Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/LXYeV0jMdsVmAdfzSp8d_HaHs-w.roa
File: LXYeV0jMdsVmAdfzSp8d_HaHs-w.roa (raw, json)
Hash identifier: W7OI4VvFs+5jw3esTKyg/SRI2+6WuE+XjAGAh80zUx8=
Subject key identifier: 2D:76:1E:57:48:CC:76:C5:66:01:D7:F3:4A:9F:1D:FC:76:87:B3:EC
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 01EE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LXYeV0jMdsVmAdfzSp8d_HaHs-w.roa
Signing time: Wed 01 Nov 2023 01:32:35 +0000
ROA not before: Wed 01 Nov 2023 01:32:35 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 4686
IP address blocks: 124.255.32.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 30 Sep 2024 01:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Nov 1 01:32:35 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=2D761E5748CC76C56601D7F34A9F1DFC7687B3EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:46:b9:d4:73:41:4a:fb:5f:c0:d5:75:c6:
b3:e9:29:60:56:30:3f:29:e4:90:9d:b6:d2:c9:84:
2f:49:9f:7a:07:98:0c:07:6c:6c:b4:c7:82:0f:65:
4b:82:74:de:17:68:b1:7c:29:63:76:1d:70:8b:b9:
12:e5:a3:bc:cb:41:f6:02:ff:00:65:fd:a7:32:db:
56:29:b2:20:c4:b4:4b:81:3d:12:ff:9c:46:a7:fa:
1c:f1:64:e1:13:a2:d2:49:66:91:d4:1e:63:00:4d:
7d:16:24:e0:ab:a3:97:d8:00:c7:9f:a6:36:c2:33:
55:7b:b2:5d:24:ad:86:b6:65:4b:2d:1a:73:64:21:
6f:f9:60:b0:c1:6d:b4:c0:84:4e:38:7a:94:4e:d4:
c8:56:75:5d:eb:0c:ac:c0:6d:b1:e0:80:13:07:b7:
01:0b:c4:b0:8d:98:b1:ec:1b:f9:9c:4f:67:bb:87:
8e:4b:7c:85:03:e2:a6:15:9b:e2:59:5c:36:14:3d:
fc:c8:e8:5b:83:de:9d:19:37:49:bf:3f:59:97:0c:
81:83:43:8a:e8:67:98:a6:e8:08:2c:fe:48:f4:ff:
9b:92:67:ad:4e:64:16:43:23:b2:6d:a4:44:c1:a0:
9a:5e:28:81:a5:66:f3:13:3d:4f:60:a3:b0:08:71:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:1E:57:48:CC:76:C5:66:01:D7:F3:4A:9F:1D:FC:76:87:B3:EC
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LXYeV0jMdsVmAdfzSp8d_HaHs-w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.255.32.0/20
Signature Algorithm: sha256WithRSAEncryption
80:34:32:7a:68:a9:91:56:07:b5:db:ac:27:69:33:40:e9:f6:
23:5a:41:3e:32:67:19:98:e2:02:a6:6a:89:a1:e9:6f:e1:1b:
5b:45:17:af:b1:16:47:30:54:1b:55:e8:12:08:1e:05:ea:be:
35:64:51:50:da:7d:23:a1:19:0e:7e:07:0c:ee:f2:f1:93:5c:
05:a7:d8:6b:2d:01:5e:b3:d7:d0:5a:31:a2:06:1b:95:60:61:
6d:ee:65:16:0b:53:2b:ce:b9:8f:46:8b:85:a4:82:28:67:ae:
4a:20:43:09:00:b4:e1:ba:4a:49:78:96:e3:5a:34:ce:81:c5:
ae:7e:19:ac:60:2b:b8:9c:3d:c9:5b:e2:1b:46:d1:0c:8c:a9:
41:76:99:ef:f8:fe:07:31:2b:dd:9a:4b:9a:10:19:09:6b:9a:
88:04:69:b7:db:ab:ee:2d:4b:b5:10:8d:c8:f7:a5:38:ff:9f:
d2:a2:20:a0:b5:50:04:f0:6a:0e:32:2d:74:72:33:06:bf:51:
23:cb:c9:2c:2c:01:43:e9:ea:86:b1:78:5e:c6:ea:ac:d1:9c:
ea:40:42:16:69:23:6d:9d:a4:e5:12:6f:ac:f9:a7:f4:ca:86:
db:9d:bd:0a:07:b0:21:78:93:a0:7b:b4:a4:d2:85:d9:eb:c4:
d0:a8:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 03:16:01 2024 by rpki-client on console-fra.rpki-client.org