Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NDoJDX0UfD041U04PbFNygMegWg.roa
File: NDoJDX0UfD041U04PbFNygMegWg.roa (raw, json)
Hash identifier: 88a/vmcMFczeJfUPqWjKGlcGbdBTlky77m6PuJEkDUA=
Subject key identifier: 34:3A:09:0D:7D:14:7C:3D:38:D5:4D:38:3D:B1:4D:CA:03:1E:81:68
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 01AF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NDoJDX0UfD041U04PbFNygMegWg.roa
Signing time: Sun 01 Oct 2023 01:36:37 +0000
ROA not before: Sun 01 Oct 2023 01:36:37 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9824
IP address blocks: 219.112.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 1 01:36:37 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=343A090D7D147C3D38D54D383DB14DCA031E8168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:99:35:d2:09:be:a5:ab:5c:4b:b7:b2:e2:
fa:df:01:1a:e7:00:72:8c:b6:1c:67:26:ad:4f:c8:
df:d0:4a:de:e0:53:78:90:f8:ee:c1:a1:6c:b1:68:
d2:c3:c8:42:fb:77:e7:60:1f:5f:9e:2d:b6:36:04:
e5:ed:dc:ea:a0:58:bf:fa:37:02:7a:4f:a2:86:f4:
d7:f1:cb:5e:8b:c6:c0:6d:74:63:c1:4f:30:3f:26:
52:b2:a3:44:ca:70:a8:50:72:8b:d9:b5:5a:5b:72:
f4:d7:3c:be:88:4b:88:8b:5e:22:1b:3c:dd:04:0b:
71:51:39:fe:d0:95:52:91:e5:5f:22:b2:35:05:b5:
ea:eb:fd:49:d5:4e:ba:a3:94:13:02:e3:b1:0e:fd:
70:42:14:7a:16:10:ea:95:cd:9f:1e:2c:0a:9b:f4:
60:ec:b4:b2:ae:79:0c:be:b4:a8:ee:0c:b4:50:db:
ec:b2:93:c9:3f:71:c7:9f:06:8b:38:f6:29:26:6b:
c0:da:2e:4b:26:ac:74:fb:2e:3f:e9:7f:b1:e7:ab:
f0:0d:52:d6:94:31:c0:1f:8a:15:1e:f5:72:f6:83:
23:9c:c2:b2:29:6b:7b:89:ab:b3:4f:d1:07:18:38:
6b:7c:79:f9:41:1d:30:4c:3c:e5:b6:96:a2:ea:77:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3A:09:0D:7D:14:7C:3D:38:D5:4D:38:3D:B1:4D:CA:03:1E:81:68
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NDoJDX0UfD041U04PbFNygMegWg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.112.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:d4:f6:94:48:8a:24:8f:d6:0d:13:f7:80:89:0c:8f:83:f7:
63:c8:a4:51:fd:16:f9:39:de:f3:97:68:29:d7:27:d1:fd:21:
d4:eb:40:bf:77:ce:36:30:af:76:b0:d0:07:9d:ec:83:f1:d2:
10:9a:02:74:d3:0d:a1:4e:3a:25:88:c5:b0:8d:34:be:7c:c0:
41:f1:9d:7d:4d:2f:e3:fd:7b:c5:6d:3d:f2:27:e7:c7:dc:6a:
e4:28:a4:06:b2:80:5b:6b:d2:10:b0:ef:82:a3:52:13:5c:9e:
d8:fd:8f:44:68:c5:e6:13:42:93:c5:22:97:95:0f:0a:13:6b:
c3:03:b0:89:f5:95:c5:dd:c6:ec:bc:fa:c7:ec:41:2b:b0:9c:
60:00:83:57:60:14:cb:ef:60:e0:5d:10:09:dc:67:e5:42:24:
56:7a:54:b4:c0:53:36:24:cb:51:8c:41:5b:d1:51:c3:d0:ed:
fe:b7:16:25:77:95:d8:4f:4d:4f:c1:37:64:e6:84:99:22:fa:
ed:25:93:1a:8e:18:ef:54:29:19:b4:de:79:fa:fb:1c:62:7d:
2c:aa:89:f8:7b:b3:1a:74:76:16:6d:0c:61:27:05:d0:e3:20:
d5:41:78:13:5a:a5:75:a6:82:c8:3b:60:52:81:a3:ac:bb:0b:
f0:fb:a7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org