Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/YA9_8s937V8ox0Z9jSre8A1_bmI.roa
File: YA9_8s937V8ox0Z9jSre8A1_bmI.roa (raw, json)
Hash identifier: XMYu4bpz7ICtH61GpJ69G9ZTmV/df2s5Y69kvKQYAEo=
Subject key identifier: 60:0F:7F:F2:CF:77:ED:5F:28:C7:46:7D:8D:2A:DE:F0:0D:7F:6E:62
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 25
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YA9_8s937V8ox0Z9jSre8A1_bmI.roa
Signing time: Tue 11 Oct 2022 01:40:22 +0000
ROA not before: Tue 11 Oct 2022 01:40:22 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 9378
IP address blocks: 103.3.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 11 01:40:22 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=600F7FF2CF77ED5F28C7467D8D2ADEF00D7F6E62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:c6:4e:28:aa:cd:22:3b:46:3a:cb:f7:9c:
cd:e1:bf:2f:26:dc:f7:93:81:96:1a:e3:2b:c6:48:
d5:a1:ab:6e:1f:27:c1:f5:f4:94:02:b9:a3:1e:b6:
5d:a7:5e:63:46:a1:a0:d5:2e:19:28:59:34:df:93:
39:2c:8a:66:e3:fc:45:07:e8:d6:74:87:e8:83:1a:
13:5c:66:08:0a:bd:09:2c:75:35:31:01:50:a5:2b:
9a:88:30:9e:a7:86:5f:cb:43:d0:0a:34:fa:b7:a3:
e0:06:f0:3f:77:db:ae:2c:d7:59:0e:ca:17:6b:e7:
1a:e6:49:91:7f:c1:1d:45:34:e1:87:f3:85:03:07:
a9:26:a0:aa:73:88:c6:5a:a2:83:19:f1:17:8d:12:
b5:01:81:8b:95:b8:67:29:b2:01:52:74:7d:d3:b5:
c1:53:c4:20:90:6b:d8:3a:01:82:3b:53:3f:dc:a2:
7d:1c:5c:9a:d2:71:2e:88:53:e0:34:fc:1e:db:98:
29:08:48:3d:ac:0e:2f:8b:bf:57:18:77:59:0e:a4:
97:ac:8c:d1:9b:e9:c6:58:e7:8d:e4:42:37:0a:48:
f2:96:14:33:17:fd:c9:3c:ab:ee:97:89:af:c2:51:
34:60:22:85:2f:05:d0:4a:3c:43:12:e1:d8:1e:c9:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0F:7F:F2:CF:77:ED:5F:28:C7:46:7D:8D:2A:DE:F0:0D:7F:6E:62
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YA9_8s937V8ox0Z9jSre8A1_bmI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.3.4.0/22
Signature Algorithm: sha256WithRSAEncryption
91:c0:fd:e4:7f:d2:49:93:f0:00:cf:e8:93:11:7a:67:e1:6f:
1e:41:81:a0:e9:64:c5:1d:32:95:0d:d8:8b:e2:04:00:c1:90:
22:da:09:31:ef:5a:f6:11:64:ab:4d:c0:cc:71:4f:a6:49:04:
33:27:33:8a:3d:13:e6:4f:f5:a2:c6:00:9f:9e:9c:df:41:80:
2b:3f:5a:47:73:47:80:fa:68:39:7d:f1:73:02:23:e2:91:73:
d0:83:75:d9:03:ec:d8:ea:80:71:32:b9:7d:17:49:89:03:70:
43:74:58:54:14:bf:90:36:59:cd:27:52:d4:d6:49:a4:86:64:
5c:d9:14:d0:44:31:b5:8c:5b:80:9b:27:b4:09:18:d3:cb:45:
84:b9:62:19:60:43:05:aa:79:9b:eb:7c:83:1e:07:dc:9f:4b:
4b:30:49:e0:72:e7:92:96:f9:a9:fd:6d:e1:df:f5:8b:dd:b2:
11:ac:ef:86:93:66:8d:92:f9:04:da:81:27:06:86:ca:d9:40:
26:db:a2:33:3c:50:b5:57:79:9c:53:df:ad:04:18:76:0c:c8:
72:b9:38:99:5b:00:0f:b9:47:61:31:27:11:1b:c4:ef:0e:a8:
82:89:83:b7:f2:12:80:92:7e:f6:54:22:6d:34:38:ba:d0:68:
72:c3:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 02:08:18 2023 by rpki-client on console-fra.rpki-client.org