Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yPoDo-8T5CrZjgjtaHt1eaObotQ.roa
File: yPoDo-8T5CrZjgjtaHt1eaObotQ.roa (raw, json)
Hash identifier: 4bx70NgfrAmzdf6VtOcMIJDQzwhhnYBOS8tnCz6GX5Q=
Subject key identifier: C8:FA:03:A3:EF:13:E4:2A:D9:8E:08:ED:68:7B:75:79:A3:9B:A2:D4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 024A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yPoDo-8T5CrZjgjtaHt1eaObotQ.roa
Signing time: Tue 30 May 2023 16:32:27 +0000
ROA not before: Tue 30 May 2023 16:32:27 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 110.161.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:32:27 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C8FA03A3EF13E42AD98E08ED687B7579A39BA2D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:0d:a5:a3:e0:71:c1:99:e2:54:e3:96:83:
70:6c:b3:88:e7:7d:ec:aa:ce:0b:a9:c0:d1:c8:7a:
36:f7:08:47:47:f5:e1:b7:28:5a:68:ae:23:10:51:
89:3f:45:8c:a8:97:d9:aa:0f:b1:25:da:95:64:fe:
10:46:0a:80:c1:f9:74:09:3e:61:c0:e4:c3:66:a7:
8f:52:86:d9:ce:de:93:31:6c:7f:6a:8b:22:9f:c2:
8f:10:41:3e:9a:26:ac:db:56:05:e3:3b:c3:63:94:
91:52:4e:98:00:b6:e9:e7:6d:ac:1d:9b:3b:a6:b2:
dd:f7:5a:07:92:74:1f:cb:6c:ce:23:7a:f2:ba:2e:
2d:7a:fb:5b:09:09:16:e4:c0:40:ef:fb:78:c3:10:
7e:1c:a6:2e:85:3c:6c:d3:05:0f:aa:5c:99:11:05:
68:89:ef:c4:21:df:56:29:78:86:f1:15:e8:ae:81:
f3:12:9d:73:b5:28:0b:6b:e3:b0:3e:3c:99:6b:04:
d1:68:db:da:b0:0d:6e:3f:d4:0a:2d:fc:06:ea:95:
33:16:5e:fb:8e:9f:3f:66:78:72:68:e5:70:e7:55:
13:c8:d1:55:4a:13:5e:35:a8:93:37:6e:70:f7:8b:
dd:7a:22:30:eb:c7:02:d8:d7:0f:2f:b7:02:2a:5a:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FA:03:A3:EF:13:E4:2A:D9:8E:08:ED:68:7B:75:79:A3:9B:A2:D4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yPoDo-8T5CrZjgjtaHt1eaObotQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.161.208.0/20
Signature Algorithm: sha256WithRSAEncryption
29:39:50:2f:87:49:ef:37:1d:c3:0c:1a:2e:8c:d7:7d:d3:20:
14:3b:72:e9:16:eb:10:95:9e:41:dc:de:2a:20:5b:58:19:a9:
f7:e8:29:25:9a:b7:b4:c8:1a:3a:cd:71:51:e5:80:b3:38:9d:
d3:2a:96:85:c6:49:04:d1:b7:6c:09:99:ab:ea:88:d5:f1:8f:
df:41:3d:b3:33:7c:6c:fa:f1:98:97:44:8d:da:fe:8b:7d:68:
15:56:cf:5e:0e:5b:66:94:e4:d1:fd:f8:fa:d6:ce:ce:8b:be:
15:dc:73:5e:20:73:bd:31:58:15:eb:3b:97:c3:fa:47:dd:ed:
d7:f8:44:20:fa:7c:16:50:e2:74:26:85:ca:3a:6a:d4:2f:83:
37:06:38:fc:33:47:d9:0c:d2:9a:43:77:66:89:c5:a9:b1:5c:
af:66:c6:b9:19:53:41:c9:83:07:3e:ae:f4:44:3d:65:c1:29:
11:18:d5:28:d7:76:e3:bc:50:97:06:d7:6e:e0:29:71:1e:50:
93:bb:80:0e:71:b3:00:69:3b:39:e8:b1:d3:07:ba:42:2f:8d:
5f:47:5f:6e:f9:82:af:5b:f0:e5:17:f3:d6:3b:1e:b7:65:48:
5a:c9:e2:87:0c:0e:c1:05:16:17:11:62:4e:51:f4:d7:cb:d1:
8e:ef:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:36 2024 by rpki-client on console-fra.rpki-client.org