Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/qlpNSoWhGmEG_uxNnt6P7SnyfVo.roa
File: qlpNSoWhGmEG_uxNnt6P7SnyfVo.roa (raw, json)
Hash identifier: qns3U0IrG+ikq0PJVQ1vF3YgnSlZgdwoT72WLO9FMnc=
Subject key identifier: AA:5A:4D:4A:85:A1:1A:61:06:FE:EC:4D:9E:DE:8F:ED:29:F2:7D:5A
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 3C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qlpNSoWhGmEG_uxNnt6P7SnyfVo.roa
Signing time: Mon 17 Oct 2022 01:25:42 +0000
ROA not before: Mon 17 Oct 2022 01:25:42 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 9378
IP address blocks: 27.116.0.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 17 01:25:42 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=AA5A4D4A85A11A6106FEEC4D9EDE8FED29F27D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:9e:86:fc:76:de:c9:a5:39:c2:15:50:c7:
59:28:8b:76:32:ba:d1:7d:2c:7d:5b:97:20:3c:6c:
6a:06:29:49:20:b8:49:f1:bf:d8:bf:dc:ee:da:b1:
97:c1:79:cb:22:2e:8f:e2:90:0b:79:a2:0e:73:c2:
31:0b:e3:a3:8b:7c:12:04:0c:01:bf:fe:c2:a2:ce:
c2:3d:c7:29:8b:50:41:08:d8:9e:08:10:42:d3:03:
05:1d:46:d7:0c:4d:47:ab:f6:cc:21:ca:5b:90:2b:
75:ad:dd:d0:0a:06:ed:a3:96:d1:ed:1e:e0:7e:4b:
45:e8:80:2f:e2:57:14:37:5f:3b:66:7f:9d:47:14:
03:99:c3:a9:08:91:1f:4d:d6:74:b2:aa:a5:2e:c2:
68:6c:15:24:ad:7c:50:85:a8:8b:de:45:ec:ce:61:
ba:08:f3:e5:c4:25:55:ea:71:0c:a0:65:69:91:78:
de:28:dd:c5:60:97:ab:5a:0d:ac:fe:44:0a:38:2e:
7b:fb:08:16:6d:79:89:f9:04:64:e9:8e:1f:13:1b:
a8:2e:32:d8:49:37:3b:65:8b:9d:2e:b4:d4:c6:34:
86:83:a8:c9:99:19:29:8d:26:a5:79:14:cd:59:a1:
96:bc:dd:ee:3e:20:f5:1d:90:66:84:51:99:58:1d:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5A:4D:4A:85:A1:1A:61:06:FE:EC:4D:9E:DE:8F:ED:29:F2:7D:5A
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qlpNSoWhGmEG_uxNnt6P7SnyfVo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.116.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:16:0b:a2:c6:05:54:90:9a:46:32:d2:b0:09:9d:7f:6b:b7:
0b:39:88:03:10:41:ec:bc:17:5b:10:74:ec:eb:fa:c9:d1:0c:
02:9c:11:b4:62:a9:08:30:c5:1a:1f:e9:39:15:a6:37:b2:5a:
89:23:6d:9c:81:b3:fd:44:e4:36:7f:fd:6f:7a:b9:14:29:66:
77:59:57:9f:c0:fc:3f:e0:35:20:91:63:2f:52:8a:bf:7b:ea:
28:fa:d8:07:d6:b0:28:6a:10:38:dd:40:a0:58:83:0f:21:e0:
46:65:ba:46:56:40:97:07:59:9e:18:18:12:c6:7e:02:1d:a7:
46:f0:78:65:67:86:4f:aa:ed:99:83:a6:14:6f:7e:6d:09:83:
ee:24:e2:9e:dd:2a:dd:4f:b4:bb:6f:22:87:12:ae:53:80:9c:
55:e9:a5:26:90:05:69:5a:03:cc:91:79:a8:08:07:dc:04:e0:
8e:ba:35:7b:1e:04:74:8c:91:90:89:5b:3f:2b:9b:c5:84:10:
b6:84:ab:fe:95:be:98:06:6e:4a:c1:31:f5:3f:0e:31:37:cc:
31:1c:68:79:63:a3:10:46:92:ba:2d:3f:ae:ec:c1:d6:ff:6b:
c8:00:4e:b0:80:ce:d2:12:9e:06:92:65:1d:05:2e:e8:05:79:
ef:90:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org