Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/GYjuaDSdiw5w_Spz4GOYFnxx6eA.roa
File: GYjuaDSdiw5w_Spz4GOYFnxx6eA.roa (raw, json)
Hash identifier: qaoiDzZNi7pVI/z8rXiUtbjm8EzspQqEY4jPj0Z8NAA=
Subject key identifier: 19:88:EE:68:34:9D:8B:0E:70:FD:2A:73:E0:63:98:16:7C:71:E9:E0
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: FB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GYjuaDSdiw5w_Spz4GOYFnxx6eA.roa
Signing time: Thu 24 Nov 2022 01:09:26 +0000
ROA not before: Thu 24 Nov 2022 01:09:26 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 0
IP address blocks: 202.180.176.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Nov 24 01:09:26 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=1988EE68349D8B0E70FD2A73E06398167C71E9E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:89:ac:3b:c6:72:39:b9:e9:91:d3:9c:76:
ee:b5:19:de:84:17:0a:af:21:d8:9e:a2:7e:2e:61:
00:eb:29:a6:5b:ff:f7:f2:ab:7c:37:e2:d5:eb:23:
e5:85:e2:0b:86:e9:8f:66:f8:78:85:8c:33:3f:91:
cb:34:c7:3c:0c:69:29:6f:a1:66:12:3d:2a:14:e3:
db:a3:a7:46:a2:0b:21:ef:58:ef:05:08:6c:ec:63:
45:b3:ea:82:e5:2d:3b:2a:83:01:98:fb:04:6d:17:
c5:29:be:4e:ff:a6:7b:68:ca:e8:15:e4:f2:c9:c1:
24:2c:63:b6:8e:04:67:b8:f5:c3:01:c8:ee:ca:d3:
23:69:ed:25:95:c9:2e:04:ff:2a:1c:03:56:36:a7:
0d:09:72:22:3a:50:b0:c6:fc:ea:db:87:25:0f:79:
ff:34:a1:cd:0e:5e:a6:3f:1a:cd:b7:47:0d:48:95:
8b:52:c8:5d:a0:53:f5:f9:dd:61:dc:f5:92:04:1f:
d1:8a:f3:55:9c:a6:0d:28:1a:49:e8:9d:ec:d9:18:
56:b5:bd:54:3d:c2:7a:34:7b:f7:51:4c:fb:f5:3d:
f4:f3:f3:2e:ff:bf:69:61:2d:89:73:65:65:3a:3c:
f5:7d:29:4b:9d:ec:a3:40:d0:5b:60:c4:aa:c3:6b:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:88:EE:68:34:9D:8B:0E:70:FD:2A:73:E0:63:98:16:7C:71:E9:E0
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GYjuaDSdiw5w_Spz4GOYFnxx6eA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.180.176.0/20
Signature Algorithm: sha256WithRSAEncryption
16:b2:ac:2a:12:3f:e9:07:fb:06:75:39:d7:65:84:04:36:9f:
78:0f:79:38:25:15:0f:e4:f2:9a:0c:e0:a4:0a:dd:11:14:ab:
83:fd:4d:31:3d:ee:61:86:8d:91:62:31:89:7b:e9:6f:5c:2f:
eb:9e:36:eb:0a:dd:d3:1e:20:3b:8b:2e:46:d0:e2:c6:11:bd:
83:52:e7:94:20:ed:13:5c:70:a7:5d:ba:86:ba:8e:5e:7a:8c:
13:18:6a:e7:08:b5:97:f5:1d:f1:9b:97:cd:47:9a:d6:93:87:
93:77:f4:09:58:1d:9c:db:2f:31:e0:c1:ee:92:6e:36:d3:21:
4c:c8:c5:3d:04:32:26:97:44:96:f3:b5:37:ee:56:87:a9:69:
a7:67:b4:1a:8c:95:c6:61:e9:49:01:8b:ae:cf:f3:a4:c5:09:
cd:7f:6c:91:8e:60:a6:8d:8e:76:20:26:bd:ec:a1:36:40:36:
5b:10:31:9f:81:e3:4f:79:6c:42:25:0e:f1:d3:34:0b:a7:ae:
1f:01:79:88:2a:48:78:55:a9:1b:4b:a1:a7:6d:13:76:fa:d4:
ff:96:ec:39:3d:35:11:41:24:93:06:c0:20:42:d4:f9:47:10:
7f:c6:0a:d6:6b:e1:58:40:a5:32:e5:02:57:e6:90:23:37:d5:
52:2d:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 02:08:18 2023 by rpki-client on console-fra.rpki-client.org