Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/G4-2pKZMQCZBXf-nmpZ6q8m9agA.roa
File: G4-2pKZMQCZBXf-nmpZ6q8m9agA.roa (raw, json)
Hash identifier: 2JP88Ar85f/s+7FIPYzPJHLcLfkx1LKnz9GLMQwuC9c=
Subject key identifier: 1B:8F:B6:A4:A6:4C:40:26:41:5D:FF:A7:9A:96:7A:AB:C9:BD:6A:00
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 012D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/G4-2pKZMQCZBXf-nmpZ6q8m9agA.roa
Signing time: Fri 07 Jul 2023 04:06:04 +0000
ROA not before: Fri 07 Jul 2023 04:06:04 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 220.150.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 01:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:06:04 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=1B8FB6A4A64C4026415DFFA79A967AABC9BD6A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:8e:43:df:89:2c:b8:95:f7:8f:94:8e:5b:
72:63:8c:f4:07:35:67:d7:5c:38:f2:70:97:67:64:
c8:fa:3d:cf:d4:29:29:b0:35:24:65:67:10:10:51:
2e:18:d9:ee:b1:1d:61:3a:12:0b:0e:33:de:5e:b8:
87:f2:6a:3a:14:82:94:88:a4:d7:39:04:ef:06:15:
dd:ea:0b:67:d7:65:72:40:72:9f:61:13:81:a9:61:
45:fb:2d:6a:d7:af:a9:f4:8f:0c:0e:24:2d:ce:43:
00:10:24:b2:00:0d:22:1f:16:db:7a:45:d8:20:30:
af:21:94:59:ed:25:9b:2d:32:f5:ff:8d:79:e7:68:
c9:65:fd:a5:11:7c:3f:8c:fd:65:14:c4:00:3b:ff:
57:9c:70:65:37:07:11:82:22:39:e7:6b:0e:f8:74:
6f:b5:d4:1b:47:3c:4c:4a:c6:8b:15:fa:2e:fd:e9:
de:e3:28:ed:07:1c:8c:d3:92:73:e5:d1:85:81:f8:
d1:f0:ab:54:20:6d:f6:de:24:52:2e:b9:f7:61:28:
ce:27:31:8d:bf:24:14:70:47:af:c6:eb:59:bc:47:
bf:68:52:0c:fc:25:61:45:8c:3c:87:00:98:8a:88:
04:c0:19:d7:32:a4:a9:5c:59:56:95:5d:0c:e5:48:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8F:B6:A4:A6:4C:40:26:41:5D:FF:A7:9A:96:7A:AB:C9:BD:6A:00
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/G4-2pKZMQCZBXf-nmpZ6q8m9agA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.150.89.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e8:98:11:cb:21:37:02:79:85:57:fc:16:d0:cc:4f:50:61:
c0:20:ee:bc:65:aa:cb:f4:68:a9:9d:1b:34:af:5f:d0:d9:8f:
0a:4c:a2:1d:2f:32:99:91:9b:f9:5f:5d:af:42:cd:89:55:d1:
a9:95:bd:14:ac:7a:cc:4b:3f:57:5b:fa:29:ae:cf:6d:51:83:
ba:f0:3f:07:e3:99:8a:88:fc:88:dc:9a:b4:88:39:c6:d1:f2:
a4:60:c2:1c:08:bd:6c:5c:a5:76:cd:17:45:b8:a1:a1:9f:0f:
73:4c:ab:e8:65:60:34:24:45:f5:fa:50:c8:a6:14:53:ec:83:
10:10:85:75:5b:d2:06:5d:4a:7f:c5:3e:8f:5e:07:78:50:22:
27:39:c5:ae:05:80:61:73:15:fa:9d:c7:17:e8:c1:98:8b:d0:
7b:c5:13:e7:95:d0:77:1b:26:9d:1d:e7:eb:0c:f2:88:d0:dd:
e8:ed:bf:5c:f9:ac:84:93:fb:c4:42:7f:42:9a:06:a5:9c:54:
77:13:36:60:fd:b7:e9:cb:55:93:02:77:37:65:4e:15:fe:a1:
0f:41:12:28:ac:58:8d:bf:90:cc:a4:50:6a:a0:25:dd:b9:5f:
96:5d:b6:31:8d:f0:33:21:48:69:c4:a6:c9:9e:7f:94:c0:e6:
bb:85:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:08 2024 by rpki-client on console-ams.rpki-client.org