Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/T83TPXvkK9yQgjik_faxHg2_3m4.roa
File: T83TPXvkK9yQgjik_faxHg2_3m4.roa (raw, json)
Hash identifier: esGtSgtKNRGzFxN4njI2k9BvquQ9UrwQyLJBJD7PSP4=
Subject key identifier: 4F:CD:D3:3D:7B:E4:2B:DC:90:82:38:A4:FD:F6:B1:1E:0D:BF:DE:6E
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: B2
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/T83TPXvkK9yQgjik_faxHg2_3m4.roa
Signing time: Thu 13 Apr 2023 09:52:57 +0000
ROA not before: Thu 13 Apr 2023 09:52:57 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9607
IP address blocks: 211.14.0.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Apr 13 09:52:57 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=4FCDD33D7BE42BDC908238A4FDF6B11E0DBFDE6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:10:f6:48:99:79:ea:79:f8:6a:ec:f6:22:
9b:3a:d5:83:e0:f4:b9:12:de:3d:a6:c3:04:06:9c:
90:3f:72:f5:d4:6a:c2:fd:d6:26:ea:a8:35:2b:55:
4c:53:53:e4:8e:7b:a5:55:61:45:0d:15:15:9d:6a:
79:8b:ba:fc:61:83:d0:b4:1f:28:1a:19:a8:f8:72:
49:20:d2:20:5c:33:4d:48:7e:37:d2:c7:10:00:03:
80:f7:01:3f:57:1e:d3:4a:84:ab:b5:fb:3f:f3:1a:
29:c5:99:fd:20:77:38:4a:3c:7d:12:18:b4:5a:3e:
90:18:10:cd:d4:f3:1c:82:33:b6:7e:36:71:aa:5b:
25:d5:27:a3:59:44:11:84:d8:09:87:c5:6e:32:6b:
2a:2c:71:fc:32:a9:fc:27:f6:de:36:80:67:6a:fd:
9e:2f:30:0f:88:8f:ad:62:59:ac:ee:db:ed:b1:77:
1f:95:2c:b2:1d:98:79:75:47:74:f7:36:78:0f:84:
48:e3:22:54:21:e5:73:7a:d0:a6:1b:31:68:b2:83:
5e:65:93:f3:f4:af:b5:01:b2:b5:2d:af:53:3a:49:
6f:ff:b9:99:b1:da:fd:d9:95:c5:13:54:b6:7b:30:
4d:f8:dd:eb:c5:d3:96:61:b3:2c:27:4f:aa:f9:ac:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:D3:3D:7B:E4:2B:DC:90:82:38:A4:FD:F6:B1:1E:0D:BF:DE:6E
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/T83TPXvkK9yQgjik_faxHg2_3m4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.0.0/21
Signature Algorithm: sha256WithRSAEncryption
24:18:8c:14:45:12:56:73:da:32:77:05:61:e2:dd:dd:1d:24:
3e:cf:f2:b9:29:9a:e1:c7:b6:8a:28:9d:e7:ef:7a:67:d5:b2:
f7:df:e3:d0:27:95:76:f9:ba:75:8f:8b:9e:80:bd:8a:04:19:
6e:87:0a:5b:73:a3:fd:75:23:2e:ef:1e:df:9e:31:2c:43:63:
04:13:46:68:ce:b3:18:10:54:a6:f2:9e:19:c3:80:50:88:b4:
ec:f9:76:2b:b4:a3:98:d6:0b:17:83:58:0c:7e:1f:cb:bb:9d:
93:a1:16:51:df:0b:30:98:a5:cd:6b:c6:69:78:c2:43:d3:42:
e7:40:48:e8:51:05:f5:4e:5a:12:d7:88:f3:0f:d1:98:bd:a0:
59:65:0f:5c:cc:56:32:df:e3:67:9b:37:70:42:0d:af:4d:b2:
ac:1a:5e:93:55:41:6e:e3:1f:7c:2e:be:fe:d3:f0:4f:9a:6f:
c0:38:05:15:78:9e:f5:6d:ed:f5:c5:cc:d5:eb:e9:c1:7c:a4:
fa:57:69:4d:dc:cc:bf:8f:d9:70:fe:db:f6:4d:6e:50:b6:42:
df:27:83:61:00:61:66:e7:34:51:86:13:28:57:0c:72:91:3f:
60:b6:9b:76:95:12:6c:37:cb:2c:b8:a6:f7:76:53:e8:37:a4:
f4:a3:a1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org