Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/-n8pPQYm_NprPPOyad-VqKKusu0.roa
File: -n8pPQYm_NprPPOyad-VqKKusu0.roa (raw, json)
Hash identifier: NIUy5F5ooe3y8vBtXHoh9bYDQEmEo0H/uY5XT0FEadI=
Subject key identifier: FA:7F:29:3D:06:26:FC:DA:6B:3C:F3:B2:69:DF:95:A8:A2:AE:B2:ED
Certificate issuer: /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial: 06
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/-n8pPQYm_NprPPOyad-VqKKusu0.roa
Signing time: Thu 14 Sep 2023 00:30:56 +0000
ROA not before: Thu 14 Sep 2023 00:30:56 +0000
ROA not after: Fri 30 Aug 2024 02:51:12 +0000
asID: 2519
IP address blocks: 219.121.249.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 16 Aug 2024 02:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Validity
Not Before: Sep 14 00:30:56 2023 GMT
Not After : Aug 30 02:51:12 2024 GMT
Subject: CN=FA7F293D0626FCDA6B3CF3B269DF95A8A2AEB2ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:77:cb:ec:44:04:87:4e:90:b9:94:a9:dd:
ba:e5:9f:44:c1:c5:f7:da:78:da:f6:f8:94:83:75:
57:bd:4d:ac:ca:08:0f:ce:c2:c6:67:3a:2a:41:ba:
3e:d4:69:9a:93:37:b4:10:b3:9b:53:4e:8a:ff:31:
04:5f:33:9d:21:48:8c:76:5d:35:31:76:64:67:1a:
33:ca:b7:a1:6f:6e:ad:76:bd:a1:e1:ec:45:0b:88:
57:bd:df:3d:75:ed:31:ae:ad:c1:7f:84:9d:f0:14:
0e:1b:8d:24:96:1d:ca:ae:35:44:69:07:84:db:84:
07:bb:89:33:4f:c0:69:1c:57:30:c5:b3:6a:d4:8e:
60:0b:fd:cd:e8:ca:a8:e5:29:5d:3e:07:2f:9c:4f:
d8:59:d7:6d:56:82:f7:df:de:f6:4d:c5:87:47:f8:
89:85:04:a0:1b:49:ed:75:87:85:9a:c3:40:2a:30:
8c:0b:90:a5:65:e2:00:f5:01:03:51:a2:78:42:ed:
68:32:d1:c5:31:6e:26:bd:f6:53:81:c9:22:3b:da:
44:c6:fb:40:f9:b5:93:31:6c:3d:70:04:c3:9b:3a:
e0:f8:a3:d3:57:06:86:bf:c2:f2:ab:05:21:4e:1d:
7a:b9:f9:93:a8:9b:aa:02:e7:63:a9:e8:c8:5e:95:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7F:29:3D:06:26:FC:DA:6B:3C:F3:B2:69:DF:95:A8:A2:AE:B2:ED
X509v3 Authority Key Identifier:
keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/-n8pPQYm_NprPPOyad-VqKKusu0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.121.249.0/24
Signature Algorithm: sha256WithRSAEncryption
96:bf:5b:ea:de:f6:f5:af:d2:7d:7d:43:5c:57:c0:af:a7:cc:
24:e7:08:b5:4e:72:14:4e:2e:70:a5:c5:62:fd:95:47:b1:f6:
dd:f1:d1:44:ad:14:82:92:4d:9f:2b:79:7a:49:38:74:d4:8b:
5d:ea:9d:e3:b1:6b:e4:7d:16:9b:bc:db:05:a1:8f:72:95:f5:
8c:ef:c4:99:62:ea:f2:81:c4:4c:4f:e4:1d:99:98:ba:97:df:
61:29:91:e2:9c:0f:d5:b5:9a:fd:1e:12:70:4f:a7:c5:3a:0c:
ca:53:bd:30:3a:bf:03:b5:db:83:4d:c8:e8:4c:40:47:1d:df:
42:39:01:14:72:cb:66:e3:a8:ab:c5:c0:57:c1:49:a9:39:14:
c0:95:f2:eb:d4:40:44:67:62:83:23:67:e5:6a:83:6f:4d:5c:
d5:57:45:68:00:90:68:1f:af:27:9d:12:e7:f4:9f:a7:05:af:
99:40:93:12:2f:d9:9c:4d:32:4e:26:a8:c9:76:9e:da:ab:e2:
06:d3:5d:ef:63:7e:b9:ca:5b:ae:5f:a3:89:2a:67:6f:09:89:
08:2a:67:45:ec:f3:1c:e4:29:45:11:4c:0b:d6:68:dd:66:c9:
5a:8f:7b:59:c6:2a:83:47:c4:f3:6a:17:71:f5:77:80:a9:bc:
31:d9:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 05:45:31 2024 by rpki-client on console-ams.rpki-client.org