Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/DihJrjs9GlSeaVjK1tnC9Q3qubI.roa
File: DihJrjs9GlSeaVjK1tnC9Q3qubI.roa (raw, json)
Hash identifier: Yc2UbmuTSxuhpv8qd2aUTC6FjoIq5/jb8fLJqPX5i6s=
Subject key identifier: 0E:28:49:AE:3B:3D:1A:54:9E:69:58:CA:D6:D9:C2:F5:0D:EA:B9:B2
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 60
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/DihJrjs9GlSeaVjK1tnC9Q3qubI.roa
Signing time: Fri 01 Sep 2023 01:29:21 +0000
ROA not before: Fri 01 Sep 2023 01:29:21 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 9621
IP address blocks: 211.120.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 01:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Sep 1 01:29:21 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=0E2849AE3B3D1A549E6958CAD6D9C2F50DEAB9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:4e:a7:aa:96:86:11:01:4a:35:55:3d:28:
33:b1:67:2a:33:13:c8:1d:cf:f0:70:d1:90:4a:2c:
f5:56:87:9d:40:da:2c:f7:94:fe:75:0a:7d:77:0f:
c1:91:16:47:5b:6c:33:d5:2f:da:37:80:6a:cd:58:
9c:98:e7:6b:86:64:92:79:e0:a1:b8:35:0f:9d:d4:
d3:70:c7:80:b4:ce:b1:bb:4f:8f:25:81:0c:d8:07:
fb:53:34:65:91:0f:bb:f2:3c:fb:93:00:ce:5c:94:
59:f2:ea:18:1e:4c:56:37:bf:cd:a5:d8:dd:73:80:
80:75:df:de:f8:f3:9e:f7:f9:78:14:f4:d2:90:bd:
1f:62:ef:ae:e3:6d:51:8a:a2:50:69:a9:d7:d7:de:
ca:d1:c4:72:9f:f9:1a:52:38:12:79:8a:56:e8:28:
11:b7:99:07:26:5e:c2:db:95:78:e4:f7:d5:e4:f3:
be:e6:2b:e1:7b:37:82:33:cb:e9:a9:8c:7e:41:28:
37:ee:a8:80:4b:2b:c2:66:6e:38:c1:2a:ea:a4:f1:
3e:31:f0:31:a3:41:56:c8:ba:a1:6c:d5:f9:86:7f:
08:e2:90:d5:01:f8:8c:88:ef:f1:e4:36:40:a9:f2:
48:d7:18:37:e7:e2:08:72:1f:f0:81:2a:d1:c4:5a:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:28:49:AE:3B:3D:1A:54:9E:69:58:CA:D6:D9:C2:F5:0D:EA:B9:B2
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/DihJrjs9GlSeaVjK1tnC9Q3qubI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.120.224.0/20
Signature Algorithm: sha256WithRSAEncryption
23:da:c8:64:97:10:d1:ac:b5:fb:7a:25:f4:18:51:65:c9:12:
62:7b:46:35:c2:ed:8f:0e:0a:91:bf:63:6c:3d:7c:7b:c7:31:
57:2e:bd:66:b2:a1:be:d1:3b:c4:31:c0:f4:16:6b:18:ef:a0:
dd:ad:da:5e:23:39:9f:cb:89:7f:80:75:a9:d5:84:c3:37:a2:
85:0a:b3:57:35:b5:26:04:9a:e8:bb:73:8b:69:22:8f:7c:72:
66:0f:1a:b0:fd:9b:f0:d2:8d:4b:37:de:6f:38:bc:6c:ac:57:
50:78:7c:52:90:e5:3f:8d:61:ee:b5:15:19:40:56:e9:7d:f1:
3a:27:42:b9:ab:96:73:c3:1a:fc:43:c0:bc:d2:4b:56:e9:db:
14:38:d3:4f:d2:2f:e4:a9:07:0c:8d:2a:c2:98:1f:56:cc:39:
0b:e1:0a:79:b2:35:00:ae:df:3a:f3:11:87:8a:40:7e:6e:98:
06:4c:11:73:df:9e:d7:94:45:72:68:94:80:7d:ce:dc:f0:c7:
56:57:e9:a3:b1:25:e1:e1:e2:f4:1b:ab:a9:93:0d:d2:ca:37:
41:22:5f:99:3a:37:8b:fa:eb:23:c2:44:a9:fb:91:eb:b8:8f:
6c:98:eb:09:02:51:0e:b8:74:bd:c3:2a:71:94:ed:d9:39:ce:
6b:2d:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org