Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/t4RXnVdfqEysN8WeqsFeHwbmiJk.roa
File: t4RXnVdfqEysN8WeqsFeHwbmiJk.roa (raw, json)
Hash identifier: Bp8IXnfAYdsTtMxLArCBnCeR9UaxvSV8wboCxXsU2X0=
Subject key identifier: B7:84:57:9D:57:5F:A8:4C:AC:37:C5:9E:AA:C1:5E:1F:06:E6:88:99
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 4E
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/t4RXnVdfqEysN8WeqsFeHwbmiJk.roa
Signing time: Wed 01 Nov 2023 01:30:09 +0000
ROA not before: Wed 01 Nov 2023 01:30:09 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 131896
IP address blocks: 103.198.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 01:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Nov 1 01:30:09 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=B784579D575FA84CAC37C59EAAC15E1F06E68899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:85:a8:6e:c2:a5:bc:50:31:90:24:9d:95:
a8:73:9e:b7:18:5d:7c:24:60:6c:a3:f6:9e:77:de:
67:c6:5c:7d:99:d1:b9:33:cf:7f:79:75:fa:c6:eb:
b1:c5:32:3c:bf:cd:00:f6:dc:5e:bb:e1:0d:b2:da:
5c:c2:42:1b:ea:be:ca:fe:95:33:bb:b7:50:c3:f0:
3b:79:fe:7d:d5:47:58:c3:2e:ad:53:6c:9e:58:3e:
c9:0e:8a:a1:f4:01:da:96:22:a1:b1:75:25:59:4c:
f1:e0:3d:74:c1:62:ce:72:14:ba:10:0d:69:46:74:
0f:a2:e4:49:03:33:52:d8:84:c1:07:79:5b:d3:cc:
1b:d5:78:a7:b1:ae:0b:f3:fb:d8:ca:83:57:58:65:
47:6c:d6:f6:e6:c9:55:fd:22:6b:97:ec:02:41:f2:
b3:d0:20:33:5f:c2:fe:59:cb:ec:aa:60:5a:8d:5e:
df:69:9f:08:71:15:96:ca:67:36:77:00:aa:22:11:
7a:8b:e9:01:a6:f6:e1:21:13:43:3c:7e:83:26:06:
e9:40:00:f3:d2:bd:b4:3b:2e:5e:8c:8f:0b:64:41:
56:7e:21:dd:ad:b5:03:22:d7:b8:1e:6b:00:b4:8c:
7f:d9:ce:13:5e:5e:1b:49:74:1d:6e:18:7e:c3:3d:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:84:57:9D:57:5F:A8:4C:AC:37:C5:9E:AA:C1:5E:1F:06:E6:88:99
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/t4RXnVdfqEysN8WeqsFeHwbmiJk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:79:df:7c:41:6b:78:ba:3e:33:1c:c6:02:40:24:59:9b:db:
40:8f:17:38:99:cc:0c:18:84:98:0c:1f:c1:62:48:e6:b3:4c:
6f:11:a5:9a:7d:32:77:67:d7:3d:7f:45:1b:b5:ef:6b:0e:a7:
84:fa:34:84:05:ce:9b:2f:41:0c:7c:1b:a9:47:e0:7a:eb:fc:
41:20:c8:02:7a:15:a3:35:57:7b:ea:d4:eb:c2:46:0a:c8:85:
64:85:13:00:87:cb:3d:04:76:e4:3c:ec:e1:4a:08:37:f2:6f:
d7:62:64:53:9c:ca:66:cd:ee:93:1a:93:8e:74:b0:9d:f9:1a:
38:f5:bb:b2:c3:03:69:7e:bc:a5:b6:a0:31:a4:63:da:c5:29:
9d:95:f5:4b:97:6c:bd:c0:76:85:b2:41:c7:40:09:8c:6c:ae:
79:8c:7a:54:47:e0:35:60:98:84:0b:66:23:cd:6b:68:23:8a:
88:da:3c:c0:e6:28:eb:f5:fb:6c:a6:46:d6:d3:5f:70:ac:1c:
1b:cc:12:73:f9:14:c6:30:56:1a:8d:07:c8:82:3f:c3:51:21:
3d:57:71:85:8a:ab:4a:e2:10:bb:8c:78:5b:10:bd:46:2f:c9:
b2:ff:b0:f1:b6:d2:49:64:77:ee:3b:f5:25:0b:c9:ba:7f:2e:
5f:6c:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 04:40:47 2024 by rpki-client on console-ams.rpki-client.org