Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/syFtZAlbJMJ-mDaFf7LgCNMAdH8.roa
File: syFtZAlbJMJ-mDaFf7LgCNMAdH8.roa (raw, json)
Hash identifier: advvJJS+3BFc/TPNIrTvFzkx4mwHYXPnMiIeOBK4Frw=
Subject key identifier: B3:21:6D:64:09:5B:24:C2:7E:98:36:85:7F:B2:E0:08:D3:00:74:7F
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: 83
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/syFtZAlbJMJ-mDaFf7LgCNMAdH8.roa
Signing time: Sat 01 Jul 2023 01:28:28 +0000
ROA not before: Sat 01 Jul 2023 01:28:28 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 2518
IP address blocks: 221.170.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 01:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: Jul 1 01:28:28 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=B3216D64095B24C27E9836857FB2E008D300747F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:22:84:2b:54:b7:80:2a:6a:5c:09:79:da:
8a:d4:50:2e:1b:dc:ca:71:c2:2b:a2:f8:e4:9a:4c:
9d:bb:ba:00:62:f1:45:88:9a:54:7d:94:ee:ab:42:
72:b4:94:4a:ad:7f:4d:f5:aa:60:41:04:b8:f5:28:
25:ad:b8:84:1e:72:48:8c:3f:7e:2b:cc:05:bc:1b:
50:41:7b:6a:ab:06:12:42:8b:d0:07:68:88:ba:6e:
68:07:3b:b8:97:8b:83:c3:85:68:1b:13:cb:0c:e0:
36:5e:bc:e5:9b:6b:9c:5d:a4:38:c6:46:11:51:77:
48:3c:ed:32:d9:b2:db:5b:f9:16:14:45:55:a0:e1:
2e:cb:b1:b5:a8:f9:df:3d:c4:f7:59:36:4b:ba:44:
63:df:8d:e1:07:4d:4f:25:bf:89:2f:41:6d:81:65:
e8:d9:11:c7:21:c1:8e:24:d3:ad:fb:f9:f1:74:9c:
2d:94:d6:d9:83:41:77:92:aa:00:b6:c5:08:05:a5:
78:c1:70:08:50:7f:4e:27:ff:f0:a9:34:85:38:36:
32:37:5d:e0:bb:51:97:53:56:e8:3f:ac:f2:b9:77:
9c:26:32:e7:5f:30:47:65:89:4f:bd:26:07:09:e8:
ca:b4:2b:f7:db:bb:23:f2:b6:fb:82:8e:36:a3:f1:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:6D:64:09:5B:24:C2:7E:98:36:85:7F:B2:E0:08:D3:00:74:7F
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/syFtZAlbJMJ-mDaFf7LgCNMAdH8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
221.170.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9d:a2:43:c0:e5:1f:3d:3b:eb:fc:9c:98:57:60:7d:88:a4:94:
90:cf:54:e1:d8:fd:e3:e0:e2:94:07:2f:51:a6:70:ba:83:c7:
2b:ba:a4:96:7c:38:55:87:31:95:4d:42:1a:e8:ba:71:e4:94:
fc:5f:64:98:02:44:90:a9:7f:03:82:57:cb:df:3d:a8:43:d5:
74:b4:62:49:60:c2:c7:b4:a4:df:3c:36:bf:c2:01:f0:80:8d:
df:bc:4f:d0:ce:e1:b7:bc:53:ea:67:c7:a9:6f:25:5d:f6:b6:
6d:de:17:d0:12:27:f0:1c:32:c3:9e:29:62:3d:f6:24:c3:58:
3c:85:85:85:67:1b:c2:4e:f3:a5:08:66:55:b2:79:ae:0d:96:
dc:ae:c9:30:ce:a1:67:45:68:8f:a3:c7:5e:7c:ee:d5:cf:0b:
1f:1e:83:82:f5:3a:bf:61:6d:c8:74:a2:60:ff:c4:a6:ef:8d:
b5:78:a5:0b:02:e1:90:b0:2b:10:85:2f:68:6d:86:0d:c7:e9:
5a:9f:a8:c8:77:34:e6:77:76:49:28:d6:9a:cc:42:66:80:24:
ff:1d:78:b2:e7:c9:78:8b:a3:93:68:b3:09:b3:d2:98:7b:29:
31:59:fe:21:b6:10:c6:0c:cd:89:04:c4:ca:7e:ff:6f:91:e4:
97:75:bf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org