Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/UhHqHXDnCqW-Vt1d2C8zRvKFMD8.roa
File: UhHqHXDnCqW-Vt1d2C8zRvKFMD8.roa (raw, json)
Hash identifier: UajB2OX/z5/LlbVR9u7pjh+0V9T7842CFPZ9ZtNFQ4w=
Subject key identifier: 52:11:EA:1D:70:E7:0A:A5:BE:56:DD:5D:D8:2F:33:46:F2:85:30:3F
Certificate issuer: /CN=B8DD1D6D77FF33931BF748BA9BF0EBF4939D8031
Certificate serial: 30
Authority key identifier: B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/UhHqHXDnCqW-Vt1d2C8zRvKFMD8.roa
Signing time: Sat 01 Jul 2023 01:28:03 +0000
ROA not before: Sat 01 Jul 2023 01:28:03 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 55900
IP address blocks: 109.236.0.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 01:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8DD1D6D77FF33931BF748BA9BF0EBF4939D8031
Validity
Not Before: Jul 1 01:28:03 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=5211EA1D70E70AA5BE56DD5DD82F3346F285303F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:ad:cd:eb:ae:a2:4f:b6:f7:ad:0d:b3:7c:
0d:0b:3b:9f:59:21:df:05:a0:6a:11:f1:ed:3a:31:
39:5a:72:43:3e:2b:b4:20:d2:f8:91:73:d2:9a:13:
ab:8b:5b:98:93:cd:1c:b4:34:6f:88:47:41:c2:55:
ae:db:27:0a:c9:99:35:6f:85:fd:db:90:cc:a5:6e:
f4:6a:fb:30:6e:8a:42:8d:3e:5e:0d:19:fc:e9:56:
75:71:74:3d:85:f1:53:a5:d3:ef:36:60:fd:65:97:
23:4d:4f:91:8c:92:75:c7:3a:21:17:4f:3e:d7:2e:
5c:86:66:f5:ab:cb:56:b3:38:b5:ac:96:1b:72:94:
b0:fa:58:bd:a1:5b:ae:f6:eb:ce:b4:ff:03:5e:df:
f2:5b:f1:99:ef:8a:d9:15:f4:4f:21:11:a4:e8:c8:
e2:03:7b:d5:b2:07:e0:91:45:5e:34:fc:3c:01:9a:
6c:5d:50:4d:0f:75:d4:7c:12:1c:ae:e8:cb:36:02:
cd:85:fe:7a:60:05:6c:00:84:94:39:d0:25:9c:f6:
c0:33:3f:74:65:ae:c5:c1:35:2f:d5:31:b2:22:80:
ad:c5:da:5e:19:35:fb:2b:e1:4d:d8:c8:9c:59:e1:
d1:de:44:33:59:53:f7:9c:68:09:f0:88:86:ca:6c:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:11:EA:1D:70:E7:0A:A5:BE:56:DD:5D:D8:2F:33:46:F2:85:30:3F
X509v3 Authority Key Identifier:
keyid:B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/UhHqHXDnCqW-Vt1d2C8zRvKFMD8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
109.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
56:70:f4:ee:d5:ac:86:ce:7d:01:ba:c7:45:be:8f:e5:17:d4:
f8:aa:81:2a:05:32:17:cf:cd:f9:a9:1b:97:b4:9c:70:e6:bc:
12:23:35:be:74:83:68:41:b5:d0:13:17:c4:8c:c2:a9:04:d2:
91:55:f2:04:96:71:ef:45:64:d5:c9:97:b4:9b:db:e5:78:a5:
f0:9d:b6:49:f3:d3:81:ca:8c:6b:c8:22:1f:a6:3d:18:15:43:
59:2e:db:87:53:94:cf:7b:b3:13:7d:9a:f1:c8:9a:fc:1c:a6:
64:b3:2a:c2:2c:88:dd:86:3e:77:7a:b1:c6:73:92:30:fc:db:
80:15:48:56:5a:c6:56:10:34:02:ae:c5:a4:9c:e6:2e:c6:68:
6c:81:3f:cc:d2:5a:99:89:b9:3c:f2:6a:8f:cf:e4:fd:1c:1b:
c0:1d:d6:a2:1e:e2:ad:93:5f:df:ee:fe:b9:72:0b:ee:b2:b8:
30:f8:df:db:47:75:1b:9c:c7:b4:c5:f6:7a:49:ce:f2:91:60:
41:f1:09:86:dc:ec:ef:5c:1e:e7:db:f7:eb:95:eb:7f:e7:d5:
c4:6e:66:e4:7d:ab:c0:52:dc:dd:e6:ab:26:99:63:ae:39:1b:
43:67:11:ef:82:da:da:e9:61:09:b8:f0:ba:93:8a:fc:9d:45:
aa:4d:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org