Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MtTVQdG9Vob9KDDcsnUoj9YPpKY.roa
File: MtTVQdG9Vob9KDDcsnUoj9YPpKY.roa (raw, json)
Hash identifier: KLLKudJcstsgjfLTMTR8FvjskN5enBr5Zpj74sEEJzs=
Subject key identifier: 32:D4:D5:41:D1:BD:56:86:FD:28:30:DC:B2:75:28:8F:D6:0F:A4:A6
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 01BC
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MtTVQdG9Vob9KDDcsnUoj9YPpKY.roa
Signing time: Sun 01 Oct 2023 01:38:15 +0000
ROA not before: Sun 01 Oct 2023 01:38:15 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 4721
IP address blocks: 223.223.208.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 1 01:38:15 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=32D4D541D1BD5686FD2830DCB275288FD60FA4A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:e3:bb:88:c7:40:e6:c3:ac:5f:b8:35:14:
47:f2:10:9a:9b:72:26:6e:70:18:85:6b:e5:6e:b6:
43:97:c6:aa:eb:cd:7b:02:d8:86:cd:8c:88:6b:8a:
17:c9:2b:f3:2a:c9:03:c3:f7:86:f6:5a:78:52:67:
64:45:a5:62:b4:97:4c:e9:0c:a4:c1:66:24:51:68:
85:77:22:38:98:98:9d:91:a7:da:9f:1e:9b:d3:80:
41:39:90:a6:e7:e0:1d:e9:92:84:80:4b:40:d0:b8:
f4:b0:f8:0e:30:3c:b7:12:08:71:9e:00:f1:01:ff:
84:bf:17:ef:db:69:9d:c3:32:60:22:54:65:58:73:
57:cf:c1:55:c3:07:42:ee:15:57:d9:da:f6:55:5b:
6a:8c:61:c5:5a:6a:bb:80:8f:ac:69:12:09:bd:84:
1d:4a:d2:1d:94:76:60:0c:90:6f:e7:97:e3:85:c8:
a8:1c:51:60:28:3e:ba:2b:bf:56:50:fa:e7:ca:85:
7b:e3:15:c5:f0:48:32:0f:27:98:fc:9c:b0:ae:58:
83:11:4f:8d:59:ae:cf:9a:d2:72:3c:e5:9f:10:28:
3a:e3:67:9a:ca:12:b2:75:3a:bc:33:bb:d1:1d:bc:
18:21:f2:7a:4a:a5:64:cb:60:04:b1:9b:b5:5e:8e:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:D5:41:D1:BD:56:86:FD:28:30:DC:B2:75:28:8F:D6:0F:A4:A6
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MtTVQdG9Vob9KDDcsnUoj9YPpKY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.223.208.0/21
Signature Algorithm: sha256WithRSAEncryption
dd:d9:e9:84:31:b5:a1:f0:c6:e7:a6:94:e7:9f:d9:ed:a1:a8:
e1:a8:73:29:40:a0:d6:a4:fa:25:3e:ee:20:5a:6f:e7:fc:b4:
35:f0:fe:dd:3f:7c:aa:70:f4:0f:70:80:d8:07:1f:7e:48:59:
47:6a:0d:eb:64:6b:d1:6a:37:b4:30:25:7a:94:9e:62:2f:b9:
e0:cb:1c:12:87:9b:f0:14:bd:e6:09:cf:7c:71:80:ca:9c:26:
e1:de:b1:bc:9b:87:3d:6f:9c:f1:88:60:ff:89:8a:33:45:01:
28:00:14:46:6e:19:49:a1:23:5c:81:f7:04:92:02:ac:be:c1:
ca:a6:b6:aa:2c:3e:ea:20:75:27:8e:01:ba:da:94:8d:fe:66:
07:c4:45:6f:68:8b:c5:5a:87:96:71:2f:89:12:3c:35:f6:c2:
53:e4:fa:2f:e0:6d:02:c6:58:f1:3f:21:2b:96:ee:2e:ea:7e:
87:0b:ca:9c:f7:50:24:83:34:fb:5e:c8:ee:0a:15:06:3a:0a:
85:9f:e4:c5:09:4b:ab:79:7e:1c:d0:15:fa:39:cb:cd:00:ca:
66:b9:38:bd:40:d3:26:52:1b:ee:8e:79:29:f2:7c:79:43:76:
37:f7:24:97:e6:cd:4b:45:95:df:13:89:c9:17:f7:2f:ca:71:
eb:35:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:55 2024 by rpki-client on console-ams.rpki-client.org