Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/cKK4CLenNG3lLzo2fNgcvLskfno.roa
File: cKK4CLenNG3lLzo2fNgcvLskfno.roa (raw, json)
Hash identifier: YhjlIUwcnyG9ENvfwTjyp0YpK9lWS4fcFfih+9GHRCE=
Subject key identifier: 70:A2:B8:08:B7:A7:34:6D:E5:2F:3A:36:7C:D8:1C:BC:BB:24:7E:7A
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 011E
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cKK4CLenNG3lLzo2fNgcvLskfno.roa
Signing time: Fri 01 Dec 2023 01:31:55 +0000
ROA not before: Fri 01 Dec 2023 01:31:55 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 2527
IP address blocks: 211.128.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 01:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Dec 1 01:31:55 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=70A2B808B7A7346DE52F3A367CD81CBCBB247E7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:1c:87:4c:16:a0:62:7c:4f:88:98:dc:97:
2b:ed:b4:00:11:ff:36:c7:cb:d4:32:cb:ba:ed:fc:
88:10:7b:2a:3f:a9:a1:bd:40:70:56:37:80:0c:d6:
a0:f0:7c:c6:f6:cf:5a:5b:ab:25:af:5d:6f:5a:81:
b7:01:91:99:d5:b3:68:dc:15:ff:09:c1:7b:4a:7c:
34:15:18:a8:0c:67:b4:94:d7:35:7b:3f:99:65:4d:
3a:5f:f5:7b:3d:70:ba:58:82:4c:79:29:61:b4:32:
cc:4f:54:85:5e:da:0d:68:a4:e2:76:3a:f7:aa:49:
f8:22:2e:44:36:94:1a:72:0d:b0:4f:7f:45:79:3f:
47:94:0a:07:05:be:c5:85:10:32:18:51:f1:38:6d:
9b:bb:44:70:f8:39:be:5c:44:ee:cb:2a:71:5a:f4:
55:eb:14:c2:56:fc:db:b2:93:91:2c:91:92:52:48:
b2:35:d5:3f:11:ec:3d:96:87:ef:25:c0:02:6f:31:
28:1d:2e:45:a3:90:08:6f:38:03:56:86:40:16:ec:
ae:59:04:66:86:d5:d5:f0:c2:61:86:a6:34:ce:ce:
05:00:ba:b3:e4:54:f2:12:7b:24:f1:f4:c1:8a:91:
28:47:ad:f6:6f:7d:93:cb:c2:3d:d7:da:ca:e6:79:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A2:B8:08:B7:A7:34:6D:E5:2F:3A:36:7C:D8:1C:BC:BB:24:7E:7A
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cKK4CLenNG3lLzo2fNgcvLskfno.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.128.32.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:1f:d9:42:46:c5:83:d1:5e:18:f2:b0:9d:5b:0c:a4:fe:ab:
a1:a3:64:f8:f1:fe:e9:65:ad:48:f0:38:3f:08:c6:5e:d9:1f:
7e:e9:93:64:49:74:51:c6:48:a5:61:45:8b:34:92:4d:15:5a:
52:c9:11:9c:da:dd:d3:7d:9e:d3:3c:fd:4a:1b:ba:97:7a:a7:
cf:87:e6:b1:c7:0c:6b:56:6f:b1:3f:b3:ce:61:27:02:41:a8:
82:06:75:f2:56:4c:4f:88:cd:79:00:66:fd:fc:c2:35:ad:32:
34:60:b9:e8:f5:10:f7:d0:68:58:3c:e5:a3:e0:6f:13:dc:e7:
d7:31:68:88:3e:53:e8:79:c5:14:d4:fe:92:8e:31:ee:50:3e:
10:50:27:f0:a4:81:8d:51:20:f8:fa:a9:89:8c:9f:a7:a3:9f:
b2:7d:60:28:23:bd:03:a4:fd:66:ea:95:d4:07:9f:1e:4e:99:
47:47:9d:ae:b6:f4:cf:36:7d:1f:55:38:ed:a2:cd:b2:7d:b6:
04:fb:a3:e7:4d:65:31:3d:f1:9d:28:29:cf:8e:52:a7:7e:c8:
5e:cd:7f:f3:da:db:e6:ab:bb:93:44:46:38:b2:00:c5:a9:55:
d1:d0:44:77:a5:68:e5:7c:db:98:7f:0c:7a:f2:0b:31:3f:09:
48:26:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 05:07:19 2024 by rpki-client on console-ams.rpki-client.org