Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/rvbQzPKu4a3fBkGml78i78anlVU.roa
File: rvbQzPKu4a3fBkGml78i78anlVU.roa (raw, json)
Hash identifier: xSmJeeevuyRzq3yc4jpWGxgG2khcijDdNFdm/Hy13w0=
Subject key identifier: AE:F6:D0:CC:F2:AE:E1:AD:DF:06:41:A6:97:BF:22:EF:C6:A7:95:55
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: F5
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/rvbQzPKu4a3fBkGml78i78anlVU.roa
Signing time: Fri 01 Sep 2023 01:28:50 +0000
ROA not before: Fri 01 Sep 2023 01:28:50 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2497
IP address blocks: 219.119.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 31 Jul 2024 01:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Sep 1 01:28:50 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=AEF6D0CCF2AEE1ADDF0641A697BF22EFC6A79555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:38:07:3e:38:70:ce:b3:c0:e9:d6:44:a9:
ec:1d:1d:3a:b4:54:55:ce:fb:ad:db:dc:cb:1e:2c:
f5:fd:eb:5b:d2:a2:d1:3d:f9:39:08:d8:4b:cc:45:
07:0b:81:af:67:b9:81:5f:15:f5:f7:8c:05:3f:c4:
c5:5f:5b:8d:90:c8:67:42:16:34:f3:1f:8d:e9:10:
71:13:e5:00:80:b9:5e:5a:80:24:b0:69:a1:4d:4f:
aa:d2:48:d3:6a:4c:b8:5d:65:bc:11:6c:00:b2:aa:
b7:60:4e:3e:e7:aa:93:34:66:10:b0:6f:10:b1:8c:
ed:1c:8d:89:8c:e7:98:b1:07:8a:5f:f1:a5:36:2c:
2f:2f:40:11:fa:19:26:19:b7:7f:ef:85:ae:52:3f:
7a:ea:4c:98:69:01:95:ce:8a:12:40:f1:df:8d:49:
43:6f:37:31:48:a1:c1:3b:bf:e0:d7:a1:b9:6b:cf:
45:33:e2:25:53:42:a3:c8:f8:52:d1:8a:a5:8a:a0:
29:b6:28:2a:98:fa:40:4f:29:0a:7e:e1:e1:db:71:
ac:42:f6:de:56:fa:c7:53:dc:af:a2:9e:8f:e4:e0:
46:84:b3:b1:b7:19:dc:cf:91:ca:e0:ad:74:4d:b0:
38:56:27:5f:96:d2:62:e7:89:95:fd:90:fa:19:4a:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F6:D0:CC:F2:AE:E1:AD:DF:06:41:A6:97:BF:22:EF:C6:A7:95:55
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/rvbQzPKu4a3fBkGml78i78anlVU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:5c:d7:b1:4f:37:ba:7e:1a:a4:1f:c2:a5:e4:46:83:9f:7a:
66:23:fe:ef:be:a5:cb:09:e1:c1:25:56:1b:02:79:f4:99:54:
05:a1:b0:98:21:90:e7:11:6b:58:b0:4f:04:f4:5a:fa:3e:22:
cd:eb:d6:10:b4:1c:96:74:c2:8d:dc:7a:9e:6c:de:d0:f3:67:
22:9b:b5:7f:f6:eb:a3:29:ed:50:a5:e0:fe:f5:d8:7e:ca:2f:
2c:fc:10:87:cc:d0:12:4b:aa:ef:04:e7:93:c4:14:8c:bd:59:
82:24:22:2a:7f:58:cc:96:87:e0:aa:a7:09:ca:18:38:9c:2b:
59:73:8f:18:cc:77:2b:45:2f:08:88:79:4d:81:5e:90:bf:fe:
3d:4f:9b:66:ba:1f:12:a9:71:5d:8f:c5:17:6d:06:4e:4d:61:
d5:e6:4f:f0:10:47:3a:0f:dd:fd:88:68:36:d1:1f:4e:e4:53:
b6:80:0d:18:3b:9c:ba:f9:7b:78:7d:a7:0b:dd:22:21:ed:63:
49:5e:28:53:17:98:1f:62:f8:23:8b:38:b1:1c:ed:f3:5a:0f:
93:26:88:31:3c:4e:7c:c9:de:70:a0:94:da:85:51:e6:a6:84:
b6:49:d2:d9:19:26:ca:6e:5d:7e:dc:9f:3f:1b:ef:0f:47:e9:
03:42:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org