Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/sCiUdgPf3rgtwOeblj0_Vg7HwM0.roa
File: sCiUdgPf3rgtwOeblj0_Vg7HwM0.roa (raw, json)
Hash identifier: 0sViCDT+pGcR8speD0QssIoMcFj9RtFEwTfWVlBqL4A=
Subject key identifier: B0:28:94:76:03:DF:DE:B8:2D:C0:E7:9B:96:3D:3F:56:0E:C7:C0:CD
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0137
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sCiUdgPf3rgtwOeblj0_Vg7HwM0.roa
Signing time: Fri 07 Jul 2023 04:08:17 +0000
ROA not before: Fri 07 Jul 2023 04:08:17 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 36.52.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 31 May 2024 01:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:08:17 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=B028947603DFDEB82DC0E79B963D3F560EC7C0CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ad:3b:2d:8a:59:45:18:63:b6:57:80:aa:bb:
1a:4e:f4:28:64:53:de:5a:98:f1:8c:a4:e3:6f:b0:
99:f6:85:54:1e:29:ad:cd:7f:79:f2:16:a6:bd:41:
23:7a:b1:73:8a:61:51:c9:b0:b9:59:79:52:82:03:
c7:98:3f:2a:6c:b1:14:6c:fa:13:fe:04:4c:5e:13:
dc:7b:50:ce:92:69:84:5f:33:6d:be:45:d5:d2:2d:
5c:5f:95:68:1f:76:b5:50:fb:e2:5e:5c:83:ae:c8:
d0:59:08:af:19:b6:83:4c:1f:91:ee:1a:5a:ad:28:
96:ac:56:63:02:b1:73:5f:ec:1c:5d:9b:b4:34:df:
a7:67:75:d9:1c:10:0c:94:10:c1:12:6f:cc:c4:1d:
dc:00:8d:fb:97:28:a7:b8:39:18:72:c6:e8:03:75:
bb:02:02:8f:3d:af:1d:bc:27:71:c4:45:4c:27:46:
80:06:0b:56:b3:7c:42:1c:24:ab:46:e9:33:84:3f:
cd:21:53:7b:5d:d0:d2:40:46:27:4e:68:f2:9a:f4:
2e:c1:96:07:19:0e:b6:04:00:30:86:f7:25:a1:2e:
da:b9:55:e3:2c:4f:55:09:28:0c:c8:96:f1:8f:72:
90:80:f8:85:50:2e:c7:85:de:79:91:92:c0:e6:5c:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:94:76:03:DF:DE:B8:2D:C0:E7:9B:96:3D:3F:56:0E:C7:C0:CD
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sCiUdgPf3rgtwOeblj0_Vg7HwM0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.52.216.0/22
Signature Algorithm: sha256WithRSAEncryption
55:c7:1c:77:6f:df:75:e4:e1:ac:b3:c3:03:d0:c8:93:04:66:
d1:0a:b1:6c:0c:ee:c9:da:1d:3e:cd:ce:86:1f:02:fb:46:1d:
da:96:bc:45:56:2a:58:c7:ef:d4:ae:be:26:57:95:e4:a6:77:
5c:d1:ea:04:2d:a9:79:c1:f4:8f:4b:9d:02:e3:5d:2a:76:d4:
31:c4:e8:af:69:b0:d1:bf:fd:54:e2:f4:00:1a:f9:55:3b:01:
d9:0b:1a:11:be:7c:a7:88:e1:60:1c:03:db:62:ac:67:6b:5f:
59:fe:72:e0:3d:52:f6:b3:b3:91:7f:09:03:3f:c9:4b:f3:e2:
0e:f7:83:d9:43:4c:7a:53:a9:33:0e:4d:a4:51:18:8c:11:8e:
bd:a4:4d:5d:ce:53:40:07:92:ab:91:18:a8:9f:1f:e8:4a:b7:
21:05:fa:0a:af:ab:56:21:06:4c:e2:de:1f:d3:d1:e0:ab:be:
11:18:57:f6:55:04:06:76:89:11:8f:5e:76:6c:8d:3c:62:9a:
5d:e6:40:0f:b5:ee:28:b7:4f:fe:71:8a:89:7c:a0:ed:5e:8e:
d0:db:e6:e1:d5:c2:94:01:e6:14:fd:d7:fe:b2:00:3e:a5:8b:
ad:a0:d7:44:4d:20:7e:c9:87:7e:4c:d9:79:0e:dd:20:e7:59:
2d:c7:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org