Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/kSWWNhq3BNCA6fs0Z_Mx4oG7qYs.roa
File: kSWWNhq3BNCA6fs0Z_Mx4oG7qYs.roa (raw, json)
Hash identifier: ubbMgcvgjmypW5pmq7GTpKD1kkfuG1U2TXCaEqDQSsw=
Subject key identifier: 91:25:96:36:1A:B7:04:D0:80:E9:FB:34:67:F3:31:E2:81:BB:A9:8B
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 2F
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/kSWWNhq3BNCA6fs0Z_Mx4oG7qYs.roa
Signing time: Fri 29 Sep 2023 06:36:57 +0000
ROA not before: Fri 29 Sep 2023 06:36:57 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 10000
IP address blocks: 219.100.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Sep 29 06:36:57 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=912596361AB704D080E9FB3467F331E281BBA98B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:04:f3:78:fe:b9:72:29:49:21:b7:32:a9:
59:f6:c8:56:f0:8e:6e:24:3f:14:9a:e4:84:2f:50:
da:8e:78:de:4d:58:d7:3f:a1:15:6e:ce:97:8e:00:
28:d7:98:b9:68:a2:bd:00:bc:62:59:d7:a3:e7:1d:
10:04:18:23:34:91:00:8d:68:a8:ad:53:49:17:f4:
5f:5a:04:f2:5f:04:61:8a:21:3c:4b:61:b5:c3:9b:
fb:a5:95:f4:e2:18:c3:9f:0d:90:16:88:9e:c9:3d:
ca:44:f7:40:0e:ee:e7:58:6b:b9:9c:3c:51:d8:42:
a0:97:a8:d3:81:26:da:21:44:0b:2f:e1:45:be:6a:
2b:d1:f9:91:75:c7:6d:2b:7e:f9:d1:7b:e7:83:64:
0e:ce:c6:2b:4a:06:30:a9:17:80:a5:ab:5c:92:06:
64:10:6c:ad:37:89:9c:d9:4a:14:67:d2:6b:8a:44:
c0:22:0c:9b:99:8a:37:2a:3f:a7:6c:e0:71:b2:43:
fe:fa:fa:11:8f:78:28:70:09:1c:3f:fe:cf:b1:31:
d5:bb:9b:2d:35:33:c6:c9:24:57:c0:e7:9f:2b:ef:
0e:8f:e1:53:81:db:c8:3d:f8:74:a1:51:57:f7:97:
74:ed:ef:b2:ed:57:93:99:3f:d7:5e:a5:55:6a:51:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:25:96:36:1A:B7:04:D0:80:E9:FB:34:67:F3:31:E2:81:BB:A9:8B
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/kSWWNhq3BNCA6fs0Z_Mx4oG7qYs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.0.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:bb:26:28:a5:c7:62:ac:7d:0a:c7:31:18:0e:27:84:5a:dd:
7f:f6:72:54:e2:da:1e:7f:0d:3b:6a:82:03:d8:1e:eb:cc:6a:
2f:e5:a6:f3:27:02:47:99:69:ad:3c:17:f5:1f:ea:85:20:f9:
a3:85:73:bf:90:8d:3c:04:d6:3e:bd:37:54:fe:58:3e:d2:b4:
2d:f4:02:5a:c3:c4:71:12:7a:ac:19:e1:f7:51:bc:82:ba:ae:
32:ab:d8:e1:1c:16:ec:56:2e:e9:54:ce:26:2a:14:10:42:50:
08:ff:ac:33:0d:a4:f5:79:6b:71:77:29:04:1b:43:e1:36:e9:
02:46:14:2e:a9:25:69:8f:ae:a4:0c:78:97:ab:a0:d8:1e:e8:
d8:e8:27:01:70:d3:b6:5d:5f:11:6b:68:66:db:46:34:94:00:
39:20:c3:2a:95:1f:a8:fe:13:52:97:20:4f:40:84:5c:fe:e1:
49:9f:7a:85:0d:c2:7d:28:da:e3:1a:a9:31:85:3d:69:a1:84:
3d:72:36:26:20:54:7b:8e:8a:fa:ca:ed:dd:15:87:89:46:10:
3f:77:ec:6d:43:76:76:ab:33:f9:b4:f2:bd:f3:b8:b8:f7:4c:
7b:b8:96:c0:88:41:ec:b9:23:a5:ae:db:c4:32:4c:03:e7:f1:
ae:e6:d9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org