Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/jvlJwbr-8OjQYPYzPwNNOpEBaIs.roa
File: jvlJwbr-8OjQYPYzPwNNOpEBaIs.roa (raw, json)
Hash identifier: HZrfgBhYDbDs7PdibDV6k6TdkSJcURmTeVP7lYDD0xQ=
Subject key identifier: 8E:F9:49:C1:BA:FE:F0:E8:D0:60:F6:33:3F:03:4D:3A:91:01:68:8B
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 01C5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jvlJwbr-8OjQYPYzPwNNOpEBaIs.roa
Signing time: Sun 01 Oct 2023 01:38:19 +0000
ROA not before: Sun 01 Oct 2023 01:38:19 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9824
IP address blocks: 61.125.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 1 01:38:19 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=8EF949C1BAFEF0E8D060F6333F034D3A9101688B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:c5:7a:ac:91:ca:cf:de:f8:94:e5:fe:c4:
92:c8:b8:95:d7:ed:3e:49:8f:ac:1b:21:d7:d8:eb:
e7:54:10:8e:c0:27:e1:0c:12:75:a6:1d:33:56:0e:
31:2d:23:22:1d:90:9d:b0:cf:84:66:80:30:62:49:
66:d4:ac:5a:5c:32:cd:1a:9c:3d:0d:44:fb:de:81:
67:a5:4c:fa:b2:16:ab:36:d9:82:4c:b3:18:d7:21:
5b:2a:9c:16:21:d6:87:cc:73:0a:1c:58:79:da:3a:
99:4c:95:37:72:59:7d:d4:29:19:27:0c:48:c5:f2:
72:8b:26:b2:68:d9:e6:c1:b1:3b:84:d0:03:dd:fc:
f3:7f:a0:49:be:30:41:29:a3:81:52:73:c3:6d:22:
b7:25:16:ab:ac:c9:66:82:20:e3:aa:a4:d5:56:02:
5e:0a:3e:ee:67:9d:4f:96:22:5a:1c:7e:c2:46:56:
6a:49:7a:97:11:c5:f1:4d:02:0a:17:19:91:1e:b4:
3e:4d:66:ad:7a:a5:40:c7:1d:e4:f4:6f:69:09:4e:
65:18:03:82:d2:af:0d:36:75:e9:ad:b0:59:20:1b:
34:7e:47:3b:71:b2:6e:93:ff:31:bf:52:1f:1f:c7:
da:09:0a:cb:21:bf:b6:25:56:5c:8c:3a:96:b7:79:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:49:C1:BA:FE:F0:E8:D0:60:F6:33:3F:03:4D:3A:91:01:68:8B
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jvlJwbr-8OjQYPYzPwNNOpEBaIs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.125.64.0/18
Signature Algorithm: sha256WithRSAEncryption
09:03:90:2d:8f:ef:96:47:e5:6c:61:6e:9f:38:2e:34:d9:20:
29:d9:aa:aa:80:24:de:8d:b1:7a:3b:6f:53:3b:6b:b2:41:7f:
58:c6:45:d3:24:74:86:85:0b:8f:08:b8:e3:31:6c:10:ba:32:
db:ee:11:9b:bc:b9:5b:75:84:b5:48:c7:17:d8:00:82:52:ae:
15:cf:57:96:50:65:4e:e0:f8:3a:49:07:25:c3:bc:71:d7:29:
af:3c:45:a7:cb:ab:e9:0c:8b:b1:0a:22:45:6c:e2:32:83:a7:
e4:51:df:b6:34:70:48:d5:8e:e6:82:38:2b:d1:24:df:5a:76:
d5:f1:49:4c:4e:20:d9:c5:af:d5:84:c4:f2:2b:6a:25:36:ae:
02:29:9b:a6:20:70:a2:9b:19:0a:af:23:e0:b0:13:00:ca:f2:
5c:cb:81:58:f2:20:d9:94:e3:e4:48:24:4c:e6:65:11:a6:d4:
6e:f6:7e:3b:ba:a8:44:b7:7a:0b:72:87:8c:15:31:6b:aa:77:
f1:c4:e8:51:83:55:79:47:02:db:4f:bc:61:62:9e:6a:7f:14:
89:50:50:29:77:2a:4b:db:74:c4:09:42:f6:9c:92:63:b2:ac:
79:92:02:d9:e0:a3:02:0c:1a:e1:db:1b:d3:99:d4:2f:3d:e2:
3d:69:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:44 2024 by rpki-client on console-fra.rpki-client.org