Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/OK9zDoixMQJBfXajla_naVVDp8I.roa
File: OK9zDoixMQJBfXajla_naVVDp8I.roa (raw, json)
Hash identifier: UZV7msPO1SX4LSda5S0SwMwT/nuV43olEGpDWfECFYk=
Subject key identifier: 38:AF:73:0E:88:B1:31:02:41:7D:76:A3:95:AF:E7:69:55:43:A7:C2
Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial: 2C
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/OK9zDoixMQJBfXajla_naVVDp8I.roa
Signing time: Wed 01 Feb 2023 01:30:27 +0000
ROA not before: Wed 01 Feb 2023 01:30:27 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 17676
IP address blocks: 61.122.32.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Validity
Not Before: Feb 1 01:30:27 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=38AF730E88B13102417D76A395AFE7695543A7C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:eb:7a:8e:93:0f:4d:5c:13:24:0a:68:8e:
8d:cc:4c:0d:c7:8e:19:58:2b:6d:c1:f4:01:93:e6:
d0:15:f2:6f:0a:cc:fb:6c:eb:9b:61:80:98:8d:e4:
cf:fa:39:ab:3f:1c:29:28:30:f6:63:84:21:5a:3b:
ab:c9:91:dc:60:45:8e:2b:c0:e5:d0:d2:3a:a7:52:
2f:06:92:bc:74:b2:ac:44:88:e5:95:2f:5d:c4:0d:
51:ea:46:74:e3:f2:ae:90:9b:17:c0:2e:ee:be:9d:
00:9b:05:3d:60:12:d4:e0:93:ba:33:de:3e:e8:73:
2f:96:65:bd:61:b3:59:c7:6b:81:52:51:d5:48:ec:
d0:18:c7:42:23:52:dd:cf:a9:98:0e:da:04:54:22:
6f:3c:19:0b:72:06:11:0d:12:92:13:f6:8d:d6:18:
53:07:6a:b5:42:1c:52:a9:cb:af:b3:44:71:34:d2:
ef:40:c2:0d:54:13:d6:c4:93:57:3d:c4:e2:5f:81:
aa:b0:e4:bb:7d:82:cf:ca:3e:77:3a:1a:9b:27:e7:
18:be:43:e2:fe:ab:5a:44:18:70:e2:33:7a:4e:39:
67:9a:e5:cd:81:43:8b:ab:3e:ed:30:eb:fd:4e:d4:
f3:da:1b:9e:f0:f1:d2:b8:6b:d6:5a:e2:21:8d:a8:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AF:73:0E:88:B1:31:02:41:7D:76:A3:95:AF:E7:69:55:43:A7:C2
X509v3 Authority Key Identifier:
keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/OK9zDoixMQJBfXajla_naVVDp8I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.122.32.0/20
Signature Algorithm: sha256WithRSAEncryption
29:44:80:49:0c:eb:76:5c:a7:28:bd:73:fe:28:0f:d9:9e:8d:
3f:52:93:21:86:05:e4:60:c1:7b:d2:cb:9d:60:8d:63:d6:38:
2a:34:3b:8f:d0:71:f5:18:aa:0b:f4:56:23:ca:8e:1d:5b:84:
af:62:4f:59:7e:d3:a2:bd:e3:b6:b4:98:91:6b:1f:31:e1:f1:
2d:9e:03:97:5b:c1:51:0e:48:cf:f1:54:0a:7d:0e:cf:21:3a:
ac:96:78:11:5d:29:4a:cd:1b:c5:fe:08:0e:75:48:6c:84:b4:
e5:d7:1a:d0:c1:3f:b8:40:b3:ab:5d:15:fb:31:b9:f7:ee:07:
61:2a:25:d3:aa:52:d8:42:d3:4d:ef:8c:33:17:4b:fb:2d:12:
59:4e:6a:24:c9:1d:d0:e1:f4:7c:ce:e8:a0:11:25:6f:01:4d:
f7:e8:e7:54:60:e4:07:57:1a:4b:d9:9f:2e:62:d9:11:51:35:
ac:dc:b0:fe:56:d5:68:df:9f:4a:83:f0:f8:41:47:39:4e:90:
fa:7f:09:82:cc:eb:2c:3f:c1:9a:73:78:14:6a:de:e6:19:d5:
1d:ef:0a:25:76:d4:90:23:ce:88:74:ba:09:27:ce:dd:fc:78:
23:8d:3f:d5:25:06:d8:b3:c5:78:d5:19:5c:01:bd:0b:e0:0d:
7f:f2:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:22:59 2024 by rpki-client on console-fra.rpki-client.org