Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/i7K79XAKuNGyXROKOIfkTMDKbbY.roa
File: i7K79XAKuNGyXROKOIfkTMDKbbY.roa (raw, json)
Hash identifier: EgrMLeOwWU8H1D1XkjBhjjXrPHSkb0T2P02yw8KJ1Wo=
Subject key identifier: 8B:B2:BB:F5:70:0A:B8:D1:B2:5D:13:8A:38:87:E4:4C:C0:CA:6D:B6
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 2D
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/i7K79XAKuNGyXROKOIfkTMDKbbY.roa
Signing time: Mon 01 May 2023 01:29:28 +0000
ROA not before: Mon 01 May 2023 01:29:28 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 23778
IP address blocks: 210.235.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: May 1 01:29:28 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=8BB2BBF5700AB8D1B25D138A3887E44CC0CA6DB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6d:8b:0c:d1:ec:17:6f:7b:30:e1:8d:d5:ee:
ac:2a:05:4a:1d:6d:c7:d2:58:59:de:9d:04:5e:b4:
e9:95:ff:2b:05:36:07:c1:46:07:85:bd:75:61:8a:
a5:23:1f:3c:1c:04:78:7b:a9:b8:03:87:44:83:dd:
e6:f4:be:d8:bc:cc:01:bf:bf:1f:40:6b:cd:de:5e:
f5:f7:42:39:25:c9:0c:2f:9d:cd:dc:76:6b:f4:62:
61:36:ca:0c:d0:f8:f5:4e:00:b8:e9:58:e2:2d:e0:
fc:72:ba:9f:73:d7:51:b9:39:53:ba:af:43:2f:7d:
9e:0f:fa:48:80:fa:39:45:52:f0:24:77:10:f8:7c:
56:50:43:2d:85:b4:8e:46:49:1e:16:7f:e7:44:82:
66:10:b4:b3:81:87:9f:6d:bd:07:ee:27:2c:2b:1a:
c1:85:00:61:65:24:82:e9:7c:b4:72:e3:53:75:98:
5b:06:03:d1:2f:b8:60:90:76:e4:92:08:a2:20:35:
8c:18:19:68:c1:37:9c:86:15:40:27:b5:bc:fa:a2:
a5:5e:c8:ff:dd:78:b9:73:9b:c1:74:55:11:35:c9:
12:05:1c:ce:21:72:37:d7:b2:c9:04:90:31:40:62:
a5:fd:f5:b2:be:26:e8:fa:9d:a0:e9:df:44:29:9f:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B2:BB:F5:70:0A:B8:D1:B2:5D:13:8A:38:87:E4:4C:C0:CA:6D:B6
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/i7K79XAKuNGyXROKOIfkTMDKbbY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.235.36.0/22
Signature Algorithm: sha256WithRSAEncryption
54:1f:bc:02:48:63:77:7d:27:b3:cd:40:11:bf:af:c2:03:5b:
a3:ee:d0:1b:c1:cc:46:b1:ff:fb:a5:68:76:65:6d:3c:da:82:
a2:2e:f8:09:ad:5f:b2:e6:95:87:24:d6:08:08:7e:59:5c:5c:
5c:d8:d1:8c:c9:b6:ee:93:a3:cb:33:31:c4:2b:d0:59:9a:0a:
67:10:6d:24:af:e1:90:19:bc:f9:87:d5:a8:ca:26:e2:6a:99:
91:b0:8b:81:30:c2:1c:1c:91:57:77:ce:7f:29:15:15:09:4d:
69:b5:08:84:1c:7e:f0:f2:28:cd:cd:2f:76:2c:c9:cf:92:e7:
77:41:c2:64:75:71:b8:ff:87:cd:3c:8d:75:ce:f0:8c:5f:95:
8c:ec:de:2c:7b:ba:f5:57:53:6c:08:b0:52:48:37:ac:49:06:
85:1b:e4:e4:bc:28:a6:6f:9f:1b:92:c1:28:b9:db:23:bb:55:
6a:f5:b8:a4:1d:92:25:2d:d2:2d:9a:83:6d:a1:1c:ce:ac:34:
ea:e4:ec:6d:9c:5c:7e:a7:1b:9b:1e:1e:be:4e:ff:e5:09:42:
26:21:49:55:cf:29:62:83:98:0e:ef:da:2a:ca:2a:bc:b8:c8:
ee:77:26:f2:03:33:cd:ee:94:d7:00:ba:01:45:d9:d3:34:c5:
ab:12:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org