Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/kJnrecAy44-aH5_NZ7uLprG_cTc.roa
File: kJnrecAy44-aH5_NZ7uLprG_cTc.roa (raw, json)
Hash identifier: nlJVoSVqWnOi5bAMYABUYh2Eyq+48IozBjs6LtnmiyI=
Subject key identifier: 90:99:EB:79:C0:32:E3:8F:9A:1F:9F:CD:67:BB:8B:A6:B1:BF:71:37
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 6B
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/kJnrecAy44-aH5_NZ7uLprG_cTc.roa
Signing time: Wed 01 Nov 2023 01:29:45 +0000
ROA not before: Wed 01 Nov 2023 01:29:45 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 2527
IP address blocks: 209.17.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Nov 1 01:29:45 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=9099EB79C032E38F9A1F9FCD67BB8BA6B1BF7137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:0a:86:2b:6d:11:75:cb:47:09:e6:80:e9:
65:62:c5:df:5e:a7:c0:a9:1c:93:ec:be:6a:cd:b1:
bf:70:13:fa:f0:40:6a:ff:24:1d:28:9b:f2:6a:3b:
df:2e:df:58:3f:2d:2b:45:03:12:3a:4f:70:69:2a:
6c:eb:39:44:fa:86:92:75:f5:dd:a9:b8:ca:c4:eb:
06:cf:c0:db:e7:01:29:ce:d8:39:6e:1d:61:e3:7a:
44:83:a4:24:d4:e9:41:43:51:70:3b:14:69:1b:3c:
81:9f:c5:15:3b:25:3b:47:97:87:66:05:3c:33:2c:
9a:ec:dc:6a:2f:15:53:6e:f2:2f:65:32:f2:55:47:
ff:7e:8f:76:b2:58:5b:aa:f3:41:4f:fc:77:60:97:
2a:1b:8d:55:96:7d:be:ae:e8:99:fb:03:90:b1:1f:
db:94:b1:7d:54:95:c4:ac:cf:b9:2b:69:5f:d8:f0:
2a:dc:ca:73:26:5e:d9:f8:a1:64:dc:ab:e2:14:3a:
76:30:41:b7:ef:d1:7f:d1:f0:14:6a:fe:aa:5f:c9:
a6:01:94:2b:f7:93:16:7c:b8:9f:e4:70:9a:fb:fe:
af:a5:2b:a1:46:b0:f3:e3:15:34:26:b9:ad:8f:85:
ad:fd:0c:1e:4a:f2:d5:d5:d9:c1:cb:d7:ff:cb:ef:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:EB:79:C0:32:E3:8F:9A:1F:9F:CD:67:BB:8B:A6:B1:BF:71:37
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/kJnrecAy44-aH5_NZ7uLprG_cTc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
209.17.64.0/19
Signature Algorithm: sha256WithRSAEncryption
86:f5:0d:3b:e4:53:fe:c5:aa:ec:b8:c6:e6:cf:66:fa:ac:a4:
3b:1c:25:da:90:7f:f2:51:cf:af:83:7b:b7:fa:bf:33:2f:3c:
c0:b9:60:b0:12:57:4d:8c:cd:2d:69:98:13:2d:39:b7:e2:db:
41:bb:58:ac:48:bc:73:af:ec:9e:b1:3d:ee:6b:ae:02:f6:36:
30:7b:d9:03:3b:0b:e7:71:dd:5a:9c:b1:e0:d7:d8:2f:9e:ef:
56:40:bd:3e:66:1b:1d:95:62:d6:99:58:68:07:b4:46:87:44:
23:dd:18:49:e3:34:c6:1f:d4:49:30:71:f8:4d:64:45:ad:df:
dd:31:bf:c3:50:91:d4:49:ea:5c:cc:2c:81:f9:c1:bd:94:75:
00:13:75:92:67:39:38:bf:05:45:ab:17:16:6d:66:4c:37:f5:
91:5c:f6:42:03:94:a9:d0:a9:2c:57:cc:a3:d7:c8:7a:fc:62:
54:db:fb:94:4b:4c:75:fc:84:82:4a:57:62:0d:ab:3e:6a:0e:
44:3d:95:3b:de:a0:9e:31:8d:dc:e1:41:48:bd:cf:83:d8:78:
c7:5d:44:f0:34:92:1b:bd:1f:28:85:68:18:c7:5a:64:c8:82:
b3:19:3b:65:48:86:35:05:0d:4c:a0:41:53:0b:d0:97:6b:65:
f3:75:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 03:16:01 2024 by rpki-client on console-fra.rpki-client.org