Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/_Q93e3x-Gxic_4p5OxRHsAY6dbU.roa
File: _Q93e3x-Gxic_4p5OxRHsAY6dbU.roa (raw, json)
Hash identifier: 3GwNCeduW8CmQAaTPvLyLTEr8/YM6+/6jfg14KJzQQo=
Subject key identifier: FD:0F:77:7B:7C:7E:1B:18:9C:FF:8A:79:3B:14:47:B0:06:3A:75:B5
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 28
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/_Q93e3x-Gxic_4p5OxRHsAY6dbU.roa
Signing time: Fri 29 Sep 2023 06:36:54 +0000
ROA not before: Fri 29 Sep 2023 06:36:54 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 10000
IP address blocks: 180.214.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Sep 29 06:36:54 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=FD0F777B7C7E1B189CFF8A793B1447B0063A75B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:a9:62:df:95:63:b8:a9:e3:0d:14:44:46:
1b:c5:7c:47:4a:1d:e8:18:ca:10:05:f2:bf:7e:61:
7e:f0:1a:f5:b9:8b:c6:33:3a:68:af:01:76:88:e5:
0c:3b:e1:6e:b1:14:fb:0f:18:d8:2a:62:a5:57:0c:
1d:72:e8:a6:e4:7b:fb:b9:1a:f6:f3:2a:d1:62:13:
a0:54:e2:de:8a:67:e5:a4:44:2e:d2:df:32:f7:00:
1c:44:2b:76:37:aa:f2:c0:a1:64:cc:05:43:19:73:
67:72:25:34:19:2d:53:76:48:af:82:cb:ad:a4:b1:
4a:c9:06:06:d5:3f:ba:99:df:a1:68:31:68:1d:a5:
49:71:bc:e3:23:be:69:fc:7a:69:a2:73:6b:82:29:
b3:a1:f8:bd:2c:7c:49:ca:c0:fa:fa:b3:41:81:97:
f4:88:13:68:4e:6a:20:7f:59:a9:c2:f0:29:38:64:
35:49:86:a9:e9:fc:29:8b:c6:97:e3:70:6f:3d:04:
23:1b:82:c8:40:e8:da:25:60:e9:a7:f4:1b:25:6b:
cb:07:4e:8c:e2:e6:03:5c:23:cb:cd:1b:68:bd:5a:
ea:f1:a2:d5:af:b4:73:e1:e8:6b:e1:e5:a9:5f:1b:
94:f9:d5:aa:56:a6:3f:31:e6:b7:9a:e4:c3:82:fc:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0F:77:7B:7C:7E:1B:18:9C:FF:8A:79:3B:14:47:B0:06:3A:75:B5
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/_Q93e3x-Gxic_4p5OxRHsAY6dbU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.214.224.0/21
Signature Algorithm: sha256WithRSAEncryption
40:44:7f:c7:11:2e:d3:dc:ca:d6:ec:49:fa:7a:1c:89:f3:f7:
2f:f3:e4:93:a7:01:bf:79:82:0a:77:f5:20:31:b7:a2:80:bb:
b4:98:77:a4:d2:a9:e1:d0:64:9c:bb:c8:f6:83:a2:4b:b0:c8:
bd:d1:ce:d1:c8:6d:7d:92:fc:97:43:28:1f:83:23:8a:b4:8e:
63:5d:36:a6:45:69:6d:39:7f:0a:16:73:ce:b2:41:b9:b9:c9:
ce:39:32:54:0c:45:c4:40:d4:31:d6:11:fa:0e:0a:34:9b:2d:
b2:06:d1:d3:1f:3d:7d:fd:e4:e0:5e:c2:ca:96:a0:ce:af:1d:
1b:6e:16:65:39:74:df:54:61:c5:62:ed:72:2d:23:21:1c:cb:
4a:2d:51:b8:6f:bf:29:15:8f:2b:b2:e8:15:fb:c6:81:62:68:
0f:4e:b7:e6:b5:6c:18:97:bd:6b:1b:20:8e:bb:89:70:42:6b:
cb:e7:df:c5:bc:e1:bd:42:08:16:61:66:b8:ca:4c:99:d4:94:
39:e0:31:3e:c0:9c:46:6d:e7:6a:52:40:3c:6e:34:39:0a:14:
36:dc:c1:ea:ed:1e:82:4c:a5:82:c1:da:7b:69:7d:b5:71:5e:
af:db:b5:8c:4e:53:b4:a8:47:1a:ee:2f:d7:b2:12:79:42:29:
0d:fe:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org