Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mTKndnsAMnBM4nfm4LZWYB70VVY.roa
File: mTKndnsAMnBM4nfm4LZWYB70VVY.roa (raw, json)
Hash identifier: S85TByrchEhbevek//phTDAY3wfCxGQlfirSwwSXG1c=
Subject key identifier: 99:32:A7:76:7B:00:32:70:4C:E2:77:E6:E0:B6:56:60:1E:F4:55:56
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 022C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mTKndnsAMnBM4nfm4LZWYB70VVY.roa
Signing time: Tue 30 May 2023 17:42:24 +0000
ROA not before: Tue 30 May 2023 17:42:24 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:3000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:42:24 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=9932A7767B0032704CE277E6E0B656601EF45556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:65:22:47:b4:e5:b7:f6:78:8f:d6:1f:3a:
7c:71:5f:87:11:03:53:4e:25:e9:03:1d:59:f2:aa:
0f:7b:1b:a6:c1:18:fb:b6:8e:0b:59:5f:0b:6d:ac:
f3:62:32:aa:84:7d:8c:c5:51:86:a7:61:4c:e0:e9:
13:9f:6d:f4:d7:2f:e6:18:4f:83:d2:f6:c6:70:dd:
8e:77:ea:3f:f8:63:10:a5:7d:e4:59:62:2e:5d:2a:
a5:92:f0:a8:5e:39:06:db:ec:3b:a9:d1:f8:be:1f:
4d:73:92:ed:01:5e:ab:15:a5:18:0c:72:aa:35:4d:
5b:00:a3:f3:b8:4a:83:81:66:65:60:de:08:04:a8:
5a:80:84:63:19:12:e9:ae:2b:9e:ba:2a:1b:e7:17:
f7:9b:bd:00:d7:52:39:c8:3e:a5:40:11:32:89:13:
15:87:29:d9:c7:fc:60:9f:7c:77:d8:9f:46:8e:64:
be:4b:ea:67:df:4f:72:8a:3c:91:17:7a:6a:40:ad:
ba:de:d1:d1:01:26:64:e0:bb:e9:e0:8d:a6:6d:38:
04:7f:ac:08:27:f8:3f:ba:64:a9:c0:66:14:97:7a:
bd:70:fe:4e:8a:6a:0d:95:8f:9a:90:cf:1b:39:ae:
ec:c3:55:fa:74:32:3f:40:0d:9e:ce:0d:10:d7:a2:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:32:A7:76:7B:00:32:70:4C:E2:77:E6:E0:B6:56:60:1E:F4:55:56
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mTKndnsAMnBM4nfm4LZWYB70VVY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:3000::/40
Signature Algorithm: sha256WithRSAEncryption
03:98:b3:52:da:1e:29:b7:83:2d:d8:46:58:dd:99:a3:e7:46:
54:dd:b2:03:d3:1a:f6:5a:f9:ca:c3:e6:81:9e:4d:32:bd:5a:
81:c6:e7:cd:3a:fe:47:0d:f8:d9:39:5c:92:2b:e6:51:37:f5:
65:cb:18:fe:aa:28:cf:52:39:15:18:c2:12:dd:f5:79:1c:28:
3a:e3:de:73:af:75:f4:3d:78:90:05:9b:4a:83:ee:44:e8:f4:
a7:04:c5:2d:66:82:03:70:b4:e5:25:d1:35:09:51:15:5b:5c:
95:f3:f4:6e:eb:b6:59:a1:47:c3:e8:2e:84:d3:c8:a5:e0:57:
93:e6:c6:f0:fe:0c:68:ab:dc:5e:bb:ae:89:8c:f8:4f:bc:cb:
df:41:21:c6:86:9c:2f:67:0a:f0:86:35:95:9d:a3:08:eb:61:
55:cc:c2:66:07:af:a4:2d:2b:12:80:71:ab:66:84:b7:93:5c:
1f:74:39:f9:45:ad:7e:9f:f0:55:93:a7:46:85:9f:0c:bf:34:
9c:6f:7e:79:b5:6b:08:44:0f:86:ea:34:08:ba:dd:b9:4f:42:
e5:ac:5e:cc:9a:b7:d7:b1:01:6d:03:91:02:c8:a7:59:39:bf:
b5:5b:3b:d5:3d:88:a5:17:65:48:ec:bf:26:21:65:9c:51:50:
56:33:b9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org