Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/hI1LJxcA5rc5DRs5cXC1KsEwQWc.roa
File: hI1LJxcA5rc5DRs5cXC1KsEwQWc.roa (raw, json)
Hash identifier: 1giPHLzZ7f+xHp6hbOAkYMc0+nXpE1goC75P3QyBY9U=
Subject key identifier: 84:8D:4B:27:17:00:E6:B7:39:0D:1B:39:71:70:B5:2A:C1:30:41:67
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 53
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/hI1LJxcA5rc5DRs5cXC1KsEwQWc.roa
Signing time: Sun 01 Jan 2023 01:29:22 +0000
ROA not before: Sun 01 Jan 2023 01:29:22 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 9621
IP address blocks: 218.40.160.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Jan 1 01:29:22 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=848D4B271700E6B7390D1B397170B52AC1304167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:c7:d9:20:3e:84:d9:42:b2:5e:4e:d8:8e:
dc:29:9b:cc:2b:c4:48:a4:88:ab:5f:cf:6b:fa:53:
32:de:3d:7f:5e:a8:a6:71:fb:c6:1a:89:5f:2e:c2:
e9:76:d1:73:22:0f:1b:24:d5:ab:d9:b4:57:16:a3:
32:73:fd:5a:0e:a6:f4:45:dd:41:0f:e9:62:63:1f:
be:da:af:f5:32:f5:36:88:3e:41:3b:a2:39:df:34:
66:55:e5:ed:1d:9b:1e:db:18:30:c6:a6:d7:14:28:
c4:c0:4a:5b:5c:6a:6c:63:22:e9:24:62:62:1e:6d:
1a:fe:e1:fa:f1:b2:83:4b:ab:79:a1:42:79:bf:57:
09:df:1d:57:88:bb:d2:1e:f7:5b:35:00:c6:5f:ad:
c4:d9:64:94:25:f3:85:69:25:a0:4e:de:54:2c:05:
6b:80:ea:0d:3b:9a:27:d0:d3:18:8c:47:29:55:8c:
46:8e:23:62:69:b5:80:7a:8e:75:37:d2:d5:bb:22:
e1:f4:29:2a:c2:91:be:df:ca:ac:fc:4a:58:68:b4:
ba:78:85:be:1c:25:63:50:81:27:df:2e:af:fc:19:
2a:0e:4b:85:fe:d5:8b:ac:fe:bc:76:e5:e3:39:c1:
dd:36:f5:8f:c9:33:58:c4:46:95:16:40:b7:29:6a:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8D:4B:27:17:00:E6:B7:39:0D:1B:39:71:70:B5:2A:C1:30:41:67
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/hI1LJxcA5rc5DRs5cXC1KsEwQWc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.40.160.0/19
Signature Algorithm: sha256WithRSAEncryption
06:f5:01:20:29:8a:8b:86:63:1a:7c:b2:0c:1f:ac:97:db:d4:
56:3a:53:b2:69:64:2e:3d:a9:c2:9e:2d:e4:37:cf:ee:7e:ad:
8e:9c:1a:85:96:a9:33:6c:b9:d1:64:33:23:d6:65:40:07:3c:
8b:a7:51:8b:c3:b6:87:24:ee:79:22:84:5b:71:77:bf:48:d4:
21:73:40:d9:19:49:2c:8f:7c:f1:56:ff:de:31:7b:28:2f:09:
6c:bd:95:0b:d3:c5:d6:0b:85:31:c9:fd:23:c7:55:29:15:19:
62:c7:fc:6b:01:35:69:cb:62:18:44:8a:20:68:30:0c:eb:13:
44:85:d6:73:eb:82:4c:85:29:51:6c:ab:55:24:9b:b6:5a:8f:
53:47:3d:24:ed:85:05:45:b6:35:eb:9e:51:da:66:97:91:be:
c0:74:9e:77:ee:54:22:a3:5b:3a:c2:ae:54:69:01:0d:75:ae:
21:84:e3:b7:b4:9e:a6:c3:ee:33:e0:f6:a3:8d:8c:9b:a7:8a:
b7:16:fc:4a:77:37:01:cb:bb:e0:ff:ca:9a:ea:56:b7:dd:fe:
cb:41:50:37:92:ea:d2:6a:98:01:3c:09:4b:71:01:77:60:54:
21:d0:d1:b5:78:69:45:f7:5d:93:70:7b:aa:2f:91:a9:33:b0:
fd:0e:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 02:02:47 2023 by rpki-client on console-fra.rpki-client.org