Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/CUmTcgLyph0lRStsptCTODWpSLA.roa
File: CUmTcgLyph0lRStsptCTODWpSLA.roa (raw, json)
Hash identifier: 6QnR3IaxMiiIJkNVvOOzG9nuvPWwIfG/Tgme77VW0gw=
Subject key identifier: 09:49:93:72:02:F2:A6:1D:25:45:2B:6C:A6:D0:93:38:35:A9:48:B0
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0112
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/CUmTcgLyph0lRStsptCTODWpSLA.roa
Signing time: Fri 01 Sep 2023 01:31:35 +0000
ROA not before: Fri 01 Sep 2023 01:31:35 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2497
IP address blocks: 211.14.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 31 Jul 2024 01:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Sep 1 01:31:35 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=0949937202F2A61D25452B6CA6D0933835A948B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:c3:aa:96:42:2c:92:ec:27:df:05:22:a1:
0e:a0:fc:0e:c0:bf:ff:89:80:34:22:e9:ed:45:02:
48:60:d8:00:45:e3:bc:ab:25:89:c4:ef:22:be:11:
0e:41:cc:cb:e6:72:4f:b2:5f:14:cf:bf:bc:66:4e:
85:e1:15:6a:7a:a7:31:ff:75:75:ef:6a:e3:c6:a4:
ad:ea:3e:c2:9a:5b:ea:66:ca:38:7d:fa:67:e2:f9:
2b:4f:eb:2d:8c:4a:51:89:16:b2:10:09:c9:81:43:
be:68:05:b2:82:a7:9a:0b:4b:11:3b:d5:ae:77:4d:
3e:81:1e:67:4e:f7:d7:51:b4:cd:c5:d1:e7:8e:d9:
4c:b4:63:74:96:3b:75:c5:1f:0e:44:55:63:b8:51:
d2:3e:80:de:ab:56:99:45:cb:53:63:a3:9a:f4:1d:
ba:5c:81:d1:9a:74:09:fb:83:55:c5:7e:48:ad:59:
39:45:c5:aa:dd:95:88:22:33:3b:d6:f0:35:b9:56:
67:f4:64:0a:db:23:28:f6:60:8d:1d:06:8a:2e:d8:
eb:86:e0:1f:43:27:12:76:83:8f:9d:96:f2:7f:18:
f2:5b:2d:15:6c:63:53:19:ca:c8:00:ff:29:6e:46:
88:6d:0d:f0:31:a2:f9:5c:a6:43:a5:6b:ba:05:13:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:49:93:72:02:F2:A6:1D:25:45:2B:6C:A6:D0:93:38:35:A9:48:B0
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/CUmTcgLyph0lRStsptCTODWpSLA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:ee:32:8d:44:90:04:5d:48:e1:ee:b2:36:41:10:c2:eb:41:
7e:b3:19:22:3e:d5:bd:09:4c:3a:43:a2:e0:e9:5c:bd:a2:27:
25:35:fa:a3:09:39:94:c5:f6:ab:fd:8f:d6:da:95:f8:a5:af:
7f:11:be:13:65:58:a0:89:6a:db:b6:da:d9:f3:cd:f3:e3:8b:
29:e8:7c:be:56:a4:16:71:8d:e2:9f:73:c4:c9:63:4b:cb:4e:
19:0a:32:c1:99:a2:12:91:f3:82:38:4e:02:d6:82:ce:89:6b:
22:4d:72:1f:6a:54:a0:4a:96:50:15:48:80:06:ed:8f:8c:4e:
97:c8:87:71:a9:5c:e4:8a:65:af:fe:0e:bc:2e:ad:fa:e7:f4:
15:41:e8:90:0f:7e:02:f9:50:96:de:89:a6:7a:4b:13:5c:ee:
68:50:45:0e:c0:a3:4b:1e:11:22:1b:1c:eb:a9:87:a6:56:19:
41:fa:26:08:e0:d9:4f:fe:f3:c1:4b:f9:8f:94:af:17:0c:fa:
90:8f:61:93:e3:a1:fa:c5:1f:0c:6b:ae:7a:02:ec:3b:41:6d:
6e:f5:95:fb:f1:d8:5d:b7:74:b2:0f:b7:1e:0b:59:0c:b7:ea:
4d:18:4f:54:35:34:e0:3e:69:4e:33:34:bb:03:94:98:a1:ba:
cc:f2:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org