Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/az1ZlPPhqvQtz3tHBxFAVJubW9o.roa
File: az1ZlPPhqvQtz3tHBxFAVJubW9o.roa (raw, json)
Hash identifier: bCIwTOG8ORvJB3gTkw0ftKZcFpSgpfvhQlrjhqT9eRI=
Subject key identifier: 6B:3D:59:94:F3:E1:AA:F4:2D:CF:7B:47:07:11:40:54:9B:9B:5B:DA
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 01D6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/az1ZlPPhqvQtz3tHBxFAVJubW9o.roa
Signing time: Fri 07 Jul 2023 04:16:44 +0000
ROA not before: Fri 07 Jul 2023 04:16:44 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 210.159.152.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 31 May 2024 01:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:16:44 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=6B3D5994F3E1AAF42DCF7B47071140549B9B5BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:18:c1:8f:62:78:7d:5b:33:01:2a:9c:71:
3b:14:6d:e8:90:7f:b6:a7:82:f9:b8:d6:a7:fa:48:
fb:2c:b1:e5:0c:bd:ec:e0:13:24:1a:b0:23:65:47:
29:a7:d4:16:f3:ac:77:88:d7:1e:07:cd:b3:46:a0:
20:e7:b2:fe:a7:e8:7d:62:d3:4e:62:a2:ef:1c:ed:
f6:d2:1f:b0:16:38:44:59:4f:83:da:53:55:d9:e1:
33:f3:dd:30:8f:b2:a0:70:31:fa:5f:a1:62:b8:c0:
9f:c7:60:d3:69:47:21:e5:04:28:24:5c:39:09:a8:
7c:f0:1e:4f:27:77:60:4b:08:a9:ba:a3:de:e1:3b:
73:24:a4:d5:2c:67:38:f4:a9:72:5a:0c:74:9a:e0:
17:85:11:33:48:a1:7f:65:e5:bf:43:96:2f:a9:88:
51:4a:1d:45:27:07:0f:c3:a1:6a:10:53:f8:a9:3c:
95:f1:77:49:18:36:10:6f:0c:6b:8d:b1:3e:4b:93:
83:96:70:81:fe:66:8f:3c:0a:bb:5c:e6:dd:38:bc:
c1:84:ab:25:06:2b:45:78:c2:b4:ec:9e:c4:82:a3:
21:35:00:b7:b1:ad:51:ae:74:28:45:64:99:e6:95:
43:28:8f:23:57:0d:b1:c8:ff:9c:03:0f:b4:b2:5e:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:59:94:F3:E1:AA:F4:2D:CF:7B:47:07:11:40:54:9B:9B:5B:DA
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/az1ZlPPhqvQtz3tHBxFAVJubW9o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.159.152.0/21
Signature Algorithm: sha256WithRSAEncryption
10:cb:53:22:1a:30:46:6e:56:bc:9a:7a:96:17:fb:f6:f9:09:
55:ad:fe:75:eb:fb:5c:af:6a:6d:dd:c1:35:00:c2:55:8f:03:
c7:33:18:60:32:b2:b2:6a:c7:66:c5:8f:96:9f:31:d4:19:ee:
3a:bc:0c:28:1a:61:2d:44:9c:87:88:2f:1e:f2:c4:51:53:68:
95:56:dd:30:86:72:57:5e:e0:49:ae:b2:68:6f:e3:39:13:4d:
12:8d:bb:4e:04:ff:f3:a5:9c:2a:9f:61:a6:1e:b1:3a:e2:38:
6b:80:f7:fb:41:cd:8d:16:6a:be:b1:ef:5c:b9:ec:3e:70:49:
b3:fb:c7:a4:27:0b:be:b7:6f:90:7b:c6:02:98:8b:26:c9:2c:
a8:62:1e:37:a0:e3:ac:ef:7d:8a:55:e4:4a:72:fb:e0:94:d6:
d2:7f:f9:b8:68:83:6c:84:ca:5b:84:93:8b:bf:6f:41:75:ad:
e1:18:ae:af:be:e7:97:3c:99:c4:c6:38:c4:f2:2b:b0:93:80:
cc:7d:45:2e:75:0f:02:a8:92:81:fb:13:fe:e7:a3:3f:94:e2:
c9:f5:3e:2f:c2:24:5d:c9:54:a1:bd:6e:24:a9:1f:ca:8d:79:
8a:4a:fb:f4:41:ac:68:db:27:c4:a1:85:06:f7:d6:91:71:ad:
8c:8b:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org