Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/aBKQSz-SXnA8lPGH6UxGg3eB-fk.roa
File: aBKQSz-SXnA8lPGH6UxGg3eB-fk.roa (raw, json)
Hash identifier: AqSj0NX/BPNzrjyTyhFJw0h4fhH1WGH74Lz60ssjtlo=
Subject key identifier: 68:12:90:4B:3F:92:5E:70:3C:94:F1:87:E9:4C:46:83:77:81:F9:F9
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 043A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/aBKQSz-SXnA8lPGH6UxGg3eB-fk.roa
Signing time: Thu 13 Apr 2023 09:55:28 +0000
ROA not before: Thu 13 Apr 2023 09:55:28 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 42.125.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082 (0x43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:55:28 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=6812904B3F925E703C94F187E94C46837781F9F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:0d:27:6a:81:c8:5f:ab:83:3c:c2:0f:4e:
92:ad:79:17:94:dc:5d:59:3e:60:c3:54:e1:3f:51:
7c:51:98:c4:71:aa:75:70:a9:2c:a1:4a:13:c3:de:
be:bc:77:cd:db:22:d3:f0:08:c7:69:29:f8:4f:01:
e4:6c:0b:ec:0f:02:52:72:84:5f:ec:66:77:af:ce:
6e:a5:8f:92:d6:44:22:c1:96:0c:95:d1:89:bd:05:
68:f8:d9:66:a1:77:1c:e6:38:65:69:ad:83:5c:4a:
f9:81:f6:cc:10:da:73:9a:3c:e9:08:3d:59:4b:a3:
e0:09:35:b5:b9:15:2a:1a:11:94:53:1e:bc:56:5c:
c1:ae:74:a1:d2:7c:63:ac:ef:22:48:43:36:d5:70:
92:64:a3:20:b5:a2:98:f6:da:b6:39:37:c1:ee:74:
35:5e:e4:ae:21:d0:41:9c:76:2b:72:bc:30:84:b7:
b0:4a:66:aa:d0:9f:3c:58:22:e7:ac:a1:f0:ec:b1:
ee:4e:1b:82:d0:72:f0:f0:d7:b5:2d:58:45:86:7f:
9c:0f:6d:93:88:42:3b:13:59:fa:de:35:55:f1:8d:
e4:1a:12:cc:57:e1:77:d0:fc:71:2c:3c:54:98:cf:
cc:8e:df:4e:61:38:8e:de:71:66:02:af:cc:3c:31:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:12:90:4B:3F:92:5E:70:3C:94:F1:87:E9:4C:46:83:77:81:F9:F9
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/aBKQSz-SXnA8lPGH6UxGg3eB-fk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.240.0/20
Signature Algorithm: sha256WithRSAEncryption
ca:bc:a8:60:ae:ef:8d:0e:d2:98:c2:2d:9f:62:89:1e:d0:7f:
1d:e1:94:c1:03:9f:4f:65:d7:bc:db:4e:73:f6:3a:2a:ac:1d:
04:2d:74:9c:47:34:f2:17:4f:0f:9a:d9:7c:7e:32:72:29:8f:
f4:89:8b:61:ba:71:07:e2:75:d4:b2:6e:a1:a4:10:b8:c7:09:
23:2f:46:c6:ea:95:e1:2c:36:6b:71:2b:e6:cf:8d:1d:82:3d:
4c:b6:0a:63:8a:72:ff:8f:df:f4:f6:d2:ba:73:2d:3e:3c:21:
77:f0:10:c8:21:74:40:f0:61:6f:55:f2:e1:41:57:f6:ce:9f:
95:5d:86:26:23:73:d4:0f:84:92:b3:c3:f7:90:aa:a4:d9:1a:
e7:8f:10:e8:8e:08:55:1f:ac:3c:8d:d0:17:ab:32:ba:50:44:
4a:31:e4:a6:a1:2c:3c:14:98:b1:ba:52:c8:f7:94:04:12:da:
84:41:06:1e:ce:77:f2:41:59:64:5a:af:ac:b7:3e:60:f9:ef:
65:f7:c4:74:da:55:32:e5:02:19:1e:d3:1e:de:cf:cf:ee:19:
e9:4e:52:5b:6e:f7:ce:07:37:60:b8:9e:09:e3:1e:ee:04:97:
d6:94:2f:0b:b3:9b:25:1d:f0:54:d5:e6:bf:73:4e:79:5d:36:
47:e7:f2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org