Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/uk1ES7luPbU1dwsJ50qGKWz8wFk.roa
File: uk1ES7luPbU1dwsJ50qGKWz8wFk.roa (raw, json)
Hash identifier: TK1a5bQcCsblRH88Ymd9lBqzY+4f1YSmM5OGAEB0NO8=
Subject key identifier: BA:4D:44:4B:B9:6E:3D:B5:35:77:0B:09:E7:4A:86:29:6C:FC:C0:59
Certificate issuer: /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial: 16
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/uk1ES7luPbU1dwsJ50qGKWz8wFk.roa
Signing time: Wed 15 Mar 2023 07:22:03 +0000
ROA not before: Wed 15 Mar 2023 07:22:03 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 17530
IP address blocks: 61.193.128.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Validity
Not Before: Mar 15 07:22:03 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=BA4D444BB96E3DB535770B09E74A86296CFCC059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:85:76:b1:5a:dc:9d:0c:60:40:90:f8:18:d6:
06:8a:ac:76:9d:a8:ee:38:a1:7f:d8:57:06:2d:18:
60:49:08:96:8c:23:e9:7d:c2:89:bb:a9:4f:54:ee:
0c:e3:76:62:fc:cf:b2:8a:70:61:e7:f6:9b:60:af:
9a:85:ac:d2:f5:47:7c:3f:28:05:ec:99:6d:26:32:
a9:c9:a3:8b:62:6a:83:26:8d:60:29:ab:f1:b7:7c:
76:43:ac:4a:c4:b1:d0:87:a1:d1:76:44:90:fa:16:
a4:f3:a4:9f:5a:90:6f:1d:4e:ec:d2:8e:5a:16:d9:
33:7d:60:91:78:48:1f:7a:26:e4:6d:44:bb:00:21:
b0:42:e3:51:9f:14:37:00:a0:d2:80:c5:70:e2:75:
32:8b:39:f0:17:9e:73:94:49:c6:c2:b7:45:07:87:
09:7c:28:92:43:1b:96:6e:23:92:56:71:84:6f:f6:
67:33:4c:c3:34:62:1d:f0:e2:76:b1:db:a6:cb:01:
2f:c1:10:c6:94:86:63:aa:31:79:36:bb:2e:3f:fd:
25:45:9e:f2:46:d0:cc:16:3f:4f:e3:43:d6:7c:01:
26:ea:1d:80:99:c3:01:72:8f:c0:bd:c9:39:05:89:
fd:48:5d:fc:f3:6d:49:3a:50:23:a8:b4:8d:fd:a2:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:44:4B:B9:6E:3D:B5:35:77:0B:09:E7:4A:86:29:6C:FC:C0:59
X509v3 Authority Key Identifier:
keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/uk1ES7luPbU1dwsJ50qGKWz8wFk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.193.128.0/20
Signature Algorithm: sha256WithRSAEncryption
33:33:f7:8c:89:64:b2:27:54:be:75:09:11:51:fe:28:0a:6d:
19:74:40:07:94:55:c8:59:64:0c:18:37:5a:c7:2c:a3:df:c0:
78:26:aa:32:29:cd:a7:0b:88:6e:33:62:43:de:04:88:4a:a9:
8d:79:78:5d:83:2b:86:72:d3:37:b1:77:3d:ba:39:85:1c:35:
24:a6:d5:05:42:9e:66:83:ff:84:3e:ee:1d:1a:11:99:df:c7:
d3:3c:8a:0a:18:2b:09:0c:d5:99:dd:6e:d2:39:5c:fd:2c:a6:
10:c7:d5:87:0b:93:99:55:d4:59:01:d8:6d:f0:82:69:88:9d:
e1:d5:22:6a:29:11:5c:b0:c2:e6:18:a2:ae:3a:ed:88:5b:87:
0b:43:aa:2a:08:76:40:d0:e1:30:8d:92:73:4e:85:57:b7:4f:
01:5f:61:a6:93:d2:72:d4:11:f3:92:3a:1d:76:7c:9a:d6:5f:
de:a6:36:f8:3d:85:17:e6:4e:7d:4f:20:85:6b:bb:d5:39:88:
4c:3e:3c:df:fd:b3:b6:34:b4:f1:5e:e1:96:a3:6e:46:f0:21:
40:e1:3c:a8:e5:1b:d0:61:9e:4d:28:fc:d9:ca:f2:cb:37:54:
98:5f:d1:1e:9d:3e:4b:1a:06:bc:15:15:6b:47:a6:44:eb:40:
39:34:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org