Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/D05lRJo_R6uLSCeKsu90ih3dSYk.roa
File: D05lRJo_R6uLSCeKsu90ih3dSYk.roa (raw, json)
Hash identifier: Sjfk59ei6RZzySUgNAzmqJsWgOsHlS8yY8CfHF10rF4=
Subject key identifier: 0F:4E:65:44:9A:3F:47:AB:8B:48:27:8A:B2:EF:74:8A:1D:DD:49:89
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0411
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/D05lRJo_R6uLSCeKsu90ih3dSYk.roa
Signing time: Thu 13 Apr 2023 09:52:20 +0000
ROA not before: Thu 13 Apr 2023 09:52:20 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 27.98.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041 (0x411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:52:20 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=0F4E65449A3F47AB8B48278AB2EF748A1DDD4989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:d5:a8:41:32:c9:0d:7c:f7:8f:77:b8:e6:
f7:1b:da:7e:72:75:33:1d:8e:2a:fa:80:c2:45:f9:
28:52:a0:d7:dd:b8:29:6f:a2:d4:27:08:be:71:7c:
0b:fb:5e:a9:64:35:13:38:26:a6:ab:45:b2:73:ea:
02:69:73:bc:61:d0:c3:59:12:8a:b7:53:a2:37:75:
16:fa:a4:25:e6:47:9b:2c:95:66:ee:5e:ba:e6:96:
c5:dd:2d:d1:d6:88:5f:67:24:37:c3:53:59:b2:a7:
ca:87:e3:94:aa:ee:1e:3d:7e:49:05:55:40:9e:44:
c1:cc:bb:d1:fe:61:a5:eb:b0:6d:dc:92:82:0f:cc:
6a:b6:83:40:3e:1b:74:c3:1f:2a:e7:d3:bf:6f:73:
e4:78:be:db:6f:06:16:d5:3e:7c:06:d5:7a:37:4e:
8f:8f:be:63:63:d4:fc:ee:0a:a4:1c:72:a3:78:b3:
60:61:dd:25:15:c8:bb:49:75:b5:53:f6:c4:6f:3a:
45:2a:a5:91:92:a1:8a:df:da:7e:1c:83:17:a1:51:
5b:46:9a:42:4d:dd:25:55:b0:c0:77:d8:d5:df:01:
21:44:ef:ce:ca:07:33:5a:33:89:e5:f8:4b:42:94:
9a:d3:11:f8:1b:05:9c:5b:cd:ba:06:13:30:bb:88:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4E:65:44:9A:3F:47:AB:8B:48:27:8A:B2:EF:74:8A:1D:DD:49:89
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/D05lRJo_R6uLSCeKsu90ih3dSYk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.98.0.0/17
Signature Algorithm: sha256WithRSAEncryption
30:5d:fa:51:c6:ce:b6:2e:d7:e1:b7:36:20:0c:5a:4e:42:83:
8e:b8:75:bd:d5:ec:cd:5a:f1:da:00:99:a6:bf:81:5f:32:c7:
b4:b7:64:1b:78:1f:f6:94:c0:ba:5c:54:c4:46:19:5b:2e:24:
2a:bd:4a:06:5a:35:6b:f6:4d:ff:85:c9:8d:a9:e6:12:d2:b8:
42:fc:d5:a1:0a:0f:5b:e6:30:55:d7:47:0f:69:30:a9:e0:ee:
85:e4:c5:80:4d:03:f8:21:23:9d:c1:40:2c:d0:c1:16:ef:ea:
29:69:64:b8:2e:fd:c6:4e:77:fc:9c:de:61:1b:81:ad:71:20:
37:cb:e3:3b:ed:69:13:11:25:6c:4c:ca:08:9a:96:d1:dc:9e:
8d:91:d5:83:fa:f7:46:bc:16:03:16:01:26:a9:b0:56:eb:b6:
f6:73:71:4e:1e:cc:d7:c4:f6:35:ac:5b:3d:ba:87:d4:60:12:
d4:89:d0:12:f3:fb:a9:f8:4c:6a:4f:30:95:bd:56:ee:11:e4:
49:8b:48:98:49:ac:f4:2a:68:77:38:e7:da:08:ea:96:da:97:
bb:7e:34:76:f4:ef:e2:ad:29:b7:99:4e:e6:59:09:93:48:a0:
96:2a:de:dc:05:00:f9:a1:3a:60:ef:a6:0d:3a:a8:e7:05:6f:
1b:46:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org