Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/LaW04o3U32gEYFy325P6RiO-TIA.roa
File: LaW04o3U32gEYFy325P6RiO-TIA.roa (raw, json)
Hash identifier: 0y2ZFKps8La/2wICsPRiUzExfd5BH+ZS4Z8a/Et30dA=
Subject key identifier: 2D:A5:B4:E2:8D:D4:DF:68:04:60:5C:B7:DB:93:FA:46:23:BE:4C:80
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: B0
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/LaW04o3U32gEYFy325P6RiO-TIA.roa
Signing time: Thu 13 Apr 2023 09:52:56 +0000
ROA not before: Thu 13 Apr 2023 09:52:56 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9607
IP address blocks: 203.141.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Apr 13 09:52:56 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=2DA5B4E28DD4DF6804605CB7DB93FA4623BE4C80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:5d:0b:80:31:dc:06:1e:eb:63:4c:84:67:
9f:6e:65:6a:39:09:a6:a6:18:b6:96:6a:6d:e7:2a:
fb:97:cd:43:05:e5:22:cc:01:4b:f3:dd:8c:58:ff:
39:22:2c:25:05:11:95:2e:d8:7d:3f:f3:0b:8b:87:
10:1b:f5:10:42:e2:7e:ed:06:ef:47:4e:1b:a8:f0:
e0:04:b2:2b:e6:e0:d2:e8:3d:61:69:14:c1:22:91:
ed:29:a7:8f:6c:52:4b:b0:87:13:9e:18:f5:bc:67:
01:1d:ff:68:df:be:eb:11:bc:31:cb:e4:a2:06:c0:
04:7a:22:3a:58:4d:5c:10:88:22:ad:39:28:64:38:
6e:ed:82:0b:c4:af:1c:ef:b8:05:0b:42:a6:68:c4:
b9:54:03:0a:55:ec:06:e3:ce:94:65:64:1b:9b:57:
78:da:b2:df:58:43:80:02:5e:eb:08:02:d7:3d:38:
20:16:a1:ac:54:95:54:e0:95:30:75:a1:4c:30:bf:
ad:2d:61:44:5a:5b:dd:2a:07:d6:0e:ef:3f:28:21:
0c:d8:91:07:44:4f:21:93:d5:e9:35:26:2f:67:33:
b9:52:76:01:a9:53:ff:d2:55:84:fd:3b:f1:1f:63:
b0:88:eb:72:bb:a0:a1:72:11:cc:16:fb:a8:9e:6b:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A5:B4:E2:8D:D4:DF:68:04:60:5C:B7:DB:93:FA:46:23:BE:4C:80
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/LaW04o3U32gEYFy325P6RiO-TIA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.141.48.0/22
Signature Algorithm: sha256WithRSAEncryption
05:d5:49:91:c4:92:4a:2c:4f:4b:e9:d4:1a:49:aa:3c:49:e7:
f9:7c:dd:6c:07:51:99:9b:93:20:79:02:81:9f:6d:fb:30:b7:
34:da:bf:66:51:fc:cd:7d:02:24:5d:e6:eb:17:4d:d0:fa:00:
2d:9c:c1:e2:3c:ca:c1:19:e0:f2:ae:55:6e:93:40:8b:81:f6:
a2:83:1d:8e:f8:19:a0:ad:6f:c5:73:14:60:ad:8c:74:83:d7:
d5:e1:41:26:f9:48:ea:e7:35:00:03:56:67:5d:c3:ed:7c:72:
9c:c8:38:7b:e5:67:33:20:11:3a:5f:79:e8:15:7e:b0:03:ac:
78:22:70:f9:41:9e:1b:54:fa:4b:83:24:52:9b:62:d4:70:e2:
05:f0:e8:79:d3:1f:dd:c2:29:9a:1f:5e:61:25:5a:ba:a9:e7:
87:0e:03:79:c0:72:b1:cc:4a:56:56:e6:65:98:d7:b2:3d:09:
3a:97:d1:1e:6d:c8:3e:5d:de:88:65:d8:da:27:65:99:1a:98:
3b:b7:63:d3:cb:2a:7c:5d:ac:82:1a:4e:b8:bf:81:46:e1:07:
c1:6f:94:e7:f3:53:b2:8e:37:47:21:69:fd:e6:d3:97:34:98:
7f:b6:74:98:8e:04:9e:e7:f4:08:9e:dc:7a:99:20:bd:95:30:
95:92:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org