Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/zbgYKpbUUnL2vJw8DnQCtQPVGIw.roa
File: zbgYKpbUUnL2vJw8DnQCtQPVGIw.roa (raw, json)
Hash identifier: 5NPrKTnT62gS8Cdl+WLdKnm6RwTNtldM4Fq9wNOoMbU=
Subject key identifier: CD:B8:18:2A:96:D4:52:72:F6:BC:9C:3C:0E:74:02:B5:03:D5:18:8C
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 52
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/zbgYKpbUUnL2vJw8DnQCtQPVGIw.roa
Signing time: Sun 01 Jan 2023 01:29:21 +0000
ROA not before: Sun 01 Jan 2023 01:29:21 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 9621
IP address blocks: 123.108.192.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Jan 1 01:29:21 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=CDB8182A96D45272F6BC9C3C0E7402B503D5188C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:16:18:19:22:5d:d6:37:f3:6f:43:25:2a:
a3:2f:34:c7:45:a3:2e:05:94:6e:67:b5:fc:8b:9f:
ff:26:72:8d:1f:0c:f3:e2:0e:cf:0b:71:07:81:ea:
53:54:da:9d:53:a0:1d:eb:88:00:ae:16:f5:b6:ab:
61:5c:ba:c4:8d:cf:66:10:23:a0:e2:40:95:b4:b1:
2e:f9:5c:c1:88:ec:78:eb:c8:ae:79:03:bc:61:02:
2d:44:76:09:0c:67:38:fb:b0:d4:93:af:7a:04:45:
f9:18:86:04:d6:0f:2a:62:fb:3a:1f:f6:b1:fc:64:
e1:e6:a2:b0:38:47:f7:96:d0:c3:cb:df:ae:04:d0:
cb:da:74:23:73:c9:47:44:1d:35:8b:1b:7c:03:e3:
fb:65:80:e2:1e:93:84:68:94:93:a9:d1:aa:cf:57:
e4:75:e4:c1:af:20:f0:77:66:2e:89:29:90:2e:d0:
46:c4:e5:fd:25:c8:fc:78:ef:9b:ed:b3:d3:c2:01:
ce:5a:f2:9b:a8:3c:c8:d6:82:a3:68:dc:bb:92:31:
06:31:3f:c5:c1:c9:ba:e1:5e:fa:3e:5a:3a:d7:75:
2b:34:96:01:bf:fb:70:7e:63:94:65:cf:22:94:b8:
dc:05:69:41:61:19:28:13:ae:10:bb:31:42:9b:0c:
f1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:18:2A:96:D4:52:72:F6:BC:9C:3C:0E:74:02:B5:03:D5:18:8C
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/zbgYKpbUUnL2vJw8DnQCtQPVGIw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.108.192.0/21
Signature Algorithm: sha256WithRSAEncryption
32:c0:3f:c6:03:b6:1c:57:7b:9c:be:f6:0d:94:51:ff:79:f5:
04:22:e3:b2:a7:df:ab:1a:d6:71:57:2d:66:f9:f9:f8:44:f0:
1c:ab:36:06:5f:6a:c1:95:d0:c4:bd:d8:63:53:23:bb:0b:e3:
74:c1:61:c0:55:ed:27:f4:18:a0:d8:f2:e3:16:a2:38:5b:b9:
8f:95:f8:25:a3:c7:09:44:38:65:2c:fc:de:d3:38:04:1c:a1:
6e:33:7b:4e:01:41:1f:ae:32:66:c7:f8:a3:ae:2f:4b:bb:1e:
5a:ae:cd:4b:85:64:10:cd:3e:94:81:ec:98:be:55:88:7e:36:
9f:0d:2e:92:df:22:30:1f:20:75:40:ca:aa:5d:8e:c5:36:3d:
a5:bb:53:63:ad:47:cf:22:ce:ac:06:1f:fb:43:fc:4a:a9:d6:
e1:a4:36:4d:f0:16:12:4a:b5:62:d5:59:8e:0a:ea:95:19:a5:
52:1f:af:38:c8:71:be:74:44:76:59:6f:7a:f1:eb:e0:0f:89:
3a:ad:fd:fe:69:96:98:44:d1:08:31:7d:e8:9b:3d:cf:de:73:
47:0f:27:1d:da:bc:f3:03:7d:86:07:a9:cb:5f:15:c9:b5:46:
cb:2d:57:6e:30:82:5b:74:e6:7a:bb:50:c1:8b:bf:b7:74:de:
1f:02:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 02:02:47 2023 by rpki-client on console-fra.rpki-client.org