Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/xfkumkvQFJKRppsxK5g96RVsw5g.roa
File: xfkumkvQFJKRppsxK5g96RVsw5g.roa (raw, json)
Hash identifier: OCoCfHQqVDP/n7hltOHft7KKWukAqIEUIT4itrCh0Lg=
Subject key identifier: C5:F9:2E:9A:4B:D0:14:92:91:A6:9B:31:2B:98:3D:E9:15:6C:C3:98
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: C2
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/xfkumkvQFJKRppsxK5g96RVsw5g.roa
Signing time: Mon 24 Oct 2022 04:49:01 +0000
ROA not before: Mon 24 Oct 2022 04:49:01 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 9824
IP address blocks: 220.208.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 24 04:49:01 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=C5F92E9A4BD0149291A69B312B983DE9156CC398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:f1:51:94:63:f2:12:57:ab:a6:ad:e9:8a:
9f:8d:50:02:6f:66:fa:4b:d0:76:2b:ec:b6:b5:3f:
b8:02:03:06:a3:6f:53:ea:a7:9f:96:cf:d2:3d:32:
16:70:68:23:6b:0e:c9:20:9d:c2:f7:cb:9b:fe:a6:
56:e6:5c:c3:c7:56:9e:b8:28:3d:56:e1:c5:19:e2:
55:fb:93:a4:a4:77:18:d1:66:84:a9:8e:77:96:0b:
c8:2c:9d:8f:b8:d5:fa:4f:cc:48:33:d9:4e:88:01:
5d:29:82:7a:1f:c0:0f:27:cf:e6:49:d1:58:5a:af:
e6:07:df:42:b4:3b:d5:72:09:ba:f5:f8:03:9a:24:
26:8c:f7:10:63:cb:e4:d2:2b:8e:32:25:7e:4e:33:
3c:32:06:50:a9:77:da:ca:03:57:14:5f:5d:da:79:
62:d6:00:32:43:aa:0d:1d:28:a6:79:6b:04:a4:ad:
9b:e2:41:70:61:52:f0:de:3d:ac:74:ff:47:4d:fa:
0f:80:20:8b:5d:5e:ac:c3:46:3c:52:d0:3b:a2:dc:
ac:cc:a8:33:f7:75:87:4c:c8:c8:1e:7a:c2:8d:1e:
24:bc:36:d3:99:b6:04:7c:6a:2e:c6:7a:ca:03:11:
d6:73:a9:d0:eb:e2:68:91:c1:46:e1:2d:ff:30:ab:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F9:2E:9A:4B:D0:14:92:91:A6:9B:31:2B:98:3D:E9:15:6C:C3:98
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/xfkumkvQFJKRppsxK5g96RVsw5g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.208.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:9b:cd:be:0b:ca:34:23:49:21:5e:08:33:6e:bb:32:c8:65:
1b:7c:8a:44:a7:2c:de:eb:91:25:16:d2:95:04:25:ed:8b:42:
3f:34:e0:db:a5:7e:be:33:84:6b:62:44:92:ca:5c:34:bc:08:
10:a6:4c:df:02:33:66:c4:9a:b3:49:eb:89:b9:24:6f:f0:95:
21:90:9b:67:86:7f:b3:c8:fb:21:52:7b:90:37:e2:f0:15:99:
22:80:b8:dc:12:d4:6d:1a:e8:43:15:36:7c:45:c3:3e:05:68:
6b:29:7a:96:8c:34:94:1a:74:93:11:89:18:dd:8c:a0:ba:10:
94:b6:de:e4:a0:fc:7c:ad:80:5e:46:cf:10:e7:b9:2a:a3:22:
95:6f:34:48:f2:31:06:f6:bf:35:42:79:bd:23:10:64:78:00:
00:95:29:b9:d4:aa:af:cc:48:09:70:c2:ec:7d:88:0b:53:cf:
16:17:8f:f8:07:3c:e4:4f:2e:c6:15:8f:2b:f0:89:78:b8:5b:
61:3f:3b:9a:07:e4:bb:c6:98:2b:a7:a5:61:49:47:11:ce:9e:
ed:84:87:b9:57:4f:7e:74:d5:c2:e5:f6:5c:56:a9:ee:2e:2c:
c6:c2:01:6b:a3:55:4b:db:95:48:62:13:3f:c0:95:c7:1c:30:
7a:0a:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:41 2023 by rpki-client on console-fra.rpki-client.org