Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/XH5OZYj4U8NTrNjFlnKY9bFtHuw.roa
File: XH5OZYj4U8NTrNjFlnKY9bFtHuw.roa (raw, json)
Hash identifier: pwhQums6To1cYGBC/25G0Wjt4DMrOs3HFpapc+uBRno=
Subject key identifier: 5C:7E:4E:65:88:F8:53:C3:53:AC:D8:C5:96:72:98:F5:B1:6D:1E:EC
Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial: 08
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/XH5OZYj4U8NTrNjFlnKY9bFtHuw.roa
Signing time: Wed 02 Aug 2023 02:05:46 +0000
ROA not before: Wed 02 Aug 2023 02:05:46 +0000
ROA not after: Thu 01 Aug 2024 01:47:14 +0000
asID: 24259
IP address blocks: 123.255.232.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 18 Jul 2024 01:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Validity
Not Before: Aug 2 02:05:46 2023 GMT
Not After : Aug 1 01:47:14 2024 GMT
Subject: CN=5C7E4E6588F853C353ACD8C5967298F5B16D1EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:11:06:80:bb:7d:d9:96:0d:46:a7:e1:f2:
fa:7e:bf:0a:18:4b:da:68:4d:d8:4b:99:6e:1d:62:
e4:a5:5c:15:e7:90:af:b8:85:e9:53:a7:d9:65:37:
6a:b7:d5:0a:67:af:c4:8d:b7:50:89:4d:e9:a5:1d:
57:e1:16:2f:1f:f3:ea:ad:64:44:44:e7:c4:f0:ad:
0e:5d:1c:16:8e:29:10:03:2c:7e:42:df:2c:9c:e3:
a9:15:53:9e:59:de:d3:ba:00:48:11:68:20:c3:d8:
05:54:27:1a:0d:bf:bd:db:59:c3:ad:86:e5:2d:a5:
2f:26:bb:6c:39:4d:de:73:55:69:11:12:b1:0a:1d:
f5:4a:95:99:1f:bd:a3:da:a7:38:07:44:b7:a2:fc:
2a:1e:c9:72:fd:6a:45:9d:c1:81:3a:2a:08:70:04:
0b:a5:5d:60:52:82:0c:3e:ab:4d:3d:81:7b:f9:e2:
06:52:22:1c:c8:72:4f:30:86:70:ba:e5:6d:97:1f:
fc:6d:6f:0a:4f:d2:6b:ea:56:b1:61:c1:df:ff:e7:
08:b4:da:e4:94:27:49:5d:09:4b:29:9e:9e:9a:25:
52:7b:3e:fe:df:66:1d:3e:5f:47:b0:90:3b:48:6e:
df:c1:e2:2d:43:72:39:cf:a0:63:df:90:56:37:19:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:4E:65:88:F8:53:C3:53:AC:D8:C5:96:72:98:F5:B1:6D:1E:EC
X509v3 Authority Key Identifier:
keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/XH5OZYj4U8NTrNjFlnKY9bFtHuw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.255.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:0d:28:11:44:cc:83:7f:64:a0:76:79:af:0f:46:d5:df:32:
fa:cc:fe:13:43:d7:77:25:32:dd:41:d1:e8:9c:f5:0c:24:01:
93:95:9d:79:58:ea:da:3b:0f:bf:3b:fb:b5:b2:ea:6a:9f:a6:
a0:87:d3:97:7a:e7:b0:aa:b6:31:9c:ad:75:6c:4a:1d:11:8f:
8b:a4:45:d6:24:ad:cd:7a:cc:ae:35:a6:88:f2:44:4d:0d:77:
41:4c:e7:83:83:62:c1:39:17:0d:de:a1:b7:be:2a:54:b6:e0:
1d:3f:25:56:6e:f0:cd:08:02:e8:2b:d3:b3:fe:ec:05:f0:9b:
b0:49:f3:a9:3a:98:49:c8:cc:6e:45:cc:39:88:e9:4b:cb:3b:
e7:8d:73:51:de:44:aa:89:4f:ac:da:51:16:c8:a9:db:81:07:
19:cf:b0:f1:64:cd:54:6f:0e:a9:f4:a1:f7:6c:2d:50:17:da:
16:06:c3:10:67:2d:51:43:03:44:77:51:5f:28:24:e2:88:32:
2d:09:da:60:7a:1d:98:91:a3:85:fd:86:62:2e:ba:4d:05:e4:
64:de:f3:85:34:27:41:ee:55:f5:19:a7:40:c0:41:ad:c5:36:
e5:73:9f:0f:60:49:ce:af:88:0a:a4:e8:cc:7c:1a:b7:03:69:
36:b3:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 04:35:23 2024 by rpki-client on console-fra.rpki-client.org