Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/MKbaHDg1EM48EQZzJ7Lye3DoGxo.roa
File: MKbaHDg1EM48EQZzJ7Lye3DoGxo.roa (raw, json)
Hash identifier: KLwUu3Qpnqkvad2w5Yw2xFek/5wrHIKBT9ymV5TZSEA=
Subject key identifier: 30:A6:DA:1C:38:35:10:CE:3C:11:06:73:27:B2:F2:7B:70:E8:1B:1A
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: B3
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/MKbaHDg1EM48EQZzJ7Lye3DoGxo.roa
Signing time: Thu 13 Apr 2023 09:52:57 +0000
ROA not before: Thu 13 Apr 2023 09:52:57 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9607
IP address blocks: 211.14.24.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Apr 13 09:52:57 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=30A6DA1C383510CE3C11067327B2F27B70E81B1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:3f:e3:83:8d:27:d9:b4:ac:cb:a2:61:fa:
55:c8:0e:cf:26:20:60:af:f2:bc:75:2b:be:37:42:
b7:e2:54:84:60:d5:73:9d:7b:49:9c:d0:4d:3b:ea:
0b:cc:68:3b:f5:ea:da:9b:31:9a:83:d3:35:43:93:
0e:48:65:be:a7:6c:54:25:7c:c7:ef:88:05:94:86:
0d:86:51:c6:ca:be:7b:a1:a5:96:aa:1e:f2:41:d0:
cb:ee:c3:6b:b1:1e:b8:dd:e6:62:ad:7a:97:8c:a4:
04:dc:91:92:71:7f:3c:7f:6f:43:dd:3a:1d:8b:ad:
b7:47:00:3a:0a:4c:d9:86:65:17:e8:34:3d:a1:3d:
13:4f:88:e4:60:c9:a0:8e:87:6c:74:8e:c3:b8:ba:
49:40:8f:31:ed:4f:aa:50:53:80:49:d8:f0:40:7e:
ea:73:47:f5:7d:a0:dd:28:5a:b4:3e:2c:cb:2d:f7:
eb:06:21:4e:51:e1:53:3a:5b:9a:52:f6:3f:e6:15:
16:70:3c:b9:32:65:75:15:de:65:77:ec:15:42:62:
41:de:68:2c:e7:cf:ee:77:c4:06:e6:ec:30:68:4e:
05:b5:4a:d6:e5:99:32:a5:d3:db:71:70:28:2e:7c:
b1:ec:ba:68:e3:25:3b:d3:c8:74:28:89:e0:9d:55:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A6:DA:1C:38:35:10:CE:3C:11:06:73:27:B2:F2:7B:70:E8:1B:1A
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/MKbaHDg1EM48EQZzJ7Lye3DoGxo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.24.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:fd:18:ee:c1:c9:0e:44:b3:2f:c0:c9:4d:da:c7:49:21:ab:
4d:e6:65:14:a0:68:d2:55:6a:c8:53:c6:9f:49:9d:fc:a7:84:
ed:e3:bf:1a:62:df:6c:67:a3:d0:a2:02:13:66:1d:1f:34:2d:
a1:fa:28:bd:b7:eb:85:8e:68:2a:f0:f7:ff:05:71:e2:c0:8a:
1d:95:fe:62:85:9c:af:d3:5e:93:66:ce:ff:5d:46:28:70:af:
e6:59:39:7c:46:7d:fa:b7:45:75:9c:04:3d:80:e2:0e:36:b1:
46:1b:6e:7c:71:e6:e4:d6:fb:73:64:fc:5c:06:38:ac:d2:7d:
42:7d:22:cf:ba:b0:e2:1a:8d:0e:37:e2:5f:a0:c6:3a:8e:8f:
d4:76:ef:42:c4:af:70:8a:25:2b:9c:bf:2f:bd:13:1a:1c:24:
7a:30:0b:8d:76:5b:fa:ea:a6:c2:2f:7a:c5:9d:b4:9b:4e:e7:
e4:67:a7:fe:8c:8c:32:f3:90:81:42:1b:34:0b:cb:9e:32:b6:
0e:b0:dd:26:b2:69:83:83:e6:db:fe:a6:cc:9c:93:c3:51:ae:
f7:7b:8c:03:f3:a3:7d:57:4f:bb:b3:36:13:d3:18:4d:99:b1:
6e:a4:d5:69:02:6b:ef:e7:67:01:dd:1b:3a:b3:71:76:6e:d7:
e2:f4:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org