:52:40:54:a8:bd:da:da:d6:6a:c9:cd:
fc:59:e1:23:38:78:63:94:2b:49:a7:c5:a5:54:19:e9:3d:3b:
a1:be:40:9e:13:86:68:39:c9:ab:f0:8a:4d:6a:2f:5a:8b:59:
79:e0:05:9f:8f:f0:df:1e:7d:48:29:f6:86:95:1f:a0:73:89:
e7:8d:ef:be:4b:8e:b8:d0:96:8a:93:1f:e1:2b:55:c8:5c:1e:
00:a1:45:05:4a:3c:f6:85:23:22:6d:f9:85:3b:5e:54:b1:2c:
f4:e2:37:20:ef:6b:5f:23:6e:49:72:85:3f:1c:42:6b:5d:37:
57:31:7a:3b:2c:2a:0f:eb:c0:b6:3d:f8:72:d9:d7:f5:d8:6c:
fa:df:15:00:d7:5b:95:18:3b:06:b9:65:6f:d7:61:33:a0:e8:
6c:ac:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:25 2024 by rpki-client on console-ams.rpki-client.org