Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/sQ1P3bAne820xm_bRQhBOSBXyoY.roa
File: sQ1P3bAne820xm_bRQhBOSBXyoY.roa (raw, json)
Hash identifier: 1n7pH6xPv3WWDCBqiTZc/r4iY0Tm+MV4C/COGrug5D4=
Subject key identifier: B1:0D:4F:DD:B0:27:7B:CD:B4:C6:6F:DB:45:08:41:39:20:57:CA:86
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 2A
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/sQ1P3bAne820xm_bRQhBOSBXyoY.roa
Signing time: Mon 01 May 2023 01:29:26 +0000
ROA not before: Mon 01 May 2023 01:29:26 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 23778
IP address blocks: 116.50.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: May 1 01:29:26 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=B10D4FDDB0277BCDB4C66FDB450841392057CA86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:9e:85:34:16:9b:d3:a8:6c:93:0a:7f:ca:
ef:1f:64:14:24:a0:01:3b:ab:d1:8a:aa:ca:54:70:
4f:c4:77:32:57:ed:7b:7c:3a:41:4a:f8:df:45:1e:
13:fe:80:72:63:7e:26:7a:6d:ea:d5:2a:fb:9d:2f:
9b:96:84:b4:a2:7a:17:19:18:2e:58:7d:77:17:6b:
b6:19:a8:fa:47:44:6e:95:c9:11:80:01:8b:8b:86:
09:c5:41:c6:ad:a2:85:9c:3d:0a:b2:c2:32:9b:9a:
39:ab:15:e4:e3:03:6e:ad:a5:25:77:9f:cf:4d:75:
7e:4a:b1:c5:8e:3f:2f:ad:6f:60:35:db:59:89:6f:
37:4e:00:bf:c0:0d:76:ff:65:fd:76:2b:a5:dd:36:
a9:23:25:e2:37:44:14:7d:93:52:2c:db:6c:95:1e:
e3:d4:6b:bd:69:5d:95:93:30:6e:c4:49:fc:06:95:
2c:bf:08:2b:cf:6e:81:5a:47:87:e0:98:66:e5:37:
e7:c0:ae:37:a2:07:e1:53:fc:85:46:e2:16:2f:39:
b1:59:56:46:98:db:70:e8:b0:32:68:c4:23:ae:c6:
0f:05:d8:c1:4c:4f:37:ec:69:28:51:07:96:e0:60:
a1:f1:45:7b:34:e4:1e:63:7a:4f:fe:87:f2:4f:d1:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:4F:DD:B0:27:7B:CD:B4:C6:6F:DB:45:08:41:39:20:57:CA:86
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/sQ1P3bAne820xm_bRQhBOSBXyoY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.50.48.0/21
Signature Algorithm: sha256WithRSAEncryption
33:6a:a4:ef:53:67:2e:07:04:b4:ea:c0:55:11:be:e1:4b:a4:
88:1c:03:26:b2:bb:0b:d1:79:52:30:24:28:7f:f4:dc:d5:6a:
1b:32:dd:0a:00:df:e2:41:20:3b:cd:00:38:04:db:15:45:f9:
1a:80:d9:b0:85:5b:f7:02:3d:3f:4b:3c:e3:e8:ba:43:89:0b:
aa:d7:24:ed:cd:2b:72:cf:aa:b6:18:00:75:1f:ab:d3:ce:e6:
6d:78:9e:43:7d:c9:68:e3:60:10:e2:7d:1b:27:0e:68:83:2f:
df:51:ca:3f:0a:65:b8:ba:15:d3:c8:01:aa:c0:44:69:ad:0a:
6a:b3:91:41:da:36:35:1d:99:13:f7:5b:58:72:6f:49:e7:fb:
eb:4c:1f:0b:e0:5a:ca:c4:4e:2f:0c:68:f4:eb:24:24:66:ae:
3c:0c:2b:e9:d4:ec:8a:51:ab:8b:90:fe:e9:13:0d:05:79:d1:
c2:20:1f:be:95:71:cd:2a:45:9a:77:cc:04:4b:69:e1:d0:6a:
2d:e5:0d:11:a5:0b:86:cb:c5:7f:40:6c:73:fc:f1:77:63:da:
66:b9:a2:2b:0a:12:1d:5c:1d:aa:3b:a8:58:c6:78:5f:7f:92:
db:de:10:07:3b:39:39:5c:8a:4a:10:f3:0c:f4:e6:8a:9b:57:
59:a1:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org