Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30404/r9N2lxp7_So0zHWd_NwNuBqT1XQ.roa
File: r9N2lxp7_So0zHWd_NwNuBqT1XQ.roa (raw, json)
Hash identifier: /OKOMNbufQOuDOWhKN9Vbss8skp2V5EfSvdh1TNDZVU=
Subject key identifier: AF:D3:76:97:1A:7B:FD:2A:34:CC:75:9D:FC:DC:0D:B8:1A:93:D5:74
Certificate issuer: /CN=100C42066C88299B48A96AFDD4B5AF6B599DB1FA
Certificate serial: 0F
Authority key identifier: 10:0C:42:06:6C:88:29:9B:48:A9:6A:FD:D4:B5:AF:6B:59:9D:B1:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EAxCBmyIKZtIqWr91LWva1mdsfo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/r9N2lxp7_So0zHWd_NwNuBqT1XQ.roa
Signing time: Sat 30 Sep 2023 01:21:08 +0000
ROA not before: Sat 30 Sep 2023 01:21:08 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 37908
IP address blocks: 2400:8320::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100C42066C88299B48A96AFDD4B5AF6B599DB1FA
Validity
Not Before: Sep 30 01:21:08 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=AFD376971A7BFD2A34CC759DFCDC0DB81A93D574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:38:66:1c:c9:22:cf:9b:9b:70:1f:4f:49:
cf:fe:7f:2c:b9:16:b3:47:1a:d7:e2:5f:a1:11:23:
6c:02:0a:7b:0c:c7:f6:e0:67:ea:31:b3:bd:fd:bd:
2f:71:01:3c:6f:c2:a4:84:e4:bf:22:49:97:9b:64:
5d:ed:f2:e2:6e:54:50:94:56:31:54:e9:ab:2a:e0:
14:07:0b:c4:ec:45:00:b5:3b:fd:bd:74:22:1d:8f:
6d:77:8f:80:a5:f6:76:f5:fd:2f:d8:8b:7e:90:44:
18:d4:05:3f:79:ae:e3:d3:bb:58:9e:17:b6:da:a7:
e1:4a:9a:ea:48:03:aa:a0:92:65:90:73:b3:ba:b5:
bd:be:72:e4:3e:02:6e:81:5f:61:fc:92:a7:b6:b3:
74:42:21:f4:23:26:a4:82:f7:56:16:17:14:b9:b0:
b8:e0:0d:a3:18:73:db:b6:6c:47:b4:d9:f1:41:5d:
6b:e1:c1:32:ef:70:22:af:13:d8:a1:b5:8c:45:8a:
a3:36:bf:29:f8:1b:fa:3c:4b:e4:60:2e:c3:0b:be:
04:35:2c:c3:bf:dd:d7:b7:04:ad:11:53:6a:d1:e7:
a4:a3:03:c3:0c:5d:b0:d5:65:73:41:ec:73:b9:39:
1b:8e:a3:11:71:a2:ae:df:2f:81:0c:81:75:e7:cb:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D3:76:97:1A:7B:FD:2A:34:CC:75:9D:FC:DC:0D:B8:1A:93:D5:74
X509v3 Authority Key Identifier:
keyid:10:0C:42:06:6C:88:29:9B:48:A9:6A:FD:D4:B5:AF:6B:59:9D:B1:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/EAxCBmyIKZtIqWr91LWva1mdsfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EAxCBmyIKZtIqWr91LWva1mdsfo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/r9N2lxp7_So0zHWd_NwNuBqT1XQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:8320::/32
Signature Algorithm: sha256WithRSAEncryption
72:94:d5:f7:73:6c:dd:b2:a3:29:fe:8e:98:e8:25:be:81:20:
aa:79:1c:d0:c5:a9:54:0e:77:a2:6a:e0:fd:82:62:ee:0e:da:
b5:31:e3:99:31:2e:81:a3:ce:3e:fd:9d:9c:ee:6d:20:8b:7f:
60:36:22:73:7e:ec:b3:56:38:a5:e6:07:b2:be:f2:2c:9c:98:
aa:5a:e9:ac:40:eb:15:23:40:d4:bf:4b:72:ee:33:bd:c7:df:
00:af:c6:31:66:d6:eb:16:76:1b:50:cf:c7:d4:c2:35:5d:a3:
d2:4d:b2:ee:98:10:d8:13:74:25:6e:db:ee:0f:e9:6d:a5:51:
3c:11:c2:30:ca:74:a6:76:9f:b4:d0:ce:b1:ac:3a:ce:1d:f7:
9d:65:bf:f9:27:67:78:d3:72:af:92:92:57:16:26:ec:b3:8a:
ac:a3:51:24:a3:12:ac:b2:ce:80:dd:b2:6e:89:9e:e4:30:69:
26:09:f3:70:a5:4e:21:49:d6:fe:4a:7a:b1:9d:ee:81:0c:ef:
db:04:47:aa:5f:1f:01:a7:3d:de:1e:b3:cb:30:65:11:83:f0:
8f:47:66:c1:33:b3:42:36:08:ba:e5:43:1d:ff:6b:20:ff:ca:
3a:59:7e:61:06:f3:5b:f2:6d:16:ea:bc:62:bb:41:61:10:4a:
d5:12:15:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org