Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/zSok7DJuvMUsljeyJ1st9GS4JC8.roa
File: zSok7DJuvMUsljeyJ1st9GS4JC8.roa (raw, json)
Hash identifier: nbRrL18HKA8obpEFC2xMUTAb8t/NUgWmsQ+tBMb3o7c=
Subject key identifier: CD:2A:24:EC:32:6E:BC:C5:2C:96:37:B2:27:5B:2D:F4:64:B8:24:2F
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 30
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/zSok7DJuvMUsljeyJ1st9GS4JC8.roa
Signing time: Mon 01 May 2023 01:29:29 +0000
ROA not before: Mon 01 May 2023 01:29:29 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 23778
IP address blocks: 219.100.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: May 1 01:29:29 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=CD2A24EC326EBCC52C9637B2275B2DF464B8242F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:c7:38:7e:73:87:f0:46:45:e6:45:2c:2a:
37:28:c4:42:5b:e4:ae:91:2a:e5:a2:b0:8b:cd:d0:
a7:2a:ec:f4:32:3e:db:64:20:d0:91:6c:3e:e8:2b:
89:ba:78:27:aa:cd:6c:be:97:66:a8:f0:c7:a2:5d:
6a:3c:b3:e3:55:17:36:7f:9c:97:29:20:bb:13:12:
ba:e0:bc:c2:97:85:78:8f:6b:f8:71:f3:96:3a:f3:
05:26:63:0e:9f:01:0e:b9:c1:be:a4:25:12:fb:64:
c7:93:34:9f:36:00:fe:17:b7:33:ad:4d:ed:3a:05:
d2:d3:11:5e:83:30:05:67:4e:0f:a1:c4:40:cc:c1:
11:3f:50:96:7b:89:b9:77:d4:5d:0c:c1:06:7c:d5:
2f:6d:0c:74:da:32:26:65:4a:63:e9:4d:2f:61:d5:
25:f3:a9:5c:68:84:e7:d1:94:02:99:91:24:cb:4d:
9e:82:c4:68:9c:c5:b0:fe:ee:b7:97:14:d3:17:2c:
0b:aa:5f:1b:49:31:45:97:4a:3d:ab:46:dc:d3:62:
92:83:76:58:74:46:2f:00:c6:75:3f:14:4d:71:5d:
53:ab:6e:37:70:df:3f:fe:88:e5:d1:b1:75:32:17:
cf:4d:fc:5b:2e:81:0b:3b:49:e9:19:31:44:03:6e:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2A:24:EC:32:6E:BC:C5:2C:96:37:B2:27:5B:2D:F4:64:B8:24:2F
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/zSok7DJuvMUsljeyJ1st9GS4JC8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.96.0/22
Signature Algorithm: sha256WithRSAEncryption
61:9a:c2:fb:98:74:a7:ea:35:68:86:3f:47:82:97:06:58:03:
aa:25:6b:dd:05:6f:a6:36:ef:05:dd:37:85:78:95:52:7f:d3:
06:ae:65:0f:cf:ec:3b:07:77:e1:30:2d:65:3e:ac:5c:67:ec:
50:51:c1:2a:0f:90:84:98:34:4d:1e:9f:92:43:f3:28:78:4a:
c1:3e:fb:91:c1:7d:cb:1a:3e:e3:ea:cf:43:7f:24:37:30:a6:
a4:7a:98:ef:4b:b3:be:9a:4d:c0:45:0b:5d:6b:40:cd:b7:cd:
95:ae:3c:3c:c7:4a:f7:ee:e3:38:c9:de:aa:55:f9:fb:59:bb:
c0:c6:9b:dd:6a:56:1a:26:72:da:19:f0:4c:f9:7c:7c:40:6a:
e2:41:7b:93:e7:ac:69:fd:f2:44:68:cb:d2:3f:aa:95:db:63:
85:ab:b0:0d:5f:d7:d5:2c:ff:15:94:54:6d:e8:5a:82:88:d3:
15:c4:03:cb:d5:09:06:8f:89:95:bd:a6:34:17:d7:1b:56:33:
6e:33:a3:9a:5d:96:7f:ae:12:a1:fa:50:0a:8f:53:8e:1b:a2:
34:6a:cd:ed:83:f6:e4:99:c2:77:d1:24:52:ee:eb:22:9f:85:
05:aa:71:6d:d2:23:0b:06:de:3c:3e:29:15:44:b5:39:ee:b7:
ca:41:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:23 2024 by rpki-client on console-ams.rpki-client.org