Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/hdHPC2FhkcrSFUNIpYzR1pzI2TI.roa
File: hdHPC2FhkcrSFUNIpYzR1pzI2TI.roa (raw, json)
Hash identifier: D1IfhwI+Gbcb6j0Dn9uGcNP0sv4Ay2fMdZobabqZ/Zg=
Subject key identifier: 85:D1:CF:0B:61:61:91:CA:D2:15:43:48:A5:8C:D1:D6:9C:C8:D9:32
Certificate issuer: /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial: 0A
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/hdHPC2FhkcrSFUNIpYzR1pzI2TI.roa
Signing time: Fri 17 Nov 2023 07:33:10 +0000
ROA not before: Fri 17 Nov 2023 07:33:10 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 18278
IP address blocks: 210.251.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 31 Oct 2024 01:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Validity
Not Before: Nov 17 07:33:10 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=85D1CF0B616191CAD2154348A58CD1D69CC8D932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:7f:c9:7b:28:be:29:60:68:ae:e1:2e:16:
d4:bc:95:00:e3:37:21:15:ba:3f:0c:5a:22:53:a5:
db:1e:5a:a4:3f:4c:dd:ef:aa:52:5e:77:e2:3c:a7:
04:72:21:2c:5c:54:66:df:ae:f0:93:b7:c9:39:1f:
22:f7:31:d6:c7:34:89:62:ff:9d:06:78:c4:0c:26:
6a:b5:e2:9b:a2:cc:43:c8:7a:5d:26:a8:1f:8d:a8:
37:cf:d3:52:60:45:ab:46:d0:56:ca:53:03:b3:77:
09:11:63:88:fc:b9:a1:84:e9:d3:bd:87:c9:ee:97:
18:73:b5:ae:5b:5e:76:62:56:d9:f2:1f:0f:87:cd:
27:f6:1c:22:6e:d0:97:6a:1c:03:3b:79:5b:b5:96:
37:3c:96:0f:68:95:7c:be:82:d2:15:00:29:b7:9f:
61:aa:1c:b2:11:2f:bf:74:5c:8f:d2:30:86:38:b1:
f1:ed:3a:09:87:69:d1:da:22:75:5d:44:ec:04:5f:
3f:ed:e3:e8:1f:d2:0e:ae:70:3f:cd:de:bd:aa:c1:
34:78:58:a6:df:82:65:30:6b:b7:7d:e0:53:a9:bd:
9d:51:3c:84:2d:c0:71:db:c0:70:a8:4c:08:09:71:
de:60:a6:2a:11:5c:f8:31:f1:ac:8d:08:de:a8:bb:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D1:CF:0B:61:61:91:CA:D2:15:43:48:A5:8C:D1:D6:9C:C8:D9:32
X509v3 Authority Key Identifier:
keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/hdHPC2FhkcrSFUNIpYzR1pzI2TI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.251.176.0/20
Signature Algorithm: sha256WithRSAEncryption
68:8a:87:af:7b:88:f5:84:f8:61:c2:5d:84:3c:06:ac:bd:80:
ab:ce:3d:82:90:94:50:ec:dc:15:ed:71:19:5a:ed:6a:ae:c1:
c5:01:45:d7:95:f0:03:1f:12:ac:ca:75:b4:3a:32:00:84:ad:
03:c3:a3:bf:7f:7a:42:28:95:67:1a:6c:3f:e4:4f:fb:8a:9e:
de:e2:79:9a:95:4c:0f:fc:8f:92:c2:12:4e:9b:5d:30:a0:30:
59:93:40:43:0e:34:23:dd:53:c0:fc:d2:26:f7:3a:4e:b9:9b:
bc:fc:1a:83:a6:e4:3a:76:46:91:b9:0a:c2:70:ec:8e:42:6b:
eb:53:d7:4b:7e:2e:bf:66:29:fc:fe:53:2e:c8:47:da:ce:d4:
d9:ff:1e:f8:45:71:54:c3:3c:f7:36:db:9c:2a:71:e3:19:e5:
27:75:ba:e4:ff:f0:7f:00:fb:d6:bb:93:32:4b:8a:aa:00:68:
9a:3f:95:36:97:6e:92:f6:a7:cb:ac:9f:5f:b1:8e:2a:21:71:
75:f1:01:5b:11:f0:04:ed:f9:f3:42:b6:3c:fb:89:71:b5:31:
1b:ae:60:71:71:4f:df:e6:79:ea:00:c5:1c:fa:48:3c:7c:f9:
00:d6:81:32:fa:85:c9:f5:bd:19:03:a0:fa:8d:d2:4a:32:77:
57:42:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 05:07:20 2024 by rpki-client on console-ams.rpki-client.org