Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/JjcqvtNw1MZ1Dj-PqDGbrBEbZPU.roa
File: JjcqvtNw1MZ1Dj-PqDGbrBEbZPU.roa (raw, json)
Hash identifier: jgXarulYTk8SoDyT55iTCGPLmO3fof321hgci94L+ZI=
Subject key identifier: 26:37:2A:BE:D3:70:D4:C6:75:0E:3F:8F:A8:31:9B:AC:11:1B:64:F5
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: B4
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/JjcqvtNw1MZ1Dj-PqDGbrBEbZPU.roa
Signing time: Thu 13 Apr 2023 09:52:58 +0000
ROA not before: Thu 13 Apr 2023 09:52:58 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9607
IP address blocks: 211.14.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Apr 13 09:52:58 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=26372ABED370D4C6750E3F8FA8319BAC111B64F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:87:78:9e:a5:7b:d7:21:bb:92:07:93:20:
24:e8:e2:40:a3:38:98:33:24:15:31:fe:54:75:6b:
8c:5f:cf:a0:35:2d:be:23:00:bb:c0:03:0c:80:70:
6a:96:05:44:a6:19:27:f8:79:a9:e2:bd:ef:34:9f:
23:b0:41:c4:a8:70:8d:b8:47:8a:2a:38:ce:a3:00:
1a:b1:c9:1d:36:b3:ac:68:86:65:14:10:1c:1c:62:
67:9d:a6:04:52:c8:13:c0:f2:00:c1:8e:15:48:7e:
3e:48:a7:5f:af:14:2a:0a:0d:b3:fb:08:d9:e1:c5:
9f:0e:5e:2e:97:d0:f1:5b:bb:5d:a5:70:ee:77:75:
f1:df:a4:00:86:ed:f3:81:6d:26:df:58:ca:7f:cd:
b7:77:e7:2c:fe:62:f2:ee:be:9d:22:8d:87:87:10:
2d:c9:05:de:91:00:c8:6d:ac:36:bd:af:05:73:ba:
9f:1c:4a:c5:e6:75:b3:65:39:c0:23:b9:09:16:03:
cd:2f:d9:c9:68:37:f2:ab:43:f5:a1:ed:1f:ac:48:
a7:d4:b6:d8:e6:e1:25:0f:81:65:6f:d5:47:c7:31:
c7:b4:1e:b4:5a:20:63:c8:11:81:85:09:2d:7c:13:
3f:ed:4f:20:e8:30:e3:8b:fe:f9:c0:17:b9:6c:18:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:37:2A:BE:D3:70:D4:C6:75:0E:3F:8F:A8:31:9B:AC:11:1B:64:F5
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/JjcqvtNw1MZ1Dj-PqDGbrBEbZPU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:12:d7:c5:8b:2b:8a:27:d4:df:ae:37:67:89:8e:41:0f:29:
fc:2c:73:f3:e2:f8:09:0a:64:5b:ea:ab:1c:4e:cd:87:3d:ff:
1c:3b:fe:e5:92:77:57:c4:25:69:b2:0b:2b:e9:33:f8:ef:0f:
76:aa:78:65:c1:7b:0f:7d:83:ce:ce:8e:b7:40:b7:4a:a4:c9:
39:9c:e2:7e:d3:02:ae:3c:2e:bd:84:91:a5:42:30:7b:f1:83:
9f:96:63:71:34:c3:4e:13:1f:89:58:37:d6:91:09:d0:77:a2:
00:02:85:0b:07:f2:4c:77:ac:09:5f:38:b6:2c:24:f0:25:7c:
e9:77:e0:fd:c3:40:dc:4c:69:bd:a9:80:89:d5:5b:03:ee:c7:
08:fa:7a:df:89:a6:12:4e:2a:70:06:f8:3a:f8:0d:c4:6a:ef:
08:da:74:68:b3:06:49:5a:e6:8c:4f:b9:00:ed:1d:9a:ce:21:
f0:8b:da:45:b3:a0:11:85:11:d3:5d:ff:f8:7d:0e:a1:55:f4:
46:e1:29:1a:ed:f0:80:56:ab:b7:bc:66:ce:a5:66:46:30:23:
b0:5c:04:c3:41:19:a6:ea:a3:ad:68:43:38:91:c8:a3:bc:34:
77:79:a8:3f:3f:61:3a:e4:da:c5:b9:75:8c:f7:1f:3b:14:ab:
b1:96:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org