Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/IVxRex1VddORY_tYEyTslEPsoto.roa
File: IVxRex1VddORY_tYEyTslEPsoto.roa (raw, json)
Hash identifier: H1yLvgzPPG25Ln99fTUZEzYoibbJr18g6Cxj5S6uypk=
Subject key identifier: 21:5C:51:7B:1D:55:75:D3:91:63:FB:58:13:24:EC:94:43:EC:A2:DA
Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial: 35
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/IVxRex1VddORY_tYEyTslEPsoto.roa
Signing time: Sun 01 Oct 2023 01:29:45 +0000
ROA not before: Sun 01 Oct 2023 01:29:45 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 23805
IP address blocks: 103.42.168.0/22 maxlen: 32
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Validity
Not Before: Oct 1 01:29:45 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=215C517B1D5575D39163FB581324EC9443ECA2DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:b7:8b:3f:9b:14:03:d7:8a:57:e0:9d:64:
4f:d3:bb:b6:3d:00:06:d6:74:a6:da:64:9e:b5:f7:
ac:14:f9:92:dc:3f:43:94:c4:ed:3c:e7:4f:68:df:
32:f7:5a:bd:c1:04:1e:99:10:31:d5:d3:48:02:e2:
b1:36:5d:f8:57:48:1e:31:c7:cb:ad:b0:e6:e4:4d:
7d:ce:9e:6f:92:a2:83:03:cc:11:a8:31:89:28:bf:
63:dc:ea:69:1e:91:e9:6d:a6:83:32:52:21:29:e9:
c5:40:b4:61:b1:05:d6:74:e7:34:72:4a:27:37:8b:
84:bd:6c:2d:59:91:f9:f3:5b:13:55:af:1b:a4:ef:
5d:3a:dc:ef:0c:2a:85:c9:f8:fc:e1:e4:9a:4b:03:
f6:fc:27:d8:ca:30:94:4b:11:88:d2:79:74:88:82:
34:16:7e:7b:44:2f:66:fe:95:d8:33:e0:06:76:54:
75:06:ca:d6:39:b4:0d:20:99:55:eb:a9:c3:a7:9a:
f9:b9:f2:53:05:02:f5:aa:23:dc:1f:ea:d1:82:cf:
5b:48:7b:cd:26:cd:c8:09:15:58:94:82:4d:c3:c6:
7a:76:27:49:12:88:88:ad:06:b6:5e:41:79:ef:ab:
1a:cd:f9:74:63:88:ac:75:33:66:03:e0:a8:14:cc:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:51:7B:1D:55:75:D3:91:63:FB:58:13:24:EC:94:43:EC:A2:DA
X509v3 Authority Key Identifier:
keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/IVxRex1VddORY_tYEyTslEPsoto.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:b3:65:0c:4d:5e:ca:54:ea:9b:1d:d6:8e:36:3e:44:83:25:
78:6b:f2:00:3f:93:be:14:5b:4f:eb:6b:42:92:9c:79:68:50:
d2:95:b0:5c:94:0c:df:6b:80:65:aa:a5:19:33:f9:b5:91:1a:
a6:5f:c1:43:98:0b:5e:0a:47:20:17:b5:4a:80:d3:94:bd:6c:
eb:ec:55:b8:29:e2:eb:cf:59:cd:92:e6:e3:51:f4:c4:13:8e:
82:8e:52:7e:68:d1:7d:ac:36:a3:7a:a3:18:c3:e0:0e:ef:bc:
1f:9d:ee:1f:0c:8f:0f:b7:15:fa:bd:c1:07:fa:50:bf:20:90:
f8:e3:81:e6:bd:30:24:60:4e:5a:9b:67:43:54:38:45:6d:31:
de:78:8c:5d:de:8f:bf:db:ca:f6:65:e8:0d:c1:9e:f5:b8:be:
1b:d6:bb:b2:27:a4:3f:02:1c:0c:93:b1:ce:f3:61:52:c5:f3:
a8:a0:77:5f:d3:92:7b:08:07:42:bd:79:2b:95:fe:32:ef:a4:
ea:e4:79:06:b7:fa:c0:e2:06:61:d6:66:8b:41:60:f8:22:00:
b5:e3:d6:ec:a9:1d:f8:e7:ec:e6:51:f0:41:c6:ac:d6:71:79:
4c:6e:e0:8b:65:b7:35:15:1c:1b:65:db:c8:50:aa:a9:ad:d3:
27:9c:e3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:56 2024 by rpki-client on console-ams.rpki-client.org