Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/KUMldaXKS7LgWgGSOy2X2aAaSWo.roa
File: KUMldaXKS7LgWgGSOy2X2aAaSWo.roa (raw, json)
Hash identifier: N2WnYSWNsswprdA1LOkSSLTV97CdaZx0Wjj6tH0Kdsg=
Subject key identifier: 29:43:25:75:A5:CA:4B:B2:E0:5A:01:92:3B:2D:97:D9:A0:1A:49:6A
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: F8
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KUMldaXKS7LgWgGSOy2X2aAaSWo.roa
Signing time: Fri 01 Sep 2023 01:28:51 +0000
ROA not before: Fri 01 Sep 2023 01:28:51 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2497
IP address blocks: 121.200.200.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 31 Jul 2024 01:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Sep 1 01:28:51 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=29432575A5CA4BB2E05A01923B2D97D9A01A496A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:91:4f:e8:0b:07:0d:d2:b7:95:1b:d4:8c:16:
23:db:36:f6:3d:38:d3:0b:60:3a:b1:b6:4c:37:1a:
a8:29:14:99:6e:19:53:ac:8e:08:56:2a:fe:db:03:
a3:38:33:15:ac:04:40:db:04:52:51:cc:49:18:37:
f3:8d:08:5f:a4:a8:b3:af:06:ff:7d:d4:e8:a3:a2:
92:f3:e3:bb:37:5e:e5:f6:1e:e5:da:49:ca:f9:b2:
2f:3b:55:f7:90:cf:14:cd:fa:3e:bd:56:bc:cf:10:
42:1e:00:d0:cb:6c:a1:cf:6f:96:c8:be:fc:85:88:
55:80:88:65:70:47:15:10:24:ee:00:38:81:37:54:
9a:23:05:2e:c2:74:1d:58:77:eb:9b:76:c1:2b:38:
bd:ea:79:e4:f1:0b:55:a1:7f:ba:2d:39:f1:3f:f7:
bd:46:b1:ff:50:17:b1:71:d7:8f:db:88:d5:c4:30:
72:b4:41:60:a5:d0:c6:30:3b:57:7f:ee:42:ac:7d:
4e:ef:77:ff:5a:ac:ea:5e:3f:9d:ee:33:f1:cc:98:
e9:90:50:a4:f0:ed:af:7c:18:54:ec:48:86:bb:32:
f5:39:1a:3f:b3:5d:eb:c0:c3:19:36:39:91:89:88:
75:fa:30:c9:46:92:af:98:92:e1:57:5f:67:8a:4d:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:43:25:75:A5:CA:4B:B2:E0:5A:01:92:3B:2D:97:D9:A0:1A:49:6A
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KUMldaXKS7LgWgGSOy2X2aAaSWo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.200.200.0/21
Signature Algorithm: sha256WithRSAEncryption
36:f5:69:0b:35:83:c5:5f:68:db:eb:0f:bb:3c:36:e7:33:95:
a7:f6:ae:a0:82:2e:cc:e8:31:2e:2e:32:9e:d5:37:ee:f7:7f:
5e:71:6b:7c:1a:2b:e5:41:ab:ae:50:10:b4:a8:2e:c9:50:8f:
49:e2:02:b7:79:ea:d1:23:3a:41:88:ad:ea:cd:16:33:03:94:
dc:17:65:c8:e4:3b:f0:77:30:7e:9b:75:7e:8b:99:2e:1f:70:
e8:d6:a7:f0:ae:5a:ac:7b:40:9c:81:04:ee:67:a9:0c:5e:cc:
f7:33:a4:05:9b:1f:0b:35:e1:e8:20:33:d6:77:eb:14:f8:3b:
d7:04:36:e1:b6:ed:81:51:14:a8:f0:8e:02:97:0b:22:b6:98:
48:6a:f1:e0:1a:8f:fb:19:51:82:43:21:fb:ee:f5:3d:ac:9d:
f1:81:83:14:40:ec:cc:21:7d:fe:a6:91:a8:4a:73:d8:fa:40:
d8:dc:69:54:48:dd:7b:9d:53:cc:52:69:dc:1a:e7:cc:00:93:
8c:d8:fc:34:2d:1c:de:3b:05:8f:2c:98:9d:36:89:3a:e4:f6:
35:5f:fa:2e:32:d1:3d:f6:48:34:5e:bf:74:ee:1d:87:5a:f0:
f1:75:b5:f4:4e:5e:bb:5e:61:f7:b8:6b:62:ae:7b:b2:18:cc:
ba:6f:39:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org