Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/yG-Ok5fCYU3utM6roD6a1PBS8Zg.roa
File: yG-Ok5fCYU3utM6roD6a1PBS8Zg.roa (raw, json)
Hash identifier: YX51Nm4wxD+HhDJFX1ip//in7wt0Mce3eFGnQw3PDy8=
Subject key identifier: C8:6F:8E:93:97:C2:61:4D:EE:B4:CE:AB:A0:3E:9A:D4:F0:52:F1:98
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: FE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yG-Ok5fCYU3utM6roD6a1PBS8Zg.roa
Signing time: Thu 24 Nov 2022 01:11:28 +0000
ROA not before: Thu 24 Nov 2022 01:11:28 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 0
IP address blocks: 211.1.176.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Nov 24 01:11:28 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=C86F8E9397C2614DEEB4CEABA03E9AD4F052F198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:64:8c:84:e2:30:11:d5:8b:53:c6:40:a1:
ad:13:08:31:c5:c2:22:26:d1:42:b4:51:77:38:6f:
4d:eb:6f:0a:f6:fc:f6:67:20:84:70:4f:7b:db:d3:
2b:c9:c6:ac:df:1c:06:1a:89:76:fb:55:6b:1b:db:
4a:a0:96:0f:4f:be:02:92:07:a2:50:4b:28:36:d2:
1c:8e:93:7d:58:a6:9b:84:13:12:6b:46:60:a9:ac:
cf:e5:2a:8c:70:38:6c:c7:53:f6:43:68:03:a2:79:
22:60:c3:c0:98:52:de:52:c1:3c:41:0f:9d:d9:76:
97:49:44:7b:56:99:80:41:14:ef:68:47:fe:cd:0e:
28:29:a9:69:2c:0f:d9:39:f6:f6:7c:9c:9f:6a:24:
05:0c:66:5e:5e:21:b8:0b:64:12:a7:e3:ad:46:8a:
49:4c:48:a9:11:e0:cf:11:74:8a:09:97:7d:77:6e:
8e:7e:b5:42:4c:0f:81:e8:64:58:c6:7d:bd:a9:d8:
85:ec:56:55:5a:90:ba:eb:fd:3b:0f:87:57:22:19:
b0:55:06:c9:a5:3e:4d:4f:44:ef:bf:00:7a:e5:d4:
33:f4:dd:d3:7a:8c:e0:f0:c0:b3:a8:ff:63:2c:3d:
43:32:9d:07:ab:fe:2c:f1:fb:a9:3a:67:8a:84:50:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:8E:93:97:C2:61:4D:EE:B4:CE:AB:A0:3E:9A:D4:F0:52:F1:98
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yG-Ok5fCYU3utM6roD6a1PBS8Zg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.1.176.0/20
Signature Algorithm: sha256WithRSAEncryption
36:7c:d3:e8:a2:64:f1:73:9e:47:fd:58:d3:28:80:99:4f:10:
0a:26:a5:39:4a:3e:c9:41:0c:b9:3a:dd:04:64:39:2d:c9:65:
9e:5a:04:94:2b:ef:39:11:3d:a8:35:78:b4:85:d4:2e:c0:f6:
dc:d3:c7:08:a8:ca:bb:b7:44:42:13:8c:94:27:fd:4e:09:8b:
d9:31:51:51:1d:d6:ad:68:e7:5a:74:4b:15:5a:b5:56:cc:70:
f9:ad:98:9f:9e:40:66:83:26:94:9f:95:7d:73:ed:08:2d:75:
71:1c:f5:34:88:98:09:23:9e:fb:a6:bc:b7:9c:13:75:d9:50:
36:5d:a2:d5:52:50:ea:c3:30:60:c9:53:26:2e:e2:28:6e:46:
af:85:a6:6e:b7:4d:10:08:59:83:7f:a9:1e:8d:37:c8:33:e2:
06:0e:14:4e:3c:d7:32:14:ad:e2:42:a5:76:98:c7:bd:62:1d:
f3:70:0e:2e:79:4d:a9:b4:39:34:a9:65:1c:f8:84:bd:a9:96:
73:0b:0a:fb:48:0a:01:1c:0e:3b:15:00:ca:18:50:5a:3b:5a:
a9:74:e7:07:b6:fb:be:a5:19:c5:e4:e8:33:87:4f:21:8d:59:
74:28:f2:f4:8d:1f:9f:2d:cb:b6:16:7e:7d:41:1e:61:83:ee:
59:0d:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 01:55:10 2023 by rpki-client on console-ams.rpki-client.org