Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/k2XY5aooKiMo6rpC7NOHB3rfbPU.roa
File: k2XY5aooKiMo6rpC7NOHB3rfbPU.roa (raw, json)
Hash identifier: qWHMhC3cVLa6HcJ70DIjHKe+MW2MmsEnO0c8NxiUQJA=
Subject key identifier: 93:65:D8:E5:AA:28:2A:23:28:EA:BA:42:EC:D3:87:07:7A:DF:6C:F5
Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial: 30
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/k2XY5aooKiMo6rpC7NOHB3rfbPU.roa
Signing time: Wed 01 Feb 2023 01:30:28 +0000
ROA not before: Wed 01 Feb 2023 01:30:28 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 17676
IP address blocks: 210.143.128.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Validity
Not Before: Feb 1 01:30:28 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=9365D8E5AA282A2328EABA42ECD387077ADF6CF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:8d:13:6c:b2:f2:39:1c:f2:48:b1:36:41:
28:a9:4a:84:e3:e8:23:00:67:b3:19:e7:36:40:52:
ae:5a:fe:16:e6:e4:63:cb:3a:94:f3:40:f1:e1:e8:
39:5f:11:92:cd:b2:a4:44:11:ac:68:11:47:e5:f4:
a5:d7:54:d6:68:d7:c2:78:fc:2b:f0:25:8d:9a:44:
30:f1:43:2b:a0:95:77:40:c0:05:6d:f7:8c:1e:36:
4d:77:0e:46:7c:9e:97:03:93:13:44:60:6b:db:3f:
16:17:fe:9d:44:49:b9:dd:15:46:09:85:fd:37:c6:
53:50:14:84:27:d5:4c:40:5a:1e:40:88:11:e7:cd:
a6:c1:9e:67:40:ed:32:f3:af:d9:cc:08:0d:99:1d:
86:b6:c0:8a:27:a9:35:75:38:40:50:a1:fc:19:29:
b5:07:c7:71:39:40:82:d1:3e:ab:9e:54:94:6b:0e:
bb:c6:97:2e:4e:18:c9:04:35:bf:85:1e:80:4e:50:
02:f4:7f:bf:dd:83:90:4f:df:e2:80:0a:c5:cc:b4:
90:5a:c5:ec:b9:1d:08:aa:f2:17:ec:2e:00:f7:4a:
71:ec:5b:63:76:47:63:99:86:d4:e2:66:68:01:79:
78:f8:9e:1a:a9:56:79:86:59:07:fb:27:59:5d:8b:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:D8:E5:AA:28:2A:23:28:EA:BA:42:EC:D3:87:07:7A:DF:6C:F5
X509v3 Authority Key Identifier:
keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/k2XY5aooKiMo6rpC7NOHB3rfbPU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.143.128.0/20
Signature Algorithm: sha256WithRSAEncryption
81:e2:9a:99:74:1c:36:ec:97:39:73:5a:db:47:f7:f9:ea:29:
83:06:ca:5a:6d:fc:9d:84:ba:a2:c8:92:89:1f:6d:d8:59:71:
f5:f2:cf:3f:b1:39:d0:6b:fd:6d:13:64:8f:d0:ac:dd:8b:f0:
67:ef:f9:56:6f:90:74:81:53:80:1f:d4:c1:34:cd:98:b6:93:
53:a7:98:c9:4e:7d:3b:f0:91:da:0d:6b:8f:8e:74:98:fd:d2:
ea:83:1c:2d:9d:40:24:a6:da:61:f2:bc:17:d8:3f:8d:cb:d6:
58:4e:dd:77:d1:e7:37:89:a1:18:47:86:83:5a:df:6a:44:6e:
c5:41:f7:3d:46:98:7b:39:65:3c:c3:92:4a:bd:70:77:ff:ea:
18:f5:3b:71:6d:a7:1f:9b:fe:d1:39:b7:a1:cd:45:33:8b:53:
43:da:e2:44:35:37:32:98:ff:39:03:e4:3e:c5:b3:9e:5e:2a:
55:ad:07:d1:51:88:d1:dc:60:01:a1:c3:80:dd:3d:bd:cc:0c:
a4:4e:ae:ed:32:7d:0f:7a:ce:fc:77:5a:c8:88:4e:95:e9:ea:
57:69:57:c8:97:49:a6:a3:ca:0a:16:6f:2b:61:1a:5f:e7:fd:
2a:ae:29:d5:17:93:e2:98:73:9f:03:ba:16:5b:89:5f:4f:83:
ae:72:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:22:59 2024 by rpki-client on console-fra.rpki-client.org