Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/4msWxVPnddV5_9Igj3BTlpd92KE.roa
File: 4msWxVPnddV5_9Igj3BTlpd92KE.roa (raw, json)
Hash identifier: pAYQUsbJO4YNx1EWlEurwulNgM0iQE+pRqq0I7PB9y4=
Subject key identifier: E2:6B:16:C5:53:E7:75:D5:79:FF:D2:20:8F:70:53:96:97:7D:D8:A1
Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial: 02
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/4msWxVPnddV5_9Igj3BTlpd92KE.roa
Signing time: Tue 23 May 2023 08:27:53 +0000
ROA not before: Tue 23 May 2023 08:27:53 +0000
ROA not after: Wed 22 May 2024 08:08:12 +0000
asID: 18283
IP address blocks: 218.223.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 08:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Validity
Not Before: May 23 08:27:53 2023 GMT
Not After : May 22 08:08:12 2024 GMT
Subject: CN=E26B16C553E775D579FFD2208F705396977DD8A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:c0:72:ea:8d:14:e2:ea:18:94:94:97:78:
f5:70:ec:e7:da:24:94:ab:ef:d8:7e:78:1e:e2:07:
77:9f:88:18:17:ca:03:0e:4c:36:33:71:4e:7c:d8:
27:94:f6:74:07:c2:a8:2a:06:94:6d:d5:43:6f:b5:
f7:a8:e6:a6:8c:31:9d:03:bf:60:03:fd:c9:91:3a:
69:42:9d:95:cc:91:24:60:b0:0e:08:eb:26:87:98:
9e:9a:d7:f8:51:b3:58:7d:6e:06:20:13:31:38:e5:
57:de:0b:50:f7:3d:83:14:63:12:97:2b:96:2d:52:
26:f9:29:fe:ef:19:f4:41:2e:ea:8f:13:28:60:d6:
d7:45:d5:89:19:fb:60:45:b7:e5:d2:b6:a3:04:d9:
3a:b1:e7:e3:69:67:08:45:52:25:08:6e:cf:24:a2:
e2:df:ef:ee:9c:ed:66:52:9e:3c:a1:2e:f5:95:57:
e1:9a:67:88:5d:48:2d:e2:89:b3:90:fd:8a:98:19:
51:35:fe:1d:5c:61:32:12:7e:bf:bc:72:07:5c:4c:
dd:77:f7:63:76:7b:27:0e:f8:31:c9:8d:bd:e5:1a:
8f:0d:a6:77:0d:b0:e8:3b:c2:ae:5c:bb:b0:b6:23:
8b:68:c3:27:41:89:81:46:9b:9d:c0:e7:cb:07:4c:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:16:C5:53:E7:75:D5:79:FF:D2:20:8F:70:53:96:97:7D:D8:A1
X509v3 Authority Key Identifier:
keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/4msWxVPnddV5_9Igj3BTlpd92KE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.223.224.0/24
Signature Algorithm: sha256WithRSAEncryption
19:16:0f:33:17:41:6a:81:5a:02:64:2d:de:31:25:ec:47:15:
cc:58:f0:06:03:9c:72:81:6d:c0:97:af:a2:d2:cf:3d:b8:b2:
6b:2b:cc:9c:f4:0c:d6:c2:cc:3e:72:40:4a:d1:e9:37:d6:6e:
26:45:ae:05:85:56:40:71:db:a2:fd:f0:1e:b3:fb:fe:16:92:
67:dc:c6:03:e0:a2:96:97:a0:ae:77:09:e7:9b:94:d3:2d:49:
a7:5e:c3:41:ad:1c:88:db:17:e5:bb:5c:09:0c:ca:6e:b1:0c:
2f:20:64:f1:f8:56:97:49:6a:6f:90:de:96:cf:a0:f2:d1:e3:
ae:0f:94:dc:42:0e:3f:cb:d5:f2:1a:26:f3:cf:c8:f9:5c:2b:
16:7e:c5:59:21:bd:fa:ff:bd:4c:11:84:24:ab:24:dc:29:ee:
39:cb:df:8a:7e:1f:eb:d9:5a:cc:0f:e8:57:72:0b:83:54:94:
ea:25:92:47:3f:4a:7d:e5:58:7d:a5:43:56:79:2f:2e:5c:58:
2b:2e:08:7d:d4:1f:a7:e2:0f:99:46:f7:e0:32:ce:e0:d8:af:
f5:75:13:dc:ab:bd:f1:a0:f4:3c:d7:06:01:28:f9:1f:eb:43:
1e:00:7a:8a:c3:44:5a:f5:88:2d:ab:58:ba:d0:c2:07:99:4f:
44:ce:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:33:27 2024 by rpki-client on console-ams.rpki-client.org