Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/kX-LGxJriW2BbxC_ALIVosIKaTk.roa
File: kX-LGxJriW2BbxC_ALIVosIKaTk.roa (raw, json)
Hash identifier: q59Idy89xk5Z4N3SpF+eCjmxppVvqpp0+WApE/0MuYQ=
Subject key identifier: 91:7F:8B:1B:12:6B:89:6D:81:6F:10:BF:00:B2:15:A2:C2:0A:69:39
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 0E
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/kX-LGxJriW2BbxC_ALIVosIKaTk.roa
Signing time: Tue 15 Aug 2023 00:56:46 +0000
ROA not before: Tue 15 Aug 2023 00:56:46 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 38628
IP address blocks: 120.50.160.0/21 maxlen: 32
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Aug 15 00:56:46 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=917F8B1B126B896D816F10BF00B215A2C20A6939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:29:39:82:f5:d2:c6:d3:9a:a1:93:01:2e:
61:f5:af:a8:b1:bc:81:af:13:d4:d7:98:f5:aa:e7:
ed:7d:c8:df:a5:a3:04:45:f0:54:5d:a6:0d:0b:d2:
b6:1c:14:cf:26:9a:57:e7:69:24:42:02:9e:bb:eb:
7d:2d:ff:bb:37:15:c2:ae:05:fe:3a:c6:b8:77:3c:
8d:fa:48:c1:3a:84:1e:a6:5c:2a:97:ee:9b:f0:80:
02:ab:57:48:60:a0:9c:48:4f:2c:9d:c9:5b:28:25:
32:0e:c8:02:d5:13:4f:5b:1f:ab:cc:52:0c:6a:39:
4f:a3:04:94:af:25:ef:c1:0d:d7:58:ce:8f:49:de:
a2:65:bf:f3:f6:92:16:9d:91:ce:aa:2b:18:2b:ac:
d8:b2:2f:5e:96:5e:8f:3c:8f:a5:a4:e5:25:1a:c6:
7a:dc:bc:c1:07:9e:d0:a0:30:f6:4c:c9:b7:ae:3e:
cb:87:e0:dd:dc:e7:e7:ae:43:2e:76:89:af:ed:80:
ca:0f:c9:0a:9d:da:55:1d:ee:c4:74:d1:e9:a1:d4:
a8:e0:9e:ca:39:03:ae:48:ba:88:01:2f:c0:3a:2b:
c7:0f:40:70:e3:f4:3b:b3:e6:87:45:3a:57:a2:bb:
65:4b:6b:82:69:59:22:4d:cf:7e:a4:66:a7:94:c4:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7F:8B:1B:12:6B:89:6D:81:6F:10:BF:00:B2:15:A2:C2:0A:69:39
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/kX-LGxJriW2BbxC_ALIVosIKaTk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.50.160.0/21
Signature Algorithm: sha256WithRSAEncryption
25:25:bf:aa:c5:34:f1:94:90:6d:21:c2:1e:48:01:8c:81:c7:
bd:f6:bd:ba:21:3f:2b:e9:5e:5d:1e:c3:6b:f5:b4:6e:a4:d9:
8e:fd:f4:28:be:69:e1:7a:0a:bf:10:b4:79:1f:55:e6:51:7c:
66:19:f5:55:1c:80:a6:10:b7:17:c1:0b:66:b1:5a:2c:1d:ea:
b0:76:c3:45:49:f4:78:9a:21:c7:97:21:0f:0b:f3:7b:c4:19:
3b:d9:d4:05:a9:91:32:a8:9f:53:65:62:0c:a7:39:6e:38:36:
dc:96:42:b1:d8:96:03:11:63:62:a9:3c:6c:1f:31:33:c5:33:
7b:5a:82:fd:00:b8:d8:58:f9:8f:41:35:fd:10:6e:9e:8d:b4:
79:bc:8e:a5:da:03:43:40:4c:9b:f0:7f:0d:14:83:19:8a:cf:
d3:16:e2:3b:54:5b:c5:f7:b8:53:3f:c9:d1:fa:d1:eb:11:dc:
4a:c6:94:e9:72:2c:c8:d4:93:96:19:07:a1:e6:8b:23:b5:3c:
d9:1c:78:d1:58:2e:90:43:54:04:8f:e6:19:10:43:b4:3e:5e:
ef:96:00:4c:12:c4:3e:98:36:12:41:7c:00:ad:ba:ec:b8:fe:
fc:7a:04:0d:85:c0:26:25:29:87:44:c0:82:7e:d7:a3:d0:05:
39:75:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:27 2024 by rpki-client on console-fra.rpki-client.org