Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/QquElBQwba7bh6Pm37XaGcKuWDc.roa
File: QquElBQwba7bh6Pm37XaGcKuWDc.roa (raw, json)
Hash identifier: /VcB6I0hZar4EeU7otc+4RANGf+m9sxI/AEGlDDsorc=
Subject key identifier: 42:AB:84:94:14:30:6D:AE:DB:87:A3:E6:DF:B5:DA:19:C2:AE:58:37
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: FA
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QquElBQwba7bh6Pm37XaGcKuWDc.roa
Signing time: Fri 01 Sep 2023 01:28:53 +0000
ROA not before: Fri 01 Sep 2023 01:28:53 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2497
IP address blocks: 103.2.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 01:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Sep 1 01:28:53 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=42AB849414306DAEDB87A3E6DFB5DA19C2AE5837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2a:4f:07:6a:26:49:56:41:d3:6f:60:b2:58:
cd:fb:cc:61:b7:d2:f4:ff:c0:bc:16:cb:0f:3b:ff:
4e:12:2a:6f:db:46:43:46:8e:e4:9e:59:c7:62:8b:
f4:33:39:00:aa:1d:7a:a1:f9:b5:83:5d:4d:3e:e0:
6b:4b:6f:05:6e:0d:9b:ef:94:2b:4f:51:7e:3e:b0:
a7:41:67:f1:77:8f:bb:51:86:be:ac:74:6f:74:1c:
0c:78:bf:99:0f:6d:1e:93:48:d0:d3:dd:49:32:bd:
62:eb:96:49:62:0d:fd:e1:53:1a:f9:6f:24:8e:b2:
c9:80:8c:73:b7:2a:46:a7:0a:a8:36:5f:49:aa:36:
0d:19:c8:de:8f:17:d1:e8:19:d3:cf:d1:93:97:0a:
95:88:7c:da:76:70:76:be:9c:70:53:89:74:02:61:
9b:8b:b5:26:fa:75:c8:0b:4c:26:9f:2c:1e:cc:e9:
bd:76:0f:61:1b:46:62:13:aa:d0:bd:3a:c6:4b:43:
16:6c:17:6b:99:e7:f0:2d:ac:18:f9:85:b8:b4:da:
18:37:64:d8:2c:6d:b1:c7:80:f8:2d:1b:36:50:62:
45:ba:d3:e3:aa:ea:e3:1a:10:ce:0b:b2:f3:c8:0a:
bb:9b:24:b6:08:e1:29:79:02:a9:4a:68:d5:d5:09:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AB:84:94:14:30:6D:AE:DB:87:A3:E6:DF:B5:DA:19:C2:AE:58:37
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QquElBQwba7bh6Pm37XaGcKuWDc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.57.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e9:f6:22:ee:b2:1b:80:fb:43:30:3c:0d:be:65:84:f4:1d:
ca:5b:eb:6f:cd:43:a7:70:fd:36:ea:d9:37:f6:63:bd:cb:4f:
52:10:57:8b:e1:39:8d:06:bc:e1:16:b9:3c:30:98:12:c7:2d:
bd:8b:64:ae:00:2c:b1:1a:c6:d7:9c:c8:c8:8e:87:56:11:b6:
80:39:d0:f2:75:d6:03:14:f2:ac:fa:82:70:aa:c3:48:fe:5a:
7d:3a:88:f4:ed:4e:a1:e1:e7:56:2b:be:a3:5f:2b:74:c1:cf:
30:43:c2:4e:db:02:8c:f5:4a:9c:2b:e8:c4:58:08:c4:84:82:
26:4b:a3:f2:8f:db:be:fa:80:0f:a3:13:f0:07:4a:35:1a:89:
56:5f:aa:11:42:8e:fe:a0:82:f6:52:60:45:79:e2:cd:76:6b:
88:62:ca:c1:b4:25:a9:b4:d1:c0:30:f1:a8:ec:a3:16:98:74:
13:f5:0a:fb:9c:a2:d1:99:27:98:f9:65:15:6c:4a:2e:62:bc:
cb:a7:1a:20:d2:fa:ac:aa:e5:b9:3b:af:68:6b:d6:0f:6a:36:
18:06:8e:d1:15:23:65:bd:97:74:93:6d:4b:4f:a3:9d:77:44:
68:32:56:ac:b2:9a:2b:86:38:45:8b:ee:7b:7d:ec:13:90:2c:
7a:3e:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org