Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/yFXivZ3wBfFf2eoZIGu4nN98YJM.roa
File: yFXivZ3wBfFf2eoZIGu4nN98YJM.roa (raw, json)
Hash identifier: WrwBLNDXlYqAhyQohTU7xiZmWjit2R/be5tqDdXX17w=
Subject key identifier: C8:55:E2:BD:9D:F0:05:F1:5F:D9:EA:19:20:6B:B8:9C:DF:7C:60:93
Certificate issuer: /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
Certificate serial: 11
Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/yFXivZ3wBfFf2eoZIGu4nN98YJM.roa
Signing time: Fri 07 Jul 2023 02:03:53 +0000
ROA not before: Fri 07 Jul 2023 02:03:53 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 23808
IP address blocks: 103.40.128.0/22 maxlen: 32
Validation: Failed, certificate revoked on Fri 31 May 2024 01:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
Validity
Not Before: Jul 7 02:03:53 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=C855E2BD9DF005F15FD9EA19206BB89CDF7C6093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:f2:bb:6d:bf:02:12:b3:f1:8b:93:27:81:
33:dc:50:d6:66:f7:56:de:fe:00:7c:b4:53:31:05:
2f:f1:1f:3a:b5:3b:86:1b:70:f1:b0:f7:03:9b:94:
fe:b9:56:9c:e7:1b:bf:1b:98:e0:f8:dd:54:69:a0:
c8:48:62:22:73:e8:d9:09:d7:60:e8:19:92:76:34:
03:e8:a7:da:0b:62:9a:0f:4c:21:ff:13:f0:52:c1:
7a:fb:59:56:ab:0c:0b:0e:82:3d:a1:c4:1a:a8:15:
1c:e9:32:55:ed:45:e1:8c:fa:9d:c5:37:07:17:12:
ce:63:b9:51:f2:65:55:20:38:32:4b:84:05:f7:8c:
52:60:e5:c3:49:7f:31:5b:00:e6:15:92:a4:0a:46:
f4:f0:b0:4c:83:9f:4b:cf:7d:16:45:10:c2:a1:bf:
57:90:a0:c7:f6:79:75:e3:ef:56:3d:60:d0:4b:2b:
ad:69:ea:10:0d:e8:1d:4c:df:f6:f1:5e:b7:fb:72:
23:08:45:98:6b:6e:04:00:bc:e0:22:97:4f:79:47:
4b:09:56:b2:76:29:be:92:c1:e3:e7:60:b9:a4:fb:
a7:f1:9d:f2:97:0f:2b:f4:17:4f:a4:54:7e:b6:12:
d8:b6:3b:64:51:ee:e5:d6:63:77:8b:c1:a9:26:17:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:E2:BD:9D:F0:05:F1:5F:D9:EA:19:20:6B:B8:9C:DF:7C:60:93
X509v3 Authority Key Identifier:
keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/yFXivZ3wBfFf2eoZIGu4nN98YJM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.128.0/22
Signature Algorithm: sha256WithRSAEncryption
74:bf:70:e8:a1:a2:cd:4c:eb:5d:5c:e1:de:64:4a:9d:60:0d:
32:72:5a:a8:06:8a:02:04:e2:f2:b4:e3:11:9f:59:28:fb:af:
3f:cb:9d:c7:c2:43:3d:97:bd:43:12:b2:a8:53:92:72:e8:4a:
1c:6b:ab:13:d8:2f:c9:0f:16:1b:7b:14:87:0b:d4:9e:9a:dc:
40:78:3b:70:b3:57:f7:28:08:f4:4f:f5:38:62:29:c4:14:59:
7d:b8:5f:07:88:be:26:ea:3d:e4:d5:9e:35:77:1a:28:68:4e:
03:93:fa:f4:ca:30:9c:91:89:ef:8d:f6:a5:c3:ed:c3:6f:71:
9c:c9:51:ff:1b:57:83:43:49:05:34:4f:dd:e9:20:37:5f:a5:
b3:4d:95:3f:6c:e1:0e:f8:3e:ef:02:c9:3c:35:bc:d5:58:69:
fe:fe:6a:55:63:e5:41:b9:17:78:c6:0c:e2:83:98:85:e0:c8:
8d:74:86:4c:e1:1c:be:d3:43:75:b9:32:de:9e:b3:3f:ab:ab:
79:01:0a:10:16:64:d6:d4:4c:d2:96:89:2d:5f:93:1f:d2:4f:
1d:aa:fc:22:5b:82:f4:88:29:c4:91:9c:98:34:24:59:94:99:
ee:09:03:c3:e6:77:a2:8a:29:7c:a3:7e:12:a5:27:c6:6b:e5:
f5:57:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org